Lucky Star — Privacy Policy
This document describes how Lucky Star collects, uses, stores, and protects personal data of individuals who access or use its platform. It applies to all visitors and registered account holders.
Information We Collect
Lucky Star collects several categories of data necessary to operate the platform, verify identity, and comply with regulatory obligations. These categories include:
- Identity data — full name, date of birth, nationality, government-issued identification details submitted during account registration and verification.
- Contact data — email address, phone number, residential address.
- Payment data — details related to deposits and withdrawals, including payment method type and transaction references; card or wallet numbers are processed through payment providers rather than stored in full.
- Technical data — IP address, device identifiers, browser type, operating system, and connection logs.
- Behavioral data — session activity, gameplay history, login timestamps, and preferences used to maintain account records.
- Verification (KYC) data — documents and information submitted to confirm identity and age in line with standard due-diligence procedures applied by licensed operators.
Data is collected directly from the user, automatically through platform interaction, and, where applicable, from third-party verification or payment partners.
How We Use Your Information
Personal data is processed for defined operational purposes rather than open-ended use. Primary purposes include identity and age verification prior to account activation, prevention of fraud, duplicate accounts, and unauthorized access, and processing of deposits and withdrawals through payment partners. Data is also used to maintain transaction records required for financial and regulatory reporting, to respond to support inquiries, and to detect irregular account activity that may indicate misuse of the platform. Where a user has provided consent, contact data may be used to send promotional communications; this use is optional and can be withdrawn at any time through account settings or by contacting support. Aggregated, non-identifying data may be used to assess platform performance and improve service reliability. Personal data is not used for purposes incompatible with those stated above without a separate legal basis or updated consent.
Data Protection and Security
Lucky Star applies technical and organizational measures consistent with standard practice among online gaming operators to limit unauthorized access, loss, or misuse of personal data. These measures typically include encrypted data transmission, restricted internal access based on role and necessity, and periodic review of storage and access controls. Payment details are handled primarily by licensed payment processors rather than stored directly on internal systems. Personal data is retained only for as long as necessary to fulfil verification, transactional, and legal obligations, after which it is deleted or anonymized in line with applicable retention requirements. Access to identity and verification documents is restricted to personnel directly involved in compliance and support functions. While no system can guarantee absolute security, these measures are designed to reduce risk to a reasonable and industry-consistent standard.
Cookies
Lucky Star uses cookies and similar tracking technologies to support platform functionality and improve user experience. Cookie categories include:
| Cookie Type | Purpose |
|---|---|
| Essential | Enable core functions such as login, session management, and security checks |
| Functional | Remember user preferences, language, and display settings |
| Analytics | Measure platform usage patterns to identify performance issues |
| Marketing | Support relevant promotional content where consent has been given |
Users can manage or disable non-essential cookies through browser settings, though this may limit certain platform features.
Your Rights
Users in Saudi Arabia are afforded rights under the Personal Data Protection Law, overseen by the Saudi Data and Artificial Intelligence Authority. These rights generally include the right to access personal data held by the operator, request correction of inaccurate information, request deletion of data no longer required for legitimate purposes, and object to or restrict certain processing activities, including direct marketing. Users may also request information on the purposes and recipients of data processing. Requests can be submitted through the account support channel and are handled within a reasonable timeframe subject to verification of the requester’s identity. Certain rights may be limited where retention is required for legal, regulatory, or fraud-prevention purposes.
Contact Information
Questions regarding this privacy policy or requests concerning personal data can be submitted through the platform’s official support channel available to registered users. Requests are reviewed and addressed in accordance with applicable data protection obligations.