Your Privacy at Hyper Lucky: How We Handle Your Data

Hyper Lucky holds Curacao eGaming license 8048/JAZ2026-007 and is required to collect certain personal data to keep the platform compliant and secure. The information we gather falls into three categories: identity data (full name, date of birth, and a government-issued ID scan), contact data (email address and phone number), and financial data covering cryptocurrency wallet addresses and transaction records for Bitcoin, Ethereum, USDT, Tether, Litecoin, Dogecoin, and TRON deposits and withdrawals.

We use that data for account creation and KYC verification, compliance with Curacao eGaming requirements, fraud detection and anti-money-laundering screening, and support correspondence via email, live chat, and Telegram. Your personal information is never sold or rented to advertisers or unrelated third parties. We do not build marketing profiles from your game history.

Software providers, including Evolution, Pragmatic Play, and NetEnt, receive session-level technical records - bet amounts, RNG outcome hashes, and device identifiers - to settle game results and satisfy independent audit requirements. Each provider operates under its own data processing agreement. We retain transaction logs for five years to meet AML obligations. Account data is deleted within 30 days of a verified closure request, unless a legal hold prevents it.

When you create an account at Hyper Lucky, we collect the information necessary to verify your identity, process transactions, and meet our obligations under Curacao eGaming license 8048/JAZ2026-007. This covers your name, date of birth, email address, and residential address. For cryptocurrency transactions - Bitcoin, Ethereum, USDT, TRON, Litecoin, Dogecoin, and Tether - we also record wallet addresses and transaction IDs tied to each movement of funds.

Technical data is gathered automatically: IP addresses, device type, browser version, and session timestamps. This helps us detect unauthorized access attempts and keep the platform stable across all product areas, from slots and live casino to sports betting, poker, and esports. We do not use this data to build advertising profiles or sell it to third parties.

Gameplay and betting records - session logs, wager amounts, bonus activity - are retained for compliance reviews and dispute resolution. Data linked to financial transactions is kept for a minimum of five years, consistent with anti-money-laundering standards that apply to licensed operators. If your account is closed, most personal data is deleted after the mandatory retention window expires.

Hyper Lucky stores personal data on secure servers protected by AES-256 encryption at rest and TLS 1.2 (or higher) for all data in transit. The infrastructure operates under the standards required by our Curacao eGaming license (8048/JAZ2026-007), which mandates regular security audits and strict access controls. Only authorized personnel with a documented business need can view identifiable account records.

How long we keep your data depends on the category and the legal basis for processing. The table below sets out the main retention windows we apply.

When you close your Hyper Lucky account, personal data not subject to a legal retention obligation is deleted within 90 days. Payment information, including records tied to cryptocurrency wallets for Bitcoin, Ethereum, TRON, Litecoin, and Dogecoin, is stored only in tokenized form. We never hold raw private keys or full wallet addresses, and no payment credentials are passed to third parties outside of transaction processing.

Data connected to an open dispute, ongoing investigation, or regulatory inquiry is held until the matter is fully resolved, regardless of the standard retention window. Once resolved, the data is flagged for deletion in the next scheduled purge cycle, typically within 30 days. If you submit a deletion request and a legal hold applies, we will notify you promptly and confirm the earliest available removal date.

All stored data is backed up daily to geographically separate locations. Backup copies follow the same retention schedule as primary records - once a retention period expires, backups containing that data are purged in the next scheduled rotation.

Hyper Lucky collects personal data to verify your identity, process payments, and meet the reporting obligations tied to license 8048/JAZ2026-007, issued by Curacao eGaming. You hold specific rights over that data at any time, whether your account is active or closed. These rights are not automatic approvals - each request is reviewed within 30 days, and you will receive a written response explaining the outcome.

Hyper Lucky sets small text files called cookies on your device when you visit the site. These files help the platform remember your session, keep your account secure, and measure how pages perform. Without session cookies, logging into your account, accessing your USD wallet, or staying authenticated while browsing slots and live casino tables would not work reliably. Cookies also support the bonus system, so free spins credits and deposit matches are applied to the correct account at checkout.

Analytics cookies collect data in aggregate form. No cookie links your browsing behavior to your name or email address. The platform uses this data to identify slow-loading pages, broken links, and drop-off points in the registration flow - helping the team improve the experience without accessing personally identifiable information.

You can manage or withdraw consent at any time through the cookie banner that appears on your first visit. Most browsers also let you block or delete cookies through their settings menu: in Chrome, go to Settings > Privacy and Security > Cookies; in Firefox, use Preferences > Privacy & Security. Disabling essential cookies will prevent some features from working, including live chat support and certain game-load functions from providers like Evolution and Pragmatic Play. Functional cookies are optional and can be cleared without affecting your ability to log in or make deposits.

Third-party cookies may be set by analytics services or affiliate partners. Hyper Lucky does not sell cookie data to third parties and does not use cookies to build profiles for external sale. For questions about specific cookies or to request a full disclosure, contact the support team via live chat, email, or Telegram. The active cookie list is reviewed and updated whenever the site integrates new tools or adds provider content.

The General Data Protection Regulation sets binding standards for collecting, storing, and processing personal data across the European Union and European Economic Area. Hyper Lucky holds a Curacao eGaming license (8048/JAZ2026-007) and focuses on the US market, but any player who resides in the EEA or who holds EU citizenship retains full GDPR rights when using this platform. We recognize those rights regardless of where our servers are located.

Every piece of personal data we process has a documented lawful basis: your explicit consent, a contractual necessity, a legal obligation we must satisfy, or a legitimate interest that does not outweigh your own rights. We do not sell personal data. Any third-party sharing is limited to payment processors, identity verification services, and technical infrastructure partners, all of whom are bound by data processing agreements.

Retention periods follow a minimum five-year window after account closure. That timeline reflects anti-money laundering rules tied to our Curacao eGaming license. Payment records covering cryptocurrency transactions, including Bitcoin, Ethereum, USDT, Litecoin, and Tether, fall under the same schedule. Once the retention period expires, data is deleted or anonymized.

To exercise any right listed above, contact our team through live chat, email, or Telegram and include your registered account email so we can locate your records. We aim to reply within 30 calendar days. In cases where a request is particularly complex, we may extend that window by a further 60 days and will notify you of the delay. If you believe we have not handled your data correctly, you may lodge a complaint with your local data protection supervisory authority.