PRIVACY POLICY

Effective from 12 October 2026.

1. SCOPE

Lucky Boom protects personal information. This policy states what is collected through our services, the purposes and the uses.

It is an agreement between the user and Lucky Boom ("we", "us", "our") and forms part of the Lucky Boom Terms and Conditions.

The website Lucky Boom (the "Casino", "Website", "Company", "We", "Us", "Our") is owned and operated by MAIREKE LIMITADA, registered in Costa Rica.

The policy may change; the amended text is published on our platforms and should be reviewed regularly.

2. DATA COLLECTED

Personal Information ("Personal Information") is any information that can identify a person: first and last name, date of birth, home or other address, email address, telephone number and similar. It may be requested on use of the website, on registration or on use of the services, and includes contact details, shipping and billing details, transaction history, website preferences and feedback on the Services. It is stored on servers in Costa Rica and, from time to time, elsewhere. Our servers also keep a per-user activity log with source IP address, time and date of access, pages visited, language, software crash reports and browser type, which is essential to providing and maintaining quality services. Personal Information is not collected without the user's knowledge.

3. COLLECTION AND PROCESSING

Data are collected automatically as described above, supplied by the user through the services or other interaction on Lucky Boom, or received from online vendors, service providers and lawfully acquired customer lists. Third-party providers may support technical operations, process online transactions and maintain accounts, with access to the information supplied to them and use only as stated in this policy. Disclosure to third parties outside the company follows this policy, and arrangements with providers and vendors are designed to protect privacy.

4. USE

Personal Information is used to deliver the Services, provide support, carry out security and identity verification, process transactions, assist in third-party promotions, meet business requirements and for other purposes related to the operation of the Services, and may be shared with carefully selected partners, including their data-sharing partners.

It may also be used to send (1) promotional offers and information about our products and services and (2) those of our partners, to widen the offering and improve service. Surveys and contests are voluntary and may request contact details (name, address, telephone) and demographics (postal code, age). Accepting a contest prize or winnings implies consent to use of the name for advertising and promotion without compensation, unless prohibited by law. Unless the user has opted out, Personal Information, including email address and telephone number, may be used for information on our products, services and promotions, including other gaming products (online poker, casino, betting, backgammon) and selected third-party products.

5. DISCLOSURE

Personal Information may be disclosed where required by law or where disclosure is believed in good faith necessary to (1) comply with legal process against us, our sites or the services, or a substantially similar legal obligation, (2) protect our rights or property, or (3) protect the personal safety of users or the public. Where, in our sole determination, a user has cheated or tried to defraud us, the company or other users (game manipulation, payment fraud), or is suspected of fraudulent payment (stolen cards, chargebacks or reversals) or prohibited transactions (money laundering), the information and identity may be shared with other online gaming sites, banks, card companies, agencies and authorities. (4) For addiction-prevention research, data may be anonymised and passed to the relevant institutions.

6. ACCESS AND CHOICES

Promotional communications can be opted out of in account settings, through the link in our emails or at any time by contacting Customer Service.

Users may contact us to 1) confirm the accuracy of the data held, 2) update it or 3) complain about its use; on request we will (1) update data where the change is shown to be necessary or (2) mark it to prohibit use for marketing. Retention required by law is not affected.

7. COOKIES

Information placed on the device

Cookies are small text files stored on the device on visiting online pages and recording preferences. Local Shared Objects ("flash cookies") work similarly and allow us to remember aspects of visits across our sites. Neither can be used to access other information on the computer; they are used solely to track use of our services, to monitor traffic, improve the services and make them easier and more relevant. Flash cookies and third-party cookies are used to show more relevant advertisements.

Strictly necessary cookies

Essential for moving around a website and using its features, such as secure areas and financial transactions; without them our websites could not work efficiently.

During registration

Hold information collected during registration to recognise the user as a customer and provide the required services; may also be used to understand interests online and improve visits.

On our website

Our servers use three types of cookie:

Session cookie: allocated for the duration of a visit, speeds navigation and allows more relevant information for registered customers; expires when the browser is closed.

