Privacy Policy

Last Updated: 14.07.2026

This Policy is subject to change over time, so we recommend reviewing it periodically to stay informed about how your data is handled.

This Privacy Policy (“Policy”) describes how Casino Lucky7even collects, use, disclose and protect your personal data, in line with applicable data protection laws — including, but not limited to, the Personal Information Protection and Electronic Documents Act (PIPEDA) and the General Data Protection Regulation (GDPR).

1. General

Lucky7even (“Casino” or “we”) is operated by Metlait SRL.

We act as the Data Controller, since we determine how and why your data is processed within the scope of our relationship with you, as described in this Policy.

Our Data Protection Officer (DPO) is available to assist with any concerns about your personal data or questions about this Policy — reach them at [email protected].

2. Data Processing

We only collect and process personal data that’s adequate, relevant and limited to what’s genuinely needed for the purposes it’s processed for.

We may collect and process the following categories of personal data:

Identity data: Full name, username, date of birth, gender, nationality, and official ID numbers (e.g. passport or ID card).

Contact data: Residential address, proof of address, email address, phone number, and other contact details.

Financial and transaction data: Bank account details, payment card information, and documents verifying your source of funds or wealth (income declarations, bank statements), along with records of your deposits, withdrawals and other transactions on our platform.

Gaming activity data: Games played, login/logout timestamps, wagering activity, bonus usage, and any responsible gaming interventions.

Technical data: IP address, location data, login credentials, browser type and version, operating system, time zone settings, and other technical details about the devices you use to access our services.

Marketing and communication data: Your marketing preferences and any communications exchanged with our support team or other channels.

Other voluntary data: Any other personal data you choose to share when using our services or contacting customer support.

We gather personal data from these sources to keep it accurate, stay compliant, and deliver our services securely:

Directly from you — when you register, contact us, or provide information through your account.

From third parties — where relevant, this includes verification providers, financial institutions and payment processors, AML/PEP databases, regulatory authorities, Responsible Gaming databases, and marketing or affiliate partners.

We keep personal data only as long as necessary for the purpose it was collected, or as required by law.

This includes anti-money laundering compliance (a minimum of five years from account closure), tax obligations, and dispute resolution needs. Once data is no longer required, we securely delete, anonymize or de-identify it according to established data protection standards.

We only process your personal data where a valid legal basis exists. Each processing activity serves a specific, explicit and legitimate purpose:

To deliver our services (performance of a contract).

To meet regulatory requirements (legal obligation — AML regulations, KYC checks, responsible gaming rules, reporting duties, and similar obligations).

To prevent fraud and manage risk (legitimate interest in protecting our platform, users and business integrity).

For marketing and personalisation (consent, or our legitimate interest in sending relevant marketing communications, promotions and tailored advertising based on your preferences).

For analytics and service improvement (legitimate interest in monitoring platform performance, analyzing usage trends, resolving technical issues, and improving the user experience).

To maintain security and system integrity (legal obligation and legitimate interest in monitoring system security, detecting threats, and protecting the confidentiality, integrity and availability of data).

To improve workflows and customer service through AI (we integrate third-party conversational AI tools into our customer messaging platform; on this legitimate interest basis, these tools help manage conversations, access tickets and profiles, analyze interaction patterns, and generate intelligent support responses).

Delivering our services may require sharing your personal data with trusted third parties. All sharing follows applicable data protection laws, and third parties are contractually bound to use your data only for specified, lawful purposes under strict security requirements. These third-party categories include:

Entities within our corporate group.

Game providers.

Payment providers.

Marketing partners.

Regulatory authorities.

Third-party service providers.

Conversational AI service providers (Anthropic, OpenAI, Gemini) — acting as data processors, these vendors get limited access to our customer messaging workspace to help facilitate, automate and optimize customer support and marketing operations.

AML and KYC verification tools.

Business consultants such as lawyers, accountants or notaries.

Other trusted third parties — for example, in a merger, acquisition or sale, your personal data may be transferred, and we’ll notify you beforehand.

3. Data Transfers

If we transfer your personal data internationally (for IT hosting, customer service, or verification purposes, for example), we put appropriate safeguards in place — such as the European Commission’s Standard Contractual Clauses (SCCs) or transfers to countries with adequacy decisions. We ensure our service providers apply comparable protection to your data in other jurisdictions, and we remain accountable for how they handle it.

4. Data Subject Rights

You have certain rights regarding your personal data, which help you understand, access, control and — where applicable — limit how it’s used:

Access your personal data.

Correct inaccurate or incomplete data.

Request deletion, subject to legal retention requirements.

Restrict processing in certain circumstances.

Transfer your data to another provider (data portability).

Object to processing based on legitimate interest or for marketing purposes.

Withdraw consent at any time, where applicable.

File a complaint with your local data protection authority.

We generally don’t rely on fully automated decision-making. If such processes are used in specific situations, we’ll notify you separately, as required by law.

5. Data Protection of Minors

Access to this Website and its services is limited to individuals who’ve reached the legal gambling age in their jurisdiction (at least 18). We don’t knowingly collect or process personal data from anyone below that age. If we discover that such data has been submitted — particularly through misuse of our platform — we’ll take appropriate steps to delete it and act in accordance with relevant legal requirements.

6. Data Security

To prevent unauthorized or unnecessary disclosure of your personal data, we apply the following controls:

Access Controls: Unauthorized physical access to facilities or rooms housing personal data processing systems is strictly prevented. Our systems run in secure data centers meeting high industry standards for physical and digital security, with access limited to authorized personnel only.

System Access Controls: All systems processing personal data are protected by passwords and authentication measures, with unique user IDs assigned for authentication.

Data Access Controls: Access to files and programs follows a “need-to-know” principle. We have controls in place to prevent unauthorized hardware or software installation or use, along with practices ensuring the secure and permanent deletion of data no longer needed for processing.

Organisational Requirements: We’ve put technical and organisational measures in place to prevent accidental mixing of personal data, including appointing a Data Protection Officer (DPO) and training staff on data privacy and security.