How Hyper Lucky Protects and Manages Your Personal Data
Here you will find details on what personal data Hyper Lucky gathers, the purposes for which it is used, and the rights you hold over that information. Hyper Lucky operates under Curacao eGaming license 8048/JAZ2026-007.
Licensed Casino
Curacao eGaming #8048/JAZ2026-007
SSL Encrypted
All data is encrypted and protected during transmission
No Data Sales
Your data is never sold to third parties
Full Transparency
Clear records of what we collect and why
Your Rights
You can view, update, or remove your personal data at any time
Secure Deposits
Bitcoin, USDT, Ethereum, TRON and more
Privacy Policy
Your personal data at Hyper Lucky: how it is gathered, handled, and kept safe
As the holder of Curacao eGaming license 8048/JAZ2026-007, Hyper Lucky is obligated to collect specific personal details in order to maintain platform security and regulatory compliance. The data we collect covers three areas: identity information (your full name, date of birth, and a scan of a government-issued ID), contact details (email address and phone number), and financial records that include cryptocurrency wallet addresses and transaction histories for Bitcoin, Ethereum, USDT, Tether, Litecoin, Dogecoin, and TRON deposits and withdrawals.
This information is used to create accounts and complete KYC verification, satisfy Curacao eGaming compliance obligations, run fraud checks and anti-money-laundering screenings, and handle support inquiries through email, live chat, and Telegram. We never sell or rent your personal details to advertisers or unrelated outside parties. Your gaming history is not used to build advertising profiles.
Game software providers such as Evolution, Pragmatic Play, and NetEnt receive technical session data including bet amounts, RNG outcome hashes, and device identifiers so that game results can be settled and independent audit requirements fulfilled. Every provider works under a separate data processing agreement. Transaction logs are kept for five years to satisfy AML obligations. Account information is removed within 30 days of a confirmed closure request, provided no legal hold applies.
| Data Type | Purpose | Retention Period |
|---|---|---|
| Identity (name, ID, date of birth) | KYC and age verification | 5 years post-closure |
| Contact (email, phone) | Account access and support | Account lifetime + 1 year |
| Financial (wallet address, TX history) | Payments and AML screening | 5 years (regulatory) |
| Session and device data | Fraud detection and game audit | 12 months |
| Support correspondence | Dispute resolution | 3 years |
Data We Collect
The data Hyper Lucky collects, our reasons for holding it, and how long we keep it.
Opening an account at Hyper Lucky requires us to gather details needed to confirm your identity, handle payments, and fulfill our responsibilities under Curacao eGaming license 8048/JAZ2026-007. This includes your full name, date of birth, email address, and home address. For crypto payments involving Bitcoin, Ethereum, USDT, TRON, Litecoin, Dogecoin, and Tether, we also log wallet addresses and transaction IDs associated with every transfer of funds.
We automatically collect technical information such as IP addresses, device type, browser version, and session timestamps. This enables us to identify unauthorized access attempts and maintain platform stability across every product category, including slots, live casino, sports betting, poker, and esports. This information is never used to build advertising profiles or shared with outside parties.
Gaming and wagering records, including session logs, bet amounts, and bonus usage, are stored for compliance purposes and to resolve disputes. Information connected to financial transactions is held for at least five years in line with anti-money-laundering requirements applicable to licensed operators. Once an account is closed, the majority of personal data is removed after the required retention period has passed.
| Data Category | Purpose | Retention Period |
|---|---|---|
| Identity (name, DOB, address) | Account verification, KYC compliance | Account lifetime + 5 years |
| Crypto wallet addresses, transaction IDs | Deposit and withdrawal activity (BTC, ETH, USDT, TRON, LTC, DOGE) | 5 years |
| Email address | Account messages and customer support through email, live chat, and Telegram | Account lifetime |
| Device and session information (IP, browser, timestamps) | Security monitoring, fraud prevention | 12 months |
| Gameplay and betting history | Regulatory audits, resolution of disputes, and responsible gambling assessments | 5 years |
Data Storage
How your information is stored, kept secure, and how long we retain it
Personal data at Hyper Lucky is held on protected servers that use AES-256 encryption for data at rest and TLS 1.2 or higher for all data moving across networks. Our infrastructure meets the requirements set out under our Curacao eGaming license (8048/JAZ2026-007), which includes periodic security audits and tightly controlled access permissions. Account records that can identify a user are accessible only to staff members with a verified, documented reason to view them.
