burger icon

Privacy Policy

This privacy policy explains how ilucki-casino-canada, operated exclusively via ilucki777.com, collects, processes, and safeguards the personal data of its players and website visitors. The policy applies to all users accessing or interacting with the ilucki777.com platform and its services. Effective date: 6 November 2025.

Who We Are

OBSERVE: ilucki-casino-canada is operated by Dama N.V., a company registered and licensed in Curaçao.
EXPAND: Legal transparency and contact accessibility are fundamental to CA and Curaçao regulations. Integration of direct contact information for data protection is required.
REFLECT: The following details ensure users can identify the operator and communicate effectively regarding personal data matters.

  • Legal Entity: Dama N.V.
  • Legal Address: Heelsumstraat 51 E-Commerce Park, Willemstad, Curaçao
  • Online Gaming License: 8048/JAZ2020-013, issued by Antillephone N.V., Curaçao
  • Contact Information:

What Personal Data We Collect

OBSERVE: CA privacy standards require detailed notice of all data categories.
EXPAND: Both direct and indirect data, including behavioral and technical analytics, must be cataloged.
REFLECT: Data collection is limited to information necessary for regulatory compliance and service delivery.

  • Personal Identification Data: Full name, date of birth, residential address, email address, telephone number, government-issued identification documents.
  • Account and Transaction Data: Username, password (hashed), account preferences, payment records, deposit and withdrawal details, bet and game history.
  • Technical Data: IP address, device information (model, OS, browser type), geolocation data, access logs, and session data.
  • Behavioral Data: Game interactions, betting history, clickstream data, time spent on site, and navigation patterns.
  • Cookies and Tracking Technologies: Session cookies, persistent cookies, third-party analytics and advertising cookies, tracking pixels, and similar technologies (see "Cookies & Tracking Technologies" below).

Legal Basis for Processing

OBSERVE: CA law mirrors EU-style lawful bases for processing.
EXPAND: Explicit consent, contract necessity, legitimate interests, and legal obligations all apply.
REFLECT: Each processing activity is mapped to its lawful grounds for transparency and user protection.

  1. User Consent: For marketing communications, use of non-essential cookies, and voluntary provision of additional information. Users may withdraw consent at any time.
  2. Contractual Necessity: Data processed for account creation, authentication, transactions, and provision of gaming services is essential for fulfilling contractual commitments to the user.
  3. Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC) regulations, responsible gambling measures, and lawful requests by regulatory authorities.
  4. Legitimate Interests: Ensuring the security of services, fraud detection and prevention, analytics, service improvement, and safeguarding company assets, provided such interests are not overridden by user rights.

Purpose of Processing

OBSERVE: CA privacy law requires explicit disclosure of processing purposes.
EXPAND: All uses of data, from core service delivery to analytics and marketing, must be detailed.
REFLECT: Users are informed of all intended data uses to ensure informed consent and transparency.

  • Provision of Casino Services: Facilitating user registration, account management, payments, and access to games on ilucki777.com.
  • Regulatory Compliance: Verifying identity, age, and location for legal compliance with AML and KYC obligations.
  • Service Improvement and Analytics: Monitoring usage, analyzing trends and preferences, and optimizing platform performance and user experience.
  • Marketing and Promotions: Sending marketing communications (subject to consent), promotional offers, and personalized content.
  • Fraud Detection and Security: Detecting, investigating, and preventing fraudulent activities, unauthorized access, and security incidents.

Disclosure & Sharing

OBSERVE: Legal disclosure must include all recipient categories and sharing circumstances.
EXPAND: Both intra-group and third-party disclosures, including cross-border transfers, require specification.
REFLECT: Users are provided with clarity on who may access their data and under what conditions.

  • Payment Service Providers: Data shared to process deposits, withdrawals, and payment verifications.
  • Technology and Service Partners: Platform hosting, IT support, analytics, customer support, and anti-fraud vendors, strictly under contractual safeguards.
  • Regulatory and Government Authorities: Disclosure to comply with legal obligations, regulatory audits, or lawful requests.
  • Affiliates and Marketing Networks: Data shared for marketing purposes only with user consent and subject to contractual protections.
  • Corporate Transactions: Data may be disclosed as part of mergers, acquisitions, or restructuring, with continued protection of user rights.

International Transfers

OBSERVE: ilucki-casino-canada operates internationally, with servers and partners in multiple jurisdictions.
EXPAND: CA regulations require that cross-border transfers provide "adequate protection" via contractual or industry-standard mechanisms.
REFLECT: All data transfers are protected using industry-approved safeguards.

  • Countries/Regions: User data may be transferred to Curaçao (headquarters), the EU, and other jurisdictions where service providers operate, solely for the purposes described in this policy.
  • Protection Guarantees: Standard contractual clauses (SCCs), data processing agreements, and, where applicable, adherence to recognized frameworks such as the EU's GDPR adequacy decisions.
  • Additional Safeguards: Encryption, access controls, and periodic audits of partner compliance with data protection standards.

Regional Compliance Note: All international transfers are executed in compliance with CA privacy requirements, ensuring continuous protection of user rights.

Data Retention

OBSERVE: CA law mandates specifying retention periods and deletion triggers.
EXPAND: Differentiation by data category and processing purpose is required.
REFLECT: Data is not retained longer than necessary and is deleted or anonymized upon expiry of retention triggers.

