Privacy Policy

Effective Date: July 2026.

Welcome to Lussurio Casino (lussurio-casino.co). Protecting your personal data is our top priority. Below, we inform you in detail about how we collect, process, and protect your data when you use our website and services in the United Kingdom. We strictly comply with the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Controller and Data Protection Officer

Data Controller

The party responsible for data processing on this website within the meaning of the data protection regulations is:

Data Protection Officer

If you have any questions regarding data protection, the exercise of your data subject rights, or the correction of your data, you can contact our Data Protection Officer directly at any time using the email address provided above.

Principles of Data Processing

We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services (in particular, online gambling and associated transactions). Personal data is regularly processed only with the user's consent or when processing is permitted by statutory provisions.

The categories of data we process include:

  • Master Data: First name, last name, date of birth, gender.
  • Contact Details: Email address, phone number, residential address.
  • Account Data and Financial Information: Payment methods (e.g, debit cards, e-wallets, bank transfers, cryptocurrencies), transaction histories.
  • Identification and Verification Data: Identity documents as part of the Know Your Customer (KYC) process, as well as age and identity checks.
  • Usage and Technical Data: IP address, date and time of access, browser type, operating system, device information.

Legal Bases for Processing (UK GDPR)

The processing of your personal data is based on the following legal grounds under the UK GDPR:

  • Consent (Article 6(1)(a) UK GDPR): You have given us your consent to process your personal data for one or more specific purposes (e.g, receiving marketing newsletters).
  • Performance of a Contract and Pre-contractual Measures (Article 6(1)(b) UK GDPR): Processing is necessary for the performance of a gambling contract or to take steps prior to entering into a contract (e.g, registration, account management, payment processing).
  • Legal Obligation (Article 6(1)(c) UK GDPR): We are subject to numerous legal obligations, in particular under anti-money laundering regulations, gambling laws, and tax and commercial retention obligations.
  • Legitimate Interests (Article 6(1)(f) UK GDPR): Processing is necessary for the purposes of our legitimate interests or those of a third party (e.g, fraud prevention, ensuring IT security, system optimization), provided that your interests or fundamental rights do not override those interests.

Data Collection When Visiting Our Website (Log Files)

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in the process:

  • Information about the browser type and version used.
  • The user's operating.
  • The user's internet service.
  • The user's IP address.
  • Date and time of access.
  • Websites from which the user's system accesses our website (referrer).
  • Websites accessed by the user's system via our.

The storage in log files is carried out to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. The legal basis for the temporary storage of data and log files is Article 6(1)(f) UK GDPR.

Registration and User Account

To use the games on Lussurio Casino, you must create a user account. During registration, we collect the following mandatory information:

  • First and last name.
  • Date of birth.
  • Residential address and postcode.
  • Valid email.
  • Username and password.

This data is collected to establish and perform the contract for the use of our platform (Article 6(1)(b) UK GDPR). Without this information, you cannot open a gaming account.

Identity Verification and Anti-Money Laundering (KYC)

As a regulated online gambling operator, we are legally required (in particular under anti-money laundering regulations and international regulatory standards) to verify the identity of our players.

  • KYC Process (Know Your Customer): We require you to submit identification documents (e.g, passport, driving licence) as well as proof of address (e.g, a recent utility bill or bank statement).
  • Purpose: These measures serve to protect against fraud, prevent money laundering and terrorist financing, and comply with the protection of minors.
  • Legal Basis: The processing of this data is carried out to fulfill a legal obligation in accordance with Article 6(1)(c) UK GDPR in conjunction with anti-money laundering regulations.

Payments and Transaction Data

For deposits and withdrawals at Lussurio Casino, we work with licensed payment service providers.

  • Payment Methods: For customers from the United Kingdom, we offer common and secure payment methods, including debit cards (Visa, Mastercard), bank transfers, selected e-wallets, and cryptocurrencies.
  • Collected Data: When carrying out a transaction, we collect payment details such as the transaction amount, timestamp, payment method used, and transaction IDs. Credit and debit card numbers are generally not stored in full by us, but are processed directly via certified payment service providers in compliance with PCI-DSS standards.
  • Legal Basis: Processing is necessary for the performance of the payment contract (Article 6(1)(b) UK GDPR) and to comply with statutory retention obligations (Article 6(1)(c) UK GDPR).

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve user-friendliness, analyze traffic, and provide personalized content.

