Privacy Policy

This privacy policy explains how lucky-7even-canada processes and protects personal data collected from players and website visitors at lucky-7even-ca.com. It applies to all users accessing our services within Canada and is effective as of November 6, 2025.

Who We Are

OBSERVE: Review of corporate, registration, and contact data reveals the following operator details.

EXPAND: Legal compliance in CA requires transparent identification of the controller, physical address, and data protection contacts.

REFLECT: The operator of lucky-7even-ca.com is:

Legal Entity: Hollycorn N.V., registered at Scharlooweg 39, Willemstad, Curaçao, company registration number: 144359.
Gaming License: OGL/2023/176/0095, issued by the Curaçao Gaming Control Board, valid until 2025.
Data Protection Contact: For privacy inquiries, contact Olivia Tremblay (Data Protection Officer) at [email protected] or via the online forms at Support and Contact.

Regional Compliance Note: As required by CA privacy standards, all data handling is overseen by the appointed DPO.

What Personal Data We Collect

OBSERVE: Collection of data is mandated for account management, security, and regulatory compliance.

EXPAND: Data falls into several categories, each processed under strict legal controls.

REFLECT: Categories of data collected on lucky-7even-ca.com include:

Personal Identification Data: Full name, email address, phone number, date of birth, government-issued identification.
Technical Data: IP address, device information, browser type, operating system, log files, timestamps.
Payment Data: Payment card details, banking information, transaction records, withdrawal and deposit history.
Behavioral Data: Gameplay activity, betting and transaction history, website navigation, clickstream data.
Cookies and Similar Technologies: Session and persistent cookies, web beacons, analytics tags, third-party tracking for performance and advertising.

All data is collected in accordance with applicable CA privacy laws and gaming regulations.

Legal Basis for Processing

OBSERVE: CA and international law require explicit legal grounds for each processing activity.

EXPAND: Our processing is justified by several legal bases, managed in accordance with best practices and regulatory standards.

User Consent: Data processed with your explicit consent, particularly for marketing communications and optional features. Consent may be withdrawn at any time.
Contract Fulfillment: Processing necessary to provide gaming services, process payments, verify identity, and manage your account on lucky-7even-ca.com.
Legal Obligations: Compliance with anti-money laundering (AML), know-your-customer (KYC), taxation, fraud prevention, and regulatory reporting.
Legitimate Interests: Data used to improve website functionality, ensure system security, prevent fraud, conduct analytics, and protect the rights and safety of users and the operator, provided such interests do not override your fundamental rights.

Regional Compliance Note: All legal bases are determined in accordance with CA privacy laws and applicable international standards.

Purpose of Processing

OBSERVE: Data is processed only for specified, legitimate purposes relevant to online gaming operations.

EXPAND: Each purpose is directly linked to regulatory requirements and user service optimization.

Provision of Casino Services: Account creation, user authentication, transaction processing, and access to games on lucky-7even-ca.com.
Service Enhancement: Monitoring site performance, improving user experience, and developing new features.
Marketing Communications: Sending promotional offers, newsletters, and updates with your consent.
Analytics: Analyzing user behavior to optimize services and ensure regulatory compliance.
Fraud Prevention and Security: Detecting unauthorized activities and securing user accounts.

Data is not processed for purposes incompatible with those stated above without additional notice and, where required, consent.

Disclosure & Sharing

OBSERVE: Data sharing is regulated and restricted to necessary parties only.

EXPAND: All third-party disclosures are subject to contractual safeguards and compliance checks.

Payment Partners: Financial institutions and payment processors for transaction fulfillment under strict confidentiality agreements.
Service Providers: IT support, cloud hosting, analytics, marketing, and customer service providers who process data on our behalf and in accordance with this policy.
Regulatory Authorities: Disclosures to regulatory bodies, including the Curaçao Gaming Control Board and Canadian authorities, as required by law.
Affiliates and Group Companies: Members of the Hollycorn N.V. group for operational purposes, subject to intra-group data protection agreements.
Advertising Networks: Third-party advertisers with your explicit consent, for the purpose of delivering targeted advertisements.

No personal data is sold to unrelated third parties. All disclosures comply with CA privacy law and industry best practices.

International Transfers

OBSERVE: Some personal data may be transferred outside Canada, notably to Curaçao (HQ jurisdiction) and other operational regions.

EXPAND: Data transfers follow legal safeguards to ensure adequate protection wherever data is processed.

Countries/Regions: Transfers may occur to Curaçao, EU/EEA member states, and other jurisdictions where service providers are located.
Protection Guarantees: Standard contractual clauses (SCCs), data processing agreements, and other legal safeguards are implemented for all international transfers. Where applicable, additional technical and organizational measures are adopted.
User Protections: Users are informed of cross-border transfers and have the right to request further details or object where permitted by law.