The length of time we retain your data depends on its category and the legal grounds for processing it. The table below outlines the primary retention periods we apply.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration details | 5 years after account closure | AML/KYC compliance |
| Transaction records (all currencies) | 7 years | Financial compliance |
| Transaction records for cryptocurrencies (Bitcoin, Ethereum, USDT, TRON, Litecoin, Dogecoin, Tether) | 7 years | Financial compliance |
| Email and live chat support records | 2 years | Dispute resolution |
| Telegram support messages | 12 months | Support operations |
| Session and device logs | 6 months | Fraud prevention |
| Records of marketing communication preferences and opt-out choices | 30 days after opt-out | Consent management |
Once you close your Hyper Lucky account, personal data that is not subject to a legal retention requirement is removed within 90 days. Payment details, including records linked to cryptocurrency wallets for Bitcoin, Ethereum, TRON, Litecoin, and Dogecoin, are held exclusively in tokenized form. We never store raw private keys or full wallet addresses, and payment credentials are not shared with any third party beyond what is required to complete a transaction.
Data connected to an active dispute, ongoing investigation, or regulatory inquiry is retained until the matter reaches a full resolution, regardless of our standard retention timelines. After resolution, the data is marked for removal in the next scheduled deletion cycle, which typically falls within 30 days. If you submit a deletion request while a legal hold is in place, we will inform you promptly and confirm the earliest date on which removal can be carried out.
All stored data is backed up daily to servers located in geographically separate regions. Backup copies follow the same retention schedule as the original records; once a retention period ends, any backups containing that data are purged in the next scheduled rotation.
Your Rights Over Your Data
The rights you can exercise over your personal data and how Hyper Lucky handles each category of request.
Hyper Lucky gathers personal information to confirm your identity, handle payments, and satisfy the reporting requirements attached to license 8048/JAZ2026-007 issued by Curacao eGaming. You retain defined rights over that information at all times, regardless of whether your account is currently open or has been closed. These rights do not result in automatic approvals; every request is reviewed within 30 days and is followed by a written explanation of the outcome.
Access
Ask for a complete copy of all personal information stored against your account, covering transaction records, login history, and any profiling data used when assessing your eligibility for bonuses.
Rectification
If your name, address, or contact details are inaccurate, you can submit a correction request. Once the required supporting documents have been verified, records will be updated within 10 business days.
Erasure
You can ask for your personal data to be erased. These requests are fulfilled unless a legal obligation requires us to keep the information; payment records covered by anti-money-laundering regulations must be retained for five years.
Data Portability
Obtain your data in an organized, machine-readable file format (CSV or JSON) that is ready to be transferred to any other service you choose.
Restrict Processing
You may request that we temporarily halt processing of your data while a dispute is under review. Your account remains accessible throughout this period, though profiling and targeted communications are suspended.
Withdraw Consent
For processing activities that rely on your consent, such as marketing emails, you are free to withdraw that consent at any point. Doing so has no bearing on any processing that occurred before the withdrawal.
GDPR and Your Data Rights
Player rights and responsibilities within the European Economic Area.
The General Data Protection Regulation establishes enforceable rules governing how personal data is collected, stored, and used throughout the EU and European Economic Area. Hyper Lucky operates under a Curacao eGaming license (8048/JAZ2026-007) and is primarily focused on the US market; however, players who reside in the EEA or hold EU citizenship retain their full GDPR protections when using this platform. We honor those rights regardless of where our servers are hosted.
Each category of personal data we handle is supported by a documented legal basis: your informed consent, a contractual requirement, a statutory obligation, or a legitimate interest that does not override your own rights. We never sell personal data. Any sharing with outside parties is strictly limited to payment processors, identity verification providers, and technical infrastructure partners, all of whom operate under data processing agreements.
Access
Obtain a full copy of the personal data we store in connection with your account.
Rectification
Update or correct any information tied to your account that is inaccurate or incomplete.
Erasure
Request that we erase your personal data, where permitted by applicable legal retention rules.
Portability
Obtain your personal data delivered in a portable, machine-readable format.
Restriction
Restrict the way we use your information in defined circumstances.
Objection
Oppose processing that relies on legitimate interests or that is carried out for direct marketing purposes.
Records are retained for a minimum of five years following account closure, a timeframe driven by anti-money laundering obligations linked to our Curacao eGaming license. Payment records covering cryptocurrency transactions, including Bitcoin, Ethereum, USDT, Litecoin, and Tether, fall under the same retention schedule. Once that period ends, data is either permanently deleted or anonymized.
To act on any of the rights described above, contact our support team via live chat, email, or Telegram and include your registered account email address so we can locate your records. We aim to respond within 30 calendar days. If a request is particularly complex, we may extend that window by a further 60 days and will notify you of any such delay. Should you feel we have not handled your data correctly, you have the option to file a complaint with your local data protection supervisory authority.
