Log inSign up

Your Privacy at Lolajack Casino

This policy explains what personal information we collect when you play at lolajack-pokies.com, why we collect it, who we share it with and how long we keep it. We operate under licence OGL/2026/1589/0347 issued in Curaçao, and we apply GDPR-standard protections to every player regardless of location.

What We Collect From You

We collect only the information needed to run your account, verify your identity, process your payments and meet our legal obligations. Australian players are identified and verified to the same standard as our EU players.

  • Identity data: full name, date of birth, residential address, email and phone number
  • Verification documents: photo ID, proof of address no older than 3 months, and payment method proof for KYC
  • Transaction data: deposits, withdrawals, wagering records and bonus activity
  • Technical data: IP address, device and browser information, and approximate location
  • Gameplay behaviour: game history, session times, betting patterns and win or loss records
  • Marketing preferences: whether you opt in to our bonuses, free spins and tournament offers

How We Use Your Data

Every use of your data maps back to a purpose listed here. We do not sell your data and we do not use it for purposes you have not been told about.

  • Creating and managing your player account and VIP club membership
  • Verifying your identity and age before your first withdrawal, within 48 hours
  • Processing deposits and withdrawals across AUD, USD, EUR, USDT and BTC
  • Preventing fraud, bonus abuse, money laundering and multiple-account abuse
  • Monitoring play for responsible-gambling signals such as loss-chasing
  • Sending marketing messages where you have given consent
  • Meeting record-keeping and reporting duties imposed by our licence

Contract: we process identity, account and transaction data to perform the player agreement you accepted when registering. Without this data we cannot operate your account or pay out winnings.

Legal obligation: KYC and AML checks, transaction record-keeping for 5 or more years, and responses to regulator or law-enforcement requests rest on our legal duty under licence OGL/2026/1589/0347.

Legitimate interest: fraud prevention, security monitoring and aggregated analytics rely on our legitimate interest in keeping the platform safe and functional. This interest never overrides your rights.

Consent: marketing emails, SMS offers and non-essential cookies run only on your consent. You withdraw consent at any time via account settings or the unsubscribe link.

How Long We Keep Records

Retention periods follow the stricter of Australian gaming regulations and our Curaçao licence terms. The clock starts when the record was created, not when you last played.

  • Transaction and wagering data: at least 5 years after the account closes
  • KYC documents: up to 5 years, then securely deleted
  • Account and identity data: 5 years after account closure
  • Marketing preferences: until you withdraw consent or ask us to delete them
  • Security and fraud logs: up to 12 months
  • Data you ask us to erase: deleted within 30 days unless a legal hold applies

Who We Share Data With

We share only what each category of recipient strictly needs. Payment processors such as Visa, Mastercard, Skrill, MiFinity, Jeton and the crypto networks receive your transaction instructions. KYC and AML verification providers receive copies of your identity documents for checking. Our game providers (Pragmatic Play, Evolution, Playtech and others in our roster of 28) receive your player ID and wagering data so gameplay settles correctly. Regulators and licensing authorities in Curaçao receive reports required by law. Analytics providers receive pseudonymised usage data. We never transfer your data to advertising brokers or data markets.

Your Rights Over Your Data

You control your data. Australian players may lodge complaints with the OAIC; if you access us from the EU, you may also complain to your national data protection authority. We answer every request within 30 days.

  • Access: get a copy of the personal data we hold about you
  • Rectification: correct anything inaccurate or outdated
  • Erasure: request deletion where no legal retention duty applies
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest
  • Withdrawal of consent: stop marketing at any time
  • Complaint: escalate to the OAIC or your local DPA

Cookies and Tracking Tools

We use session cookies to keep you logged in, security cookies to detect fraud, and, with your consent, analytics and marketing cookies that measure how our 10,000 games and promotions perform. Full detail on every cookie category, its lifetime and its provider sits in our Cookie Policy on the cookies page, which also holds the consent switch you can switch off at any time.

How We Protect Your Information

All traffic between your device and our servers runs over TLS 1.3 encryption. Stored verification documents sit in encrypted storage with access limited to compliance staff on a need-to-know basis, logged and audited. Our payment flows use PCI DSS-aligned tokenisation, so full card numbers never touch our systems. If a data breach affects your personal information, we notify the relevant regulator within 72 hours of confirming it and tell affected players without undue delay, together with what we are doing to fix it. Support is reachable 24/7 via live chat or [email protected] if you spot anything suspicious on your account.

Contacting Our Data Team

Questions about this policy, data requests or complaints go to our Data Protection Officer at [email protected]. We respond within 30 days, and 72 hours for suspected breaches. Our registered operator is Lolajack N.V., Curaçao, licence OGL/2026/1589/0347. If we change this policy, we announce material changes on-site 14 days before they take effect.

Frequently Asked Questions

Does Lolajack Casino sell my data to advertisers?

No. We share data only with payment processors, KYC providers, regulators and analytics partners as described above, and never with advertising brokers.

How long do you keep my KYC documents?

We keep verification documents for up to 5 years to satisfy our AML and licensing obligations, then delete them securely.

Can I get my gameplay history exported?

Yes. Send a data portability request to [email protected] and we return your account, transaction and gameplay data in a machine-readable format within 30 days.

Can I stop marketing messages and still keep playing?

Absolutely. Withdraw consent via account settings or any unsubscribe link. Your account, bonuses and gameplay stay unaffected.

What happens to my data if I close my account?

Identity and transaction records are retained for 5 years after closure where law requires it, then deleted. Marketing data is removed as soon as you ask.