Regional Compliance Note: All international transfers comply with CA privacy laws and relevant international data transfer regulations.

Data Retention

OBSERVE: CA law and online gaming regulations mandate defined retention periods and secure deletion procedures.

EXPAND: Data is retained only as long as necessary for the purposes outlined, subject to legal and regulatory requirements.

Personal Data: Retained for up to five (5) years after account closure or last activity, unless a longer period is required by law (e.g., for legal or regulatory investigations).
Payment and Transaction Data: Retained for at least five (5) years to comply with AML/KYC obligations.
Behavioral and Technical Data: Retained for three (3) years unless required longer for dispute resolution or system security.
Deletion Criteria: Data is securely deleted upon user request (where permitted), expiration of retention periods, or when processing is no longer necessary.

All deletion is performed securely and in compliance with industry standards.

Your Rights

OBSERVE: Users in CA are entitled to a comprehensive set of privacy rights aligned with international standards (e.g., GDPR principles).

EXPAND: Rights are granted free of charge and can be exercised through multiple channels as described below.

Right of Access: Obtain confirmation of whether your data is being processed and access a copy of your personal data.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data, subject to legal and regulatory limitations.
Right to Restrict Processing: Request restriction of processing in certain circumstances (e.g., contesting data accuracy).
Right to Object: Object to processing for direct marketing or based on legitimate interests.
Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format and, where feasible, have it transmitted to another controller.
Right to Withdraw Consent: Withdraw consent to marketing or other data processing activities at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights: Submit requests via [email protected] or through our online forms. We will respond within 30 days. Requests are processed free of charge unless manifestly unfounded or excessive. If dissatisfied, you may escalate to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Cookies & Tracking Technologies

OBSERVE: Cookies are essential for site functionality and user experience on lucky-7even-ca.com.

EXPAND: Multiple types of cookies are used, each serving a specific purpose and subject to user control.

Session Cookies: Temporary cookies deleted after each session, used for basic site operation and authentication.
Persistent Cookies: Remain on your device for a defined period to remember preferences and login details.
Third-Party Cookies: Set by analytics, advertising, and affiliate partners to analyze site usage and deliver targeted ads (with your consent).

Managing Cookies: You may manage or disable cookies via browser settings or the internal consent panel on lucky-7even-ca.com. Disabling certain cookies may affect site functionality.

Data Security

OBSERVE: Protection of personal data is a legal and operational priority, in line with international standards.

EXPAND: Comprehensive security measures are implemented to prevent unauthorized access, loss, or misuse of data.

Encryption: All data is encrypted in transit using TLS 1.2+ protocols and at rest where applicable.
Access Controls: Strict access management, multi-factor authentication, and role-based permissions restrict data access to authorized personnel only.
Security Audits: Regular internal and external audits of systems and processes, aligned with ISO 27001 and SOC 2 standards.
Staff Training: Ongoing employee training on data protection, privacy obligations, and incident response.
Incident Response: Documented procedures for managing and reporting data breaches, including user notification in compliance with CA law.

We continually review and enhance our security controls to address emerging threats and vulnerabilities.

Complaints & Contacts

OBSERVE: Multiple channels are available for submitting privacy-related complaints or inquiries regarding lucky-7even-ca.com.

EXPAND: The complaint process is transparent, with clear escalation paths to authorities if required.

Initial Contact: Submit your complaint or inquiry to Olivia Tremblay, Data Protection Officer, via [email protected] or our online forms.
Procedure: We acknowledge receipt of complaints within five (5) business days and aim to provide a substantive response within thirty (30) days.
Escalation: If you are dissatisfied with our response, you may escalate the matter to the Office of the Privacy Commissioner of Canada, https://www.priv.gc.ca/en/contact-the-opc/. For residents of other jurisdictions, complaints can be directed to the relevant supervisory authority as applicable.

All complaints are handled confidentially and in accordance with CA data protection law.

Updates

OBSERVE: Policy updates must be communicated transparently and in a timely manner.

EXPAND: Users are notified of changes and provided with options regarding continued service use.

Notification Methods: We inform users of material changes via email notifications, prominent website banners, and alerts in the account dashboard.
Advance Notice: Significant changes are announced at least thirty (30) days in advance to allow users to review updates and object or close their accounts if desired.
Version Control: Each policy version is dated for reference. Last updated: November 6, 2025.
Changelog: A summary of material changes is maintained and made available to users upon request.

Continued use of lucky-7even-ca.com services after changes take effect constitutes acceptance of the revised policy.