Privacy Policy

Version: 1.0  |  Last Updated: 30 July 2026

This Privacy Policy explains how MidasLuck (“we”, “us”, or “the Operator”), operating the online Platform at midasluck-bonus.com, collects, uses, discloses, and safeguards the personal data of Users and Players (“you” or “the Player”). This Policy is designed to be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy.

We are committed to processing personal data responsibly, transparently, and in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and all other applicable data protection legislation.

1. Introduction

1.1. Purpose of This Policy

This Policy describes the personal information we process, the lawful basis on which we process it, how long we retain it, with whom we share it, and what rights you have over your data. We encourage all Players to read this Policy carefully before providing us with any personal information.

1.2. Data Controller

For the purposes of applicable data protection law, MidasLuck (operating via midasluck-bonus.com) acts as the Data Controller with respect to the personal data of its Players and Website visitors. If you have any questions or concerns about how your data is being processed, please contact our Data Protection contact at [email protected].

2. Data We Collect

2.1. Data Provided by You

We collect personal data that you voluntarily provide to us when you register an account, use our services, make financial transactions, or communicate with us. This includes:

• Identity Data: Full legal name, date of birth, gender, nationality;
• Contact Data: Email address, telephone number, residential address;
• Account Data: Username, password (stored in hashed form), account preferences and settings;
• Financial Data: Payment method details, transaction history, deposit and withdrawal records;
• KYC Documentation: Copies of identification documents, proof of address, source-of-funds documents;
• Communications Data: Records of correspondence with our customer support team, including emails, live chat logs, and telephone call recordings (where applicable).

2.2. Data Collected Automatically

When you access and use the Platform, we automatically collect certain technical and usage data, including:

• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution;
• Usage Data: Pages visited, time and duration of visits, features used, games played, click-path data;
• Geolocation Data: General geographic location derived from your IP address;
• Cookie and Tracking Data: Information collected via cookies and similar tracking technologies, as described in Section 6.

2.3. Data from Third Parties

We may receive personal data about you from third-party sources, including:

• Identity verification and fraud prevention agencies (as part of KYC procedures);
• Payment service providers (for transaction verification);
• Marketing partners and affiliate platforms (where you have arrived at our Website via a referral link);
• Publicly available sources (such as sanctions screening databases and PEP lists).

3. How We Use Your Data

3.1. Purposes of Processing

We use the personal data we collect for the following purposes:

• Account Registration and Management: To create and administer your Player account, verify your identity, and provide you with access to Platform services;
• Service Delivery: To process deposits and withdrawals, manage bonuses, deliver gameplay, and provide customer support;
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML), know your customer (KYC), counter-terrorism financing (CTF), and tax reporting obligations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, cheating, money laundering, and other illegal activities;
• Responsible Gaming: To monitor Player behaviour and identify signs of problem gambling, and to apply protective measures in accordance with our Responsible Gaming Policy;
• Marketing and Promotions: To send you promotional communications and personalised offers, where you have provided consent or where we have a legitimate interest to do so;
• Analytics and Platform Improvement: To understand how the Platform is used, to improve our products and services, and to enhance the user experience;
• Legal Claims: To establish, exercise, or defend legal claims in judicial or regulatory proceedings.

4. Legal Bases for Processing

4.1. Grounds Under GDPR

We process your personal data on the following legal grounds as defined by Article 6 of the GDPR:

• Contractual Necessity (Art. 6(1)(b)): Processing is necessary to perform the contract with you (i.e., to provide the services described in our Terms and Conditions), including account registration, transaction processing, and customer support;
• Legal Obligation (Art. 6(1)(c)): Processing is required to comply with applicable legal and regulatory obligations, including AML/KYC requirements, data retention mandates, and tax reporting;
• Legitimate Interests (Art. 6(1)(f)): Processing is necessary for the purposes of our legitimate interests, including fraud detection, network and information security, responsible gaming monitoring, and direct marketing (subject to your right to object);
• Consent (Art. 6(1)(a)): Where we rely on consent as a legal basis (e.g., for certain marketing communications or non-essential cookies), you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1. Categories of Recipients

We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Processors: To facilitate deposits and withdrawals, including banks, card networks, and e-wallet providers;
• Identity Verification Providers: To conduct KYC checks and age verification;
• Game Software Providers: To deliver gameplay and ensure platform functionality;
• Cloud and IT Service Providers: To host the Platform, manage data storage, and provide technical infrastructure;
• Analytics and Marketing Partners: To analyse Platform usage and deliver targeted advertising (where applicable and consented);
• Fraud and Risk Management Services: To detect and prevent financial crime;
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory obligation;
• Legal and Professional Advisors: Including lawyers, auditors, and accountants, under obligations of professional confidentiality.