Types of Cookies

  • Essential Cookies: These cookies are strictly necessary for the technical operation of the website (e.g, session cookies to manage your login).
  • Functional Cookies: They enable the website to remember entries you have already made and provide enhanced features.
  • Analytical and Statistical Cookies: They help us understand how visitors interact with the website by collecting and reporting information anonymously.
  • Marketing Cookies: These are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.

Consent and Control

During your first visit to our website, you will be informed about the use of cookies via a cookie banner and asked for your consent. You can adjust or revoke your cookie settings at any time via the relevant options in your browser or through our cookie manager.

Player Protection and Protection of Minors

The protection of minors and vulnerable players is a central concern of Lussurio Casino.

  • Age Verification: We carry out strict age checks to ensure that no minors (under 18 years of age) gain access to our services. If we discover that a minor has transmitted personal data, we will delete this data immediately and block the account.
  • Gambling Addiction Prevention and Support Offers: As part of our responsible gambling framework, we record deposit limits, loss limits, self-exclusions, and time-outs. If signs of problematic gambling behavior become apparent, we process this information to protect the player. In the United Kingdom, specialized support services are available to affected players, to which we refer, such as GamCare (National Gambling Helpline: 0808 8020 133) and BeGambleAware.
  • Legal Basis: These data processing activities are carried out to fulfill legal requirements and as part of our legitimate interest in player protection (Article 6(1)(c) and (f) UK GDPR).

Disclosure of Data to Third Parties

Your personal data will generally only be transferred to third parties if:

  • You have given your explicit consent to do so (Article 6(1)(a) UK GDPR).
  • The disclosure is necessary for the establishment, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
  • There is a legal obligation to do so (e.g, to law enforcement authorities, tax authorities, or anti-money laundering officers).
  • This is necessary for the execution of the contractual relationship with you (e.g, disclosure to payment service providers, IT service providers, and hosting providers).

Data Processing

To the extent that we use service providers as part of data processing (in accordance with Article 28 UK GDPR), we remain responsible for the protection of your data. These service providers are carefully selected, contractually bound, and regularly monitored.

Data Transfer to Third Countries

To the extent that we transfer data to countries outside the European Economic Area (EEA) and the United Kingdom (third-country transfer), this is done exclusively in compliance with statutory provisions. This is based either on adequacy decisions by the relevant authorities or by appropriate safeguards (such as standard contractual clauses) to ensure an adequate level of data protection.

Storage Duration and Deletion of Data

We store your personal data for as long as necessary to fulfill the purposes mentioned in this privacy policy or as required by statutory retention periods.

  • Gaming Account Data: After your account is closed, your data will be archived in accordance with legal requirements (in particular tax and anti-money laundering retention obligations, which provide for periods of up to 5 years or more) and irrevocably deleted after these periods expire.
  • Log Files: Technical log data is generally deleted or anonymized after a maximum of 30 days, unless a security incident requires longer retention for evidentiary purposes.

Your Rights as a Data Subject

Under the UK GDPR, you have comprehensive rights as a data subject, which you can assert against Lussurio Casino at any time:

  • Right of Access (Article 15 UK GDPR): You have the right to request confirmation as to whether we are processing personal data concerning you and to obtain access to that data.
  • Right to Rectification (Article 16 UK GDPR): You have the right to request the immediate correction of inaccurate or completion of your personal data stored by us.
  • Right to Erasure / "Right to be Forgotten" (Article 17 UK GDPR): You can request the deletion of your personal data, provided that processing is not necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.
  • Right to Restriction of Processing (Article 18 UK GDPR): You have the right to request the restriction of processing of your data.
  • Right to Data Portability (Article 20 UK GDPR): You have the right to receive your data that you have provided to us in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 21 UK GDPR): You can object to the processing of your data based on legitimate interests for reasons arising from your particular situation.
  • Right to Withdraw Consent (Article 7(3) UK GDPR): Consent once given can be revoked by you at any time with effect for the future.
  • Right to Lodge a Complaint with a Supervisory Authority (Article 77 UK GDPR): You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection laws. In the United Kingdom, you can contact the Information Commissioner's Office (ICO) for this purpose.

To exercise your rights, an informal notification by email to [email protected] is sufficient.

Data Security

We implement appropriate technical and organizational security measures in line with state-of-the-art standards to protect your personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our website uses SSL/TLS encryption, recognizable by the HTTPS prefix and the padlock symbol in your browser's address bar, to ensure the confidentiality of data transmission.

Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy. The current version of this policy will apply to any subsequent visits.