Privacy Policy

This Privacy Policy outlines how White Star B.V., the operator of luckyspins-online.com, collects, processes, and protects user personal data. This document details our practices regarding your information and your rights under New Zealand’s Privacy Act 2020. This policy is an integral part of our Terms and Conditions, and by using our platform, you consent to the practices described herein. We are committed to safeguarding your personal information in accordance with all applicable laws.

Information We Collect

To provide our services, we collect specific information through your interactions with our website, from account creation to gameplay. This data collection is essential for operational purposes, regulatory compliance, and for ensuring a secure gaming experience. We have categorised the information to provide clarity on what is gathered.

Personal Information You Provide

When you register an account, participate in promotions, or contact our support teams, you provide us with specific personal details necessary for identity verification and account management. The types of personally identifiable information you may provide include:

Full name, home address, and date of birth.
Email address and telephone number.
Financial details, including credit or debit card information.
Photographic identification and personal description for verification.
Responses to surveys or information provided during promotions.
Records of correspondence with our customer support department.

Automatically Collected Information

As you interact with our platform, our servers automatically record certain technical and activity data. This information is vital for maintaining service quality, troubleshooting issues, and monitoring platform activity for security and fraud prevention. The automatically collected information encompasses:

Source IP address.
Time and date of access.
Device and browser specifications.
Your activity on the website, including games played and session durations.
Details of financial transactions.
Language preferences and other account settings.
Software crash or performance reports.

Use of Cookies

Our website utilises cookies to differentiate you from other users, which helps in delivering a customised and efficient browsing experience. Cookies are small text files on your device that help us remember your preferences and understand how you navigate our site. This allows us to improve our services.

We primarily use analytical and performance cookies to recognise visitor numbers and observe their movement patterns across the website. This aggregated and anonymised data helps us enhance website functionality. You have full control over cookie usage and can modify your browser settings to accept or decline them. Please note that disabling cookies may limit your ability to use certain interactive features of our platform.

How We Use Your Information

The personal information we collect is used for specific, legitimate purposes linked to providing and improving our services and meeting our legal obligations. We use your data responsibly and transparently, ensuring every processing activity has a lawful basis. The primary objectives for using your information are outlined as follows:

Service Delivery: To fulfill our obligations under our Terms and Conditions and provide you with the information, products, and services you request.
Communication: To provide information about other services we offer that are similar to those you have used, and to notify you about important changes to our services.
Marketing: To provide you, or permit selected third parties to provide you, with information about goods or services that may interest you, subject to your explicit consent.
Legal and Regulatory Compliance: To comply with our legal duties, including responsible gaming, anti-fraud, anti-money laundering, and player verification requirements under New Zealand law.
Platform Improvement: To ensure content is presented effectively for your device and to analyse user trends to improve our platform’s functionality.
Security: To monitor communications and transactions to check instructions, prevent crime, and improve the quality of our customer service.

Disclosure of Your Information

We may share your personal information with specific third parties under controlled and legally compliant circumstances. These disclosures are necessary for the performance of our contract with you, for legal compliance, or for legitimate business purposes. We ensure any third party with access to your data adheres to strict data protection and security standards. The categories of recipients are detailed:

Group Companies: Any member of our corporate group for internal administrative purposes.
Business Partners and Suppliers: Trusted partners, suppliers, and sub-contractors engaged for the performance of any contract, such as payment processors and identity verification services.
Analytics Providers: Analytics and search engine providers that assist in the improvement and optimisation of our platform.
Regulatory and Law Enforcement Bodies: We may disclose your information to these bodies where required by law or to comply with a legal obligation.

Data Retention and Security

Your personal information is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations under New Zealand law. Once the retention period has elapsed, the data is securely destroyed. Throughout the retention period, we take reasonable steps to ensure the information is accurate and up-to-date.

We implement industry-standard physical, procedural, and technological security measures to protect your personal data from unauthorised access, use, or disclosure. While we take all reasonable steps to secure your information, data transmission via the internet is not completely without risk. Therefore, any transmission is at your own risk.

Your Rights Under New Zealand Law

Under the Privacy Act 2020, you have several rights concerning your personal information, and we are committed to upholding them. These rights empower you to maintain control over your personal data. We will facilitate your requests to exercise:

Right to Access: You are entitled to request confirmation of whether we hold personal information about you and to receive a copy of it.
Right to Correction: You have the right to request the correction of any personal information we hold that you believe is inaccurate or incomplete.
Right to Restrict Processing: You can ask us not to process your personal data for marketing purposes by adjusting your account preferences or contacting support.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

International Data Transfers

The data we collect from you may be transferred to, and stored at, a destination outside of New Zealand. It may also be processed by staff operating outside New Zealand who work for us or one of our suppliers. This is often necessary for providing customer support and processing transactions. When we transfer your data internationally, we take all necessary steps to ensure it is treated securely and in accordance with this Privacy Policy and New Zealand’s privacy laws, including entering into appropriate contractual agreements with suppliers.

Complaints and Enquiries

For any concerns or enquiries about how we handle your personal data, or to make a complaint, please follow our established process. Providing as much detail as possible will help us address your concern thoroughly. The procedure is as follows:

First, contact our Customer Support team by emailing your complaint or enquiry to [email protected]. Our team aims to respond within 7 business days.
If you are not satisfied with the resolution from Customer Support, you may request an escalation to our Data Protection Officer. The DPO will conduct an independent review and respond within 14 business days.
If you remain dissatisfied, you have the right to escalate your complaint to the relevant regulatory authority in New Zealand, the Office of the Privacy Commissioner (OPC).

Privacy Breach Management

In the event of a privacy breach that has caused or is likely to cause serious harm, we will adhere to our Incident Breach Management Plan and the mandatory notification requirements under the Privacy Act 2020. This plan ensures a swift and effective response to contain the breach and mitigate its impact. Our response protocol includes these actions:

Securing affected accounts and taking steps to contain the breach.
Notifying the Office of the Privacy Commissioner of New Zealand as soon as practicable.
Notifying all affected individuals if the breach is likely to result in serious harm.
Conducting an internal investigation to determine the cause and identify remedial measures.
Cooperating fully with the Office of the Privacy Commissioner and relevant law enforcement agencies.
Implementing remedial measures to prevent the recurrence of similar breaches.