5.2. No Sale of Personal Data

We do not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes.

5.3. Third-Party Data Processors

Where third parties process personal data on our behalf as data processors, we ensure that appropriate Data Processing Agreements (DPAs) are in place, requiring those parties to process your data only on our instructions and in accordance with applicable data protection law.

6. Cookies & Tracking Technologies

6.1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and store certain information about your preferences or prior actions. We also use similar technologies such as web beacons, pixel tags, and local storage objects.

6.2. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the functioning of the Platform, including maintaining your login session and security features. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform (e.g., Google Analytics). They help us improve our services.
• Functional Cookies: Used to remember your preferences (e.g., language settings, currency display, preferred games) to enhance your experience.
• Targeting and Advertising Cookies: Used to deliver relevant promotional content and advertisements, both on our Platform and on third-party sites, based on your browsing behaviour. These require your consent.

6.3. Cookie Consent and Management

Upon your first visit to the Platform, you will be presented with a Cookie Consent Banner allowing you to accept or decline non-essential cookies. You may also manage your cookie preferences at any time via the “Cookie Settings” link in the footer of the Website, or through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

7. Data Security

7.1. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your browser and our servers;
• Password hashing using industry-standard cryptographic algorithms;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability testing;
• Firewalls and intrusion detection systems;
• PCI-DSS compliance for the handling of payment card data.

7.2. Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33. Where the breach is likely to result in a high risk to individuals, we will also notify affected Players directly without undue delay.

8. Data Retention

8.1. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following general retention periods apply:

After the applicable retention period has expired, personal data will be securely deleted or anonymised.

9. Your Rights

9.1. Rights Under GDPR

Subject to applicable legal limitations, you have the following rights in relation to your personal data:

• Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you and information about how we process it.
• Right to Rectification (Art. 16 GDPR): You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure / “Right to Be Forgotten” (Art. 17 GDPR): You may request deletion of your personal data where there is no compelling reason for us to continue processing it. This right is subject to legal retention obligations.
• Right to Restriction of Processing (Art. 18 GDPR): You may ask us to restrict the processing of your data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability (Art. 20 GDPR): Where processing is based on consent or contract, and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2. How to Exercise Your Rights

To exercise any of the above rights, please contact our Data Protection team at [email protected]. We will respond to your request within 30 days of receipt. If the request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you accordingly.

9.3. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your data protection rights have been infringed. In Greece, the relevant authority is the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

10. International Data Transfers

10.1. Transfers Outside the EEA

Some of our third-party service providers and partners may be located outside the European Economic Area (“EEA”). Where personal data is transferred to countries that are not considered to offer an adequate level of data protection by the European Commission, we implement appropriate safeguards to ensure that your data remains protected, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• Adequacy Decisions where the destination country has been deemed adequate;
• Binding Corporate Rules where applicable within corporate groups.

You may request further information about the safeguards in place for international data transfers by contacting [email protected].

11. Minors

11.1. No Services to Minors

Our Platform and services are not intended for individuals under the age of 21 years. We do not knowingly collect personal data from individuals below this age. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on our Platform, please notify us immediately at [email protected].

12. Changes to This Policy

12.1. Policy Updates

We reserve the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or for other operational reasons. When we make material changes, we will notify you by publishing an updated version of the Policy on the Website with a revised “Last Updated” date, and where appropriate, by sending you an email notification. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the changes.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data, please contact us:

• General Support: [email protected]
• Data Protection / Privacy Queries: [email protected]
• Website: midasluck-bonus.com

This Privacy Policy is effective as of 30 July 2026 (Version 1.0).