  • Personal Identification and Account Data: Retained for the duration of the user's account and for up to 5 years following account closure or last transaction, as required by AML/KYC regulations.
  • Transaction and Payment Data: Retained for up to 7 years to comply with financial record-keeping obligations.
  • Behavioral and Technical Data: Retained for a maximum of 2 years for analytics and security purposes, then anonymized or deleted.
  • Cookies and Tracking Data: Retention varies by cookie type (see "Cookies & Tracking Technologies").
  • Deletion Criteria: Data is deleted or anonymized upon user request (subject to legal obligations), expiration of retention period, or when processing purposes are fulfilled.

Your Rights

OBSERVE: CA and international standards (including GDPR) require detailed articulation of user rights.
EXPAND: Rights include access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Procedures and timeframes must be clear and enforceable.
REFLECT: ilucki-casino-canada ensures all user rights are respected in line with legal requirements.

  1. Right of Access: Users may request confirmation of whether their data is processed and obtain a copy of their personal data held by ilucki-casino-canada.
  2. Right to Rectification: Users may request correction of inaccurate or incomplete data.
  3. Right to Erasure ("Right to be Forgotten"): Users may request deletion of personal data, subject to legal retention obligations.
  4. Right to Restrict Processing: Users may request limitation of data processing under certain circumstances.
  5. Right to Object: Users may object to processing based on legitimate interests or direct marketing, including profiling.
  6. Right to Data Portability: Users may receive their personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  7. Right to Withdraw Consent: Where processing is based on consent, users can withdraw consent at any time without affecting prior processing.
  8. Procedure for Exercising Rights:
    • Requests should be submitted via support@ilucki777.com.
    • ilucki-casino-canada will acknowledge and process requests free of charge within 30 days, unless a legal exemption applies.
    • Further identification may be required to verify the requestor's identity.
  9. Complaints: If dissatisfied, users may contact the relevant supervisory authority in CA or the EU (see "Complaints & Contacts" below).

Regional Compliance Note: ilucki-casino-canada aligns its privacy practices with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the General Data Protection Regulation (GDPR). All privacy rights described herein are provided to CA users regardless of their location.

Cookies & Tracking Technologies

OBSERVE: Transparency about tracking methods is required by CA privacy law.
EXPAND: All types, purposes, and user controls for cookies must be disclosed.
REFLECT: Users are given clear information and tools to manage their preferences.

  • Session Cookies: Temporary cookies essential for site navigation and account security; expire when the browser is closed.
  • Persistent Cookies: Stored on the user's device to remember preferences and login status; remain for a set period or until deleted.
  • Third-Party Cookies: Set by analytics providers (e.g., Google Analytics) and advertising partners for performance tracking and marketing optimization.
  • Purposes:
    • Functional: Enable core platform features and user authentication.
    • Analytics: Monitor usage patterns to improve service quality.
    • Advertising: Deliver relevant promotional content, subject to user consent.
  • Cookie Management: Users may disable or manage cookies through browser settings or, where available, an internal consent management panel on ilucki777.com. Disabling certain cookies may limit site functionality.

Data Security

OBSERVE: CA and international standards require robust security safeguards.
EXPAND: Both technical and organizational controls, plus incident response and ongoing risk management, must be demonstrated.
REFLECT: ilucki-casino-canada employs industry best practices to protect all personal data processed via ilucki777.com.

  • Encryption: All data in transit is protected using TLS 1.2 or higher; sensitive data at rest is encrypted with industry-standard algorithms.
  • Access Controls: Role-based access and multi-factor authentication restrict data access to authorized personnel only.
  • Security Audits: Regular internal and external security assessments, including vulnerability scans and penetration testing.
  • Staff Training: Ongoing data protection and privacy training for all employees and contractors.
  • Incident Response: Documented procedures for detecting, reporting, and mitigating data breaches, with user notification protocols in case of significant incidents.
  • Compliance Standards: ilucki-casino-canada aligns its controls with international best practices, including ISO 27001 and SOC 2, where applicable.

Regional Compliance Note: Data security practices are continuously updated to reflect evolving threats and CA regulatory requirements as of 2025.

Complaints & Contacts

OBSERVE: CA privacy law and industry standards require accessible complaint mechanisms and escalation paths.
EXPAND: Procedures, contacts, and supervisory authorities must be specified.
REFLECT: Users are empowered to resolve privacy concerns promptly and escalate if necessary.

  1. Primary Contact: Data protection inquiries and complaints should be directed to Sophie Tremblay, DPO, at support@ilucki777.com.
  2. Online Feedback: Users may also submit concerns via any feedback forms available on ilucki777.com (if provided).
  3. Complaint Procedure:
    • Submit your complaint via email with a detailed description of the issue.
    • ilucki-casino-canada will acknowledge receipt within 7 days and provide a substantive response within 30 days.
    • If additional investigation is required, you will be informed of expected timelines and interim steps.
  4. Escalation: If dissatisfied with the response, users may escalate their complaint to:
    • Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca/en/contact-the-opc/
    • Curaçao Data Protection Authority: Contact details provided upon request.
    • EU Data Protection Authorities: For users protected by GDPR, contact details available at EDPB Members.

Updates

OBSERVE: CA law and industry practice require timely notification of material privacy policy changes.
EXPAND: Notification methods, version control, and user options must be specified.
REFLECT: ilucki-casino-canada ensures users are kept informed and retains control over their data choices.

  • Notification Methods: Policy updates are communicated via email to registered users, website banners, and account dashboard alerts.
  • Advance Notice: Users will receive a minimum of 30 days' advance notice for significant changes affecting their rights or the processing of their data.
  • User Options: Users may object to changes or close their accounts before new terms take effect.
  • Version Control: This policy is versioned and timestamped for transparency.
    • Last updated: 6 November 2025
    • Changelog: Material changes are summarized and made available on ilucki777.com.