Privacy Policy

Last updated: September 2026
Liraluck Casino is operated by Liraluck Limited and licensed by the Malta Gaming Authority (MGA/B2C/614/2019).

1. Introduction

This Privacy Policy explains how Liraluck Limited (“Liraluck”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit liraluck-casino.ca, register an account, deposit, play, contact support or otherwise use our services.

We are committed to protecting your privacy and handling your data in line with applicable laws, including the EU General Data Protection Regulation (GDPR) where it applies, the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy legislation.

2. Who We Are

The data controller responsible for your personal information is:

Liraluck Limited
185 Tower Road, Sliema, SLM 1605, Malta
Malta Gaming Authority licence: MGA/B2C/614/2019

For privacy-related questions or requests, contact us at [email protected].

3. Information We Collect

We may collect the following categories of personal data:

Identity Data: name, date of birth, age, gender, username and account details.
Contact Data: email address, phone number and postal address.
Verification Data: government-issued photo ID, passport, driver’s licence, utility bills, bank statements and other KYC/AML documents.
Financial Data: payment method details, deposit and withdrawal history, transaction references and currency.
Technical Data: IP address, device type, browser, operating system, approximate location and cookie identifiers.
Usage Data: pages visited, games played, bets placed, session duration and login activity.
Marketing and Communication Data: your preferences for receiving promotions and your communication history with us.
Responsible Gambling Data: deposit limits, loss limits, reality checks, cool-off periods and self-exclusion records.

4. How We Use Your Information

We use your personal data for the following purposes:

To create, manage and secure your player account.
To verify your identity, age, location and eligibility to play.
To process deposits, withdrawals and other payment transactions.
To provide, personalise and improve our casino services.
To comply with legal, regulatory and licensing obligations, including KYC, AML and responsible gambling requirements.
To detect, prevent and investigate fraud, cheating, collusion and money laundering.
To provide customer support and respond to your enquiries.
To send important service messages, security alerts and account updates.
To send marketing communications where you have opted in or where permitted by law.
To enforce our Terms & Conditions and resolve disputes.

5. Legal Bases for Processing

Where GDPR applies, we process your personal data on the following legal bases:

Performance of a contract: to provide you with the services you request.
Legal obligation: to comply with gambling, AML, KYC and tax laws.
Legitimate interests: to prevent fraud, improve our services and protect our players.
Consent: for marketing communications where consent is required. You may withdraw consent at any time.

Where Canadian privacy law applies, we generally rely on your consent, legal requirements and legitimate business purposes. In some cases, we may process information without consent where permitted or required by law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the website, remember your preferences, analyse traffic and deliver relevant content. You can manage cookies through your browser settings or our cookie banner.

For more details, please see our Cookie Policy.

7. Sharing Your Information

We may share your personal data with:

Payment service providers, banks and card processors.
Identity verification, KYC, AML and fraud prevention agencies.
Game studios, platform providers, hosting providers, IT and analytics partners.
Independent auditors and testing laboratories for game fairness and RNG certification.
Regulatory authorities, law enforcement and courts where required by law.
Professional advisers, such as lawyers and accountants, where necessary.

We do not sell your personal data to third parties. All service providers are required to protect your data under appropriate contracts.

8. International Transfers

Your data may be transferred to and processed in countries outside Canada, the EEA or your province. Where we transfer data internationally, we use appropriate safeguards, such as Standard Contractual Clauses, adequacy decisions or equivalent contractual protections.

9. Data Retention

We keep your personal data for as long as necessary to provide services and meet legal, regulatory, accounting and reporting requirements. In general, account and transaction records are retained for at least six years after account closure, or longer where required by gambling, AML or tax laws.

Marketing data is kept until you withdraw consent or opt out, unless we are required to retain it for compliance purposes.

10. Data Security

We use appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption, access controls, monitoring and staff training. You should also protect your account credentials and enable two-factor authentication where available.

No method of transmission or storage is completely secure, but we work to protect your information against unauthorised access, alteration, disclosure or destruction.

11. Your Rights

Depending on your location and applicable law, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data, subject to legal retention requirements.
Restrict or object to certain processing.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
Lodge a complaint with a supervisory authority.

To exercise your rights, contact us at [email protected]. We may ask you to verify your identity before responding. We aim to respond within the timeframes required by applicable law.

12. Marketing and Communications

We may send you promotional emails, SMS messages or other communications if you have opted in or where permitted by law. You can opt out at any time through your account settings or by using the unsubscribe link in our messages.

We will still send essential service messages, such as security alerts, account updates and changes to our terms or policies.

13. Responsible Gambling and Self-Exclusion

We process personal data to provide responsible gambling tools, including deposit limits, loss limits, reality checks, cool-off periods and self-exclusion. If you self-exclude, we may retain and use your data to enforce the exclusion, prevent new accounts and remove you from marketing.

For more information, see our Responsible Gaming page.

14. Children

Our services are not intended for anyone under 19 years of age, or under 18 in Alberta, Manitoba and Quebec. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will close the account and delete the information as required by law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Where changes are material, we may notify you by email or through your account.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise your data protection rights or make a complaint, contact us:

Email: [email protected]
Post: Liraluck Limited, 185 Tower Road, Sliema, SLM 1605, Malta

You also have the right to contact your local data protection authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada. In the EU/EEA, you may contact your local supervisory authority or the Maltese data protection authority.

Liraluck Casino is operated by Liraluck Limited and licensed by the Malta Gaming Authority, MGA/B2C/614/2019. Gambling is for entertainment only. 19+ (18+ in AB, MB, QC). Play responsibly.