Privacy Policy

rolluck.com is operated by [Operator legal entity], registered at [Registered office address] (Rolluck, we or us). We are the controller of the personal data described in this policy: we decide why and how it is processed. You can reach us about anything in it at support@rolluck.com.

We collect what you give us, what the Service records as you use it, and what our partners tell us:

• Account details — your name, username, email address, mobile number, password (stored only as a one-way hash), time zone, avatar and preferences such as language and display currency.
• Sign-in details — if you use Google, Telegram or Steam, the identifier and basic profile that provider shares with us, such as your name, email address or public profile.
• Verification details — the identity, address, age and source-of-funds information and documents we ask for to meet our legal obligations.
• Wallet and transaction details — deposit and withdrawal addresses, blockchain transaction references, amounts, currencies and networks, and the balances, bonuses and rewards on your account.
• Gameplay — the bets you place, their outcomes, the games you play and when, which also drive your bonus wagering, rewards and VIP tier.
• Technical details — your IP address, device and browser type, and sign-in times, used to secure your account and to apply location restrictions.
• Communications — messages you send to support, and live chat you take part in.

• To create and run your account, process deposits and withdrawals, and settle your bets.
• To verify your identity, age and location, and to meet our anti-money-laundering, licensing and tax obligations.
• To detect and prevent fraud, cheating, bonus abuse and unauthorised access.
• To apply bonuses, rewards and VIP benefits, which are calculated from your play.
• To spot signs of gambling harm and act on them, and to honour limits and exclusions you ask for.
• To answer your questions and resolve complaints.
• To send you promotions, only where you have agreed to receive them.
• To keep the Service working and improve it.

Where data-protection law requires a legal basis for each use, ours are:

• Contract — running your account and providing the games you play.
• Legal obligation — verification, anti-money-laundering checks, responsible-gambling duties and record keeping under our licence.
• Legitimate interests — keeping the Service secure, preventing fraud and abuse, and improving it, where those interests are not outweighed by yours.
• Consent — marketing messages, which you can withdraw at any time.

We do not sell your personal data. We share it only where needed, with:

• identity-verification and fraud-prevention providers;
• payment and blockchain service providers that process your deposits and withdrawals;
• game studios whose games you play, to the extent needed to run and settle them;
• hosting, email and messaging providers that run parts of the Service for us;
• our licensing authority, law enforcement, courts and tax authorities, where the law requires it;
• a buyer or successor, if our business or part of it is sold or reorganised.

Providers act on our instructions and under contracts that require them to protect your data.

Some parts of the site are served by other companies, which receive your IP address and basic browser details when they load:

• Google Fonts supplies the site's typeface.
• Google, Telegram and Steam handle sign-in when you choose them; their own privacy policies apply to what you share with them there.
• QR Server (api.qrserver.com) draws the QR code on the deposit screen, and so receives the deposit address being encoded.

We keep a small amount of information in your browser so the site works: your sign-in session and its expiry, and your chosen theme, held only for the current browser session; and your language choice, kept until you clear it. These are strictly necessary and cannot be switched off without breaking sign-in.

We do not currently use analytics or advertising cookies. Sign-in providers may set their own cookies when you use them. If we add optional cookies in future, we will ask for your consent first and update this section.

Our providers may process data outside the country where you live. Where the law requires it, we protect those transfers with recognised safeguards, such as standard contractual clauses or an adequacy decision covering the destination country.

We keep your data while your account is open and afterwards for as long as the law requires — anti-money-laundering and licensing rules usually require verification and transaction records to be kept for several years after an account closes. Data we no longer need is deleted or anonymised.

Traffic to the Service is encrypted in transit, passwords are stored as one-way hashes, and access to player data is limited to staff and providers who need it. You can add two-factor authentication to your account from your security settings. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you suspect your account has been accessed.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have data deleted, where we are not required to keep it;
• restrict or object to certain uses, including marketing;
• receive data you gave us in a portable format;
• withdraw consent you have given, without affecting earlier processing;
• complain to your local data-protection authority.

To use any of these, write to support@rolluck.com. We may need to confirm your identity first, and some requests — deleting verification or transaction records, for example — are limited by our legal duty to keep them.

We send promotional emails and messages only if you opt in, which you can do when you register or later. Every message tells you how to unsubscribe, and you can also opt out by contacting support. We never send marketing to anyone who has self-excluded.

The Service is for adults only. We do not knowingly collect data from anyone under 18, and we close any account we find belongs to a minor. If you believe a minor has registered, please tell us.

We update this policy when the way we handle data changes. The date at the top shows the latest version, and we will tell you about significant changes by email or on the site. Our Terms of Service explain the rest of our agreement with you.