Privacy & Security

Information Collection

Complete Technologies N.V., registered and operating under the authority of the Curacao Gaming Control Board pursuant to License No. OGL/2024/923/0383, acts as the data controller with respect to all personal data collected through the website luckyhills1.ca. The following categories of personal data are subject to collection and processing in connection with the provision of services offered through this platform.

Identification data are collected upon registration and throughout the duration of the contractual relationship. Such data include, but are not limited to, full legal name, date of birth, nationality, and government-issued identification numbers as required for identity verification purposes. Contact information, including electronic mail addresses, telephone numbers, and residential addresses, is collected for the purpose of facilitating communication between the data subject and the controller.

Financial data, including payment method details, transaction histories, deposit and withdrawal records, and associated banking information, are collected and retained in accordance with applicable anti-money laundering regulations and responsible gaming obligations. Technical data pertaining to device identifiers, Internet Protocol addresses, browser types, operating system configurations, session durations, and navigational patterns within the website are collected automatically through the use of cookies and analogous tracking technologies.

Behavioral data derived from user interaction with the platform, including gaming activity, wagering patterns, frequency of access, and preferences expressed through platform use, are recorded and retained for the purposes described herein. Where applicable, communications data comprising the content of correspondence submitted through contact forms, electronic mail exchanges, and customer support interactions are preserved as part of the data subject's account record.

The collection of the aforementioned categories of data is carried out on the basis of one or more lawful grounds, including the performance of a contractual obligation, compliance with legal obligations imposed upon the controller, the legitimate interests of the controller, and, where applicable, the explicit consent of the data subject.

How We Use Data

Personal data collected through the operation of luckyhills1.ca is processed exclusively for defined, explicit, and legitimate purposes. All processing activities are conducted in a manner consistent with the principles of data minimization, purpose limitation, and storage limitation as recognized under applicable data protection frameworks.

Identification and contact data are processed for the purpose of account registration, verification of the data subject's identity, fulfillment of know-your-customer obligations, and the prevention of fraudulent or unauthorized account access. Such data are further utilized for the communication of transactional notifications, security alerts, and mandatory regulatory disclosures.

Financial data are processed for the facilitation of deposit and withdrawal transactions, the reconciliation of account balances, the detection and investigation of potentially fraudulent financial activity, and compliance with obligations imposed under anti-money laundering and counter-terrorist financing legislation applicable within the jurisdiction of operation.

Technical and behavioral data are processed for the purposes of ensuring the operational integrity and security of the platform, diagnosing technical malfunctions, optimizing platform performance, and conducting statistical analysis of aggregate usage patterns. Such data may additionally be processed for the purpose of personalizing the user experience within the bounds of applicable consent requirements.

Where the data subject has provided explicit consent, contact information may be processed for the delivery of promotional communications, including offers, bonuses, and updates regarding platform services. Consent so provided may be withdrawn by the data subject at any time, and such withdrawal shall not affect the lawfulness of processing conducted prior to the revocation of consent.

Personal data shall not be sold, transferred, or otherwise made available to third parties except where such disclosure is necessary for the performance of contracted data processing services, required by a competent regulatory or judicial authority, or expressly consented to by the data subject. Third-party service providers engaged by Complete Technologies N.V. are bound by data processing agreements ensuring compliance with applicable data protection standards.

Data Protection

Complete Technologies N.V. has implemented a comprehensive framework of technical and organizational measures designed to ensure a level of security appropriate to the risks associated with the processing of personal data through luckyhills1.ca. Such measures are reviewed and updated on a regular basis in response to evolving technological developments and identified risk factors.

Technical measures employed include the application of industry-standard Transport Layer Security encryption protocols to all data transmitted between user devices and the platform's servers. Stored personal data is protected through encryption mechanisms utilizing advanced cryptographic standards. Access to systems containing personal data is restricted through the implementation of role-based access controls, multi-factor authentication requirements, and regular review of access privileges.

Network security measures, including the deployment of firewalls, intrusion detection systems, and continuous monitoring infrastructure, are maintained to prevent unauthorized access, data exfiltration, or compromise of system integrity. Penetration testing and vulnerability assessments are conducted periodically by qualified security professionals to identify and remediate potential weaknesses within the technical environment.

Organizational measures include the implementation of internal data protection policies governing the conduct of personnel with access to personal data. Personnel engaged in the processing of personal data are required to undertake appropriate data protection training and are bound by confidentiality obligations. Data processing activities are subject to internal audit procedures to ensure ongoing compliance with applicable regulatory requirements.

Procedures for the detection, investigation, and reporting of personal data breaches are maintained in accordance with applicable legal obligations. In the event that a personal data breach is determined to pose a risk to the rights and freedoms of data subjects, notification shall be provided to the relevant supervisory authority and, where applicable, to affected data subjects within the timeframes prescribed by law.

Personal data shall be retained for no longer than is necessary for the purposes for which such data were collected, subject to any retention obligations imposed by applicable law, including those arising from gaming regulatory requirements and financial record-keeping legislation. Upon the expiration of the applicable retention period, personal data shall be securely deleted or anonymized.

Your Rights

Data subjects whose personal data are processed by Complete Technologies N.V. in connection with the operation of luckyhills1.ca are entitled to exercise a range of rights with respect to such data. The exercise of these rights is subject to applicable legal limitations and the verification of the data subject's identity prior to the fulfilment of any request.

The right of access entitles data subjects to obtain confirmation as to whether personal data concerning them are being processed and, where such processing is confirmed, to receive a copy of the personal data undergoing processing together with information regarding the purposes, categories, recipients, and retention periods applicable to such processing.

The right to rectification entitles data subjects to request the correction of inaccurate personal data concerning them and the completion of incomplete personal data, having regard to the purposes of the processing. Requests for rectification shall be assessed and, where appropriate, acted upon without undue delay.

The right to erasure, also referred to as the right to be forgotten, entitles data subjects to request the deletion of personal data concerning them where such data are no longer necessary for the purposes for which they were collected, where consent has been withdrawn and no alternative lawful basis for processing exists, or where the processing is determined to be unlawful. This right is subject to overriding legal obligations requiring the retention of certain data.

The right to data portability entitles data subjects to receive personal data concerning them, which has been provided to the controller and is processed on the basis of consent or contractual necessity, in a structured, commonly used, and machine-readable format. Where technically feasible, data subjects may request the direct transmission of such data to another controller.

The right to restriction of processing entitles data subjects to request that the processing of their personal data be limited in circumstances where the accuracy of such data is contested, the processing is unlawful but erasure is not requested, the data are required for the establishment, exercise, or defence of legal claims, or an objection to processing has been lodged pending verification of whether the controller's legitimate grounds override those of the data subject.

The right to object entitles data subjects to object, on grounds relating to their particular situation, to the processing of personal data concerning them where such processing is based on the legitimate interests of the controller. Data subjects further retain the right to object at any time to the processing of their personal data for direct marketing purposes.

Where processing is based on consent, the right to withdraw consent may be exercised at any time without prejudice to the lawfulness of processing carried out prior to such withdrawal. Requests to exercise any of the rights described herein shall be submitted through the contact channels specified in this document and shall be responded to within the timeframes prescribed by applicable law.

Data subjects who consider that the processing of their personal data infringes applicable data protection law retain the right to lodge a complaint with the competent supervisory authority in the jurisdiction in which they are habitually resident, in which they work, or in which the alleged infringement is considered to have occurred.

Contact Us

All inquiries, requests, or correspondence relating to the processing of personal data by Complete Technologies N.V. in connection with the operation of luckyhills1.ca, including requests to exercise data subject rights, may be directed to the controller through