Persistent cookie: remains on the computer for a period set for each cookie; flash cookies are also persistent.

Analytical cookies: recognise and count visitors and show how services are used, to improve how our sites work.

Cookies can be accepted or declined. Most browsers accept them by default, but settings can usually be changed; the browser's Help menu explains how to block new cookies, be notified of them or disable them.

Flash cookies

Flash Player settings can be modified to prevent flash cookies in the Settings Manager. To block them from all third-party content, open "Global Storage Settings", deselect "Allow third-party flash content to store information on your computer" and close the Settings Manager. For specific websites use "Website Storage Settings".

With an old Flash Player or browser the Settings Manager may be unavailable; update both to the latest versions.

Declining cookies may limit the interactive features of our sites.

8. PAYMENT PROVIDERS

Real-money play requires sending and receiving money. Third-party electronic payment systems may process these transactions. By accepting this policy the user consents to the Personal Information necessary for processing, including, where necessary, transfer outside the country. Arrangements with payment systems are designed to protect privacy.

9. SECURITY REVIEW

A security review may be conducted at any time to validate registration data and to verify use of the services and financial transactions for possible breaches of the Terms and Conditions or the law. By using the services the user authorises the use and disclosure of Personal Information to third parties for validation, including, where necessary, transfer outside the country. Reviews may include a credit report or checks against third-party databases, and the user agrees to provide the information or documents requested. 10. SECURITY

Personal Information received directly from the user is stored in an encrypted, password-protected database in our secure network behind active state-of-the-art firewall software (SSL Version 3, 128-bit encryption). We also take measures to ensure that subsidiaries, agents, affiliates and suppliers apply adequate security.

11. MINORS

The Services are not intended for persons under eighteen (18) or the lawful age in their jurisdiction. Providing information signifies that the person is eighteen (18) or older (or of lawful age). Attempts by minors to use the services are uncovered where possible, which may involve a security review; if a minor has tried to submit or submitted personal information, it is not accepted and is purged from our records.

12. INTERNATIONAL TRANSFERS

Personal Information may be stored and processed in any country where we or our affiliates, suppliers or agents maintain facilities. By using the services the user consents to transfer outside their country, including to countries not assessed as having adequate privacy laws; we take steps to ensure that agents, affiliates and suppliers comply with our standards wherever they are.

13. THIRD-PARTY PRACTICES

Protection of information given to third-party sites that link to or from the services, or collected by third parties administering our affiliate or other programmes, cannot be ensured; those sites are independent, and their privacy policies, if any, apply.

14. DISCLAIMER

The Services operate "AS IS" and "AS AVAILABLE" without liability of any kind. We are not responsible for events beyond our direct control, cannot guarantee error-free privacy performance and are not liable for indirect, incidental, consequential or punitive damages relating to use or release of Personal Information.

15. CONSENT

Use of the services constitutes agreement to this Privacy Policy.

This is the entire and exclusive Privacy Policy and supersedes earlier versions; it is read together with the Terms and Conditions and other applicable terms on our platforms. Amendments are published on our Platforms, and continued use constitutes acceptance. Regular review is recommended.

Under Article 77 of the GDPR, a complaint on data processing may be lodged with a supervisory authority, in particular in the Member State of habitual residence, place of work or place of the alleged infringement.

16. OTHER WEBSITES

Links to other websites lead outside our control and outside this policy; their operators may collect and use information under their own privacy policies. We are not responsible for them, their functioning or their errors.

17. OTHER TERMS

Versions of the Privacy Notice other than English are informational; the English version prevails in any discrepancy.

18. DATA RETENTION

Both the user and the Casino may close the Player Account at any time. After closure, personal data are retained for as long as the law requires and used only where competent authorities need them for enquiries on financial and fiscal records, fraud, money laundering or other illegal activity.

Under anti-money-laundering regulation in licensed gaming jurisdictions in the European Union, data submitted at registration and during the operative period of the Player Account are retained for at least five years from the last transaction or closure; requests for erasure before then cannot be accepted.