Data Protection Policy

1. Introduction

IN SHORT:Lunaris Casino protects the personal data of its users, customers, employees and partners in line with the GDPR and other applicable laws.

Lunaris Casino ("the Company", "we", "our", or "us") is committed to protecting the personal data of our users, customers, employees, and partners. This Data Protection Policy outlines how we collect, process, store, share, and secure personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant legislation.

2. Scope

IN SHORT:This policy covers every user, every person handling data on our behalf and every system where personal data is processed.

This policy applies to:

All users and visitors of Lunaris Casino
All employees, contractors, and third-party service providers who handle personal data on behalf of the Company
All systems, processes, and operations where personal data is accessed or processed

3. Definitions

IN SHORT:Key terms used throughout this policy.

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
Data Controller: Lunaris Casino, responsible for determining why and how personal data is processed.
Data Processor: Any third party who processes data on behalf of Lunaris Casino.

4. Legal Basis for Processing

IN SHORT:We process personal data based on consent, contractual necessity, legal obligations or legitimate interests.

Lunaris Casino processes personal data under one or more of the following legal bases:

Consent (e.g., marketing communications)
Contractual necessity (e.g., account creation, payment processing)
Legal obligations (e.g., anti-fraud requirements, tax compliance)
Legitimate interests (e.g., service security, fraud prevention)

5. Categories of Personal Data Collected

IN SHORT:We collect identity, contact, account, financial, technical and usage data.

We may collect and process the following categories of personal data:

Identity data: Name, date of birth, username
Contact data: Email, phone number
Account data: Login credentials, player history
Financial data: Payment information (handled via secure payment processors)
Technical data: IP address, cookies, device info
Usage data: Site activity, preferences, gameplay data

6. Purposes of Data Processing

IN SHORT:Personal data is used to run your account, process payments, prevent fraud and meet legal obligations.

Personal data is processed for:

Creating and managing user accounts
Providing lottery, gaming, and related online services
Processing payments and withdrawals
Preventing fraud and ensuring gaming integrity
Meeting legal and regulatory obligations
Improving platform performance and user experience
Sending notifications or marketing (with consent)

7. Data Retention

IN SHORT:We keep personal data only as long as necessary or as required by law.

We retain personal data only for as long as necessary to fulfill the purposes outlined above or as required by law. Retention periods may vary depending on:

Legal obligations (e.g., financial records retention)
Dispute resolution or fraud investigations
User account activity

8. Data Subject Rights

IN SHORT:You can access, correct, delete, restrict, port or object to the processing of your personal data.

Users have the right to:

Access their personal data
Request rectification of inaccurate data
Request deletion ("right to be forgotten")
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time

Requests can be made via our Data Protection Officer. We will respond within statutory timelines.

10. International Data Transfers

IN SHORT:Transfers outside the EU/EEA are protected with adequate safeguards.

Where data is transferred outside the EU/EEA, we ensure adequate safeguards such as:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Secure encryption practices

11. Data Security Measures

IN SHORT:We protect personal data with encryption, access controls, audits and staff training.

Lunaris Casino employs a range of organizational and technical measures, including:

Encryption in transit and at rest
Access controls and authentication mechanisms
Anonymization and pseudonymization where appropriate
Regular security audits and vulnerability testing
Staff training on data protection responsibilities

12. Cookies and Tracking

IN SHORT:We use cookies for authentication, analytics, preferences and fraud prevention. You can manage them in your browser.

Lunaris Casino uses cookies and similar technologies for:

Authentication
Analytics
User preferences
Fraud prevention

Users may manage cookie preferences via browser settings or our cookie consent tool.

13. Children's Data

IN SHORT:We do not knowingly collect data from anyone under the legal gaming age.

Lunaris Casino does not knowingly collect data from individuals under the legal gaming age. Any such accounts discovered will be closed and deleted.

14. Data Breach Response

IN SHORT:If a breach occurs, we contain it, notify the authority within 72 hours when required and inform affected users.

In the event of a data breach:

We will assess and contain the incident immediately
Notify the supervisory authority within 72 hours when required
Notify affected users without undue delay if there is a high risk to their rights

15. Roles and Responsibilities

IN SHORT:The Data Protection Officer oversees compliance and answers user inquiries.

Data Protection Officer (DPO): Oversees compliance and responds to user inquiries
Management: Ensures implementation of this policy
Employees & Contractors: Must follow data protection procedures and report incidents

16. Changes to This Policy

IN SHORT:Lunaris Casino may update this policy when necessary.

Lunaris Casino reserves the right to update this policy when necessary.