Privacy Policy

1. Introduction

Welcome to Night Luck UK (operating via nightluckuk.uk). We are unequivocally committed to protecting your personal data and respecting your privacy. As a premier destination for online entertainment, our foundational mission is to provide a highly secure, trustworthy, and exhilarating casino environment. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website, register an account, or engage with our services.

We recognise that to maintain our standing as an authoritative and responsible casino brand, absolute transparency regarding data handling is essential. Please read this policy carefully to understand our practices regarding your personal data and your rights under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

For the purposes of applicable data protection laws, Night Luck UK is the designated Data Controller. This means we are responsible for determining the purposes and means of the processing of your personal data. We have appointed a dedicated Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. Should you have any enquiries, please contact our compliance team directly.

3. The Information We Collect

To provide our services, ensure fair play, and meet our stringent legal and regulatory obligations, we may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:

• Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
• Contact Data: Billing address, residential address, email address, and telephone numbers.
• Financial Data: Bank account and payment card details (note: we do not store full credit card numbers; these are handled by our secure, PCI-DSS compliant payment gateways).
• Transaction Data: Details about payments to and from you, your wagering history, deposits, withdrawals, and other details of services you have purchased from us.
• Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
• Compliance & KYC Data: Identification documents (such as passports or driving licences), proof of address, and potentially source of funds documentation as required by Anti-Money Laundering (AML) regulations.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., registering your account, processing bets, and facilitating withdrawals).
• Legal or Regulatory Obligation: Where we need to comply with legal mandates, such as verifying your age and identity to prevent underage gambling, preventing fraud, and fulfilling our commitments to responsible gambling and AML directives.
• Legitimate Interests: Where it is necessary for our legitimate business interests (or those of a third party) and your interests and fundamental rights do not override those interests, such as improving our website, services, and customer relations.
• Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time.

5. Disclosures of Your Personal Data

We may have to share your personal data with strictly vetted third parties for the purposes set out above. These include:

• Game providers and platform operators to facilitate your gameplay.
• Payment service providers to process your transactions securely.
• Fraud prevention agencies, credit reference agencies, and identity verification services.
• Regulatory authorities, law enforcement agencies, and sporting integrity bodies where we are compelled to do so by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. Data Security and Fair Play

At Night Luck UK, security is not an afterthought; it is the cornerstone of our brand. We have implemented state-of-the-art security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. This includes end-to-end 256-bit SSL encryption, rigorous firewalls, and strict internal access controls.

Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a strict business need to know. They will only process your personal data on our explicit instructions, and they are subject to a duty of strictest confidentiality.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for up to seven years after they cease being customers for tax and legal compliance purposes.

8. Your Legal Rights

Under certain circumstances, you have rights under UK data protection laws in relation to your personal data. You have the right to:

• Request access to your personal data (commonly known as a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data (the "right to be forgotten"), subject to our overriding legal retention obligations.
• Object to processing of your personal data where we are relying on a legitimate interest.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data (e.g., for direct marketing).

If you wish to exercise any of the rights set out above, please contact our Data Protection Officer.

9. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact our dedicated compliance team in writing at:

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.