Privacy Policy.
We publish reviews. We do not run a casino, take deposits or open accounts, so the personal information we hold is thin by design. This page states exactly what it is and what you can make us do about it.
Who holds your information
This site is published under the Lucky Ones name. The publisher is the agency responsible under the Privacy Act 2020 for the information described on this page, and answers privacy requests through the single address below rather than through any third party.
Privacy contact: privacy@lucky-ones-casino1.com. We aim to acknowledge within 2 working days, separately from the statutory response deadline below.
What we collect, and the 4 things we never do
We hold 0 player accounts, 0 payment records and 0 identity documents. There is no login on this site, so there is no profile to breach.
| Data | Why it exists |
|---|---|
| Server request logs, including a truncated IP address | Security and abuse prevention, kept 30 days then deleted |
| Aggregate page metrics with no identifier | Knowing which pages get read, kept 6 months |
| Email you send us, and the thread it belongs to | Answering you and evidencing corrections, kept 24 months |
| A referral parameter appended when you click through to an operator | Attributing commission, held by the operator's system rather than by us |
The 4 things we never do: sell or rent personal information, build advertising profiles, buy email lists, or collect information from anyone we know to be under 18.
Cookies: we set 0 of our own
This is a static site. It sets no advertising cookies, no remarketing pixels and no cross-site identifiers, which is why you are not asked to dismiss a consent banner before reading anything.
The one piece of browser storage we use is a session flag named lucky-quiz-seen, written when the comparison quiz opens so it does not reopen on the next page. It holds the value 1, contains no identifier, is never sent to a server, and disappears when you close the tab.
Our analytics is Cloudflare Web Analytics, which measures page views without storing a cookie or fingerprinting the device. Cloudflare also serves the site, which means your request passes through its network and is logged there for security purposes.
The moment you click an outbound link, you leave. The operator's site sets its own cookies under its own policy, and from that click onward we can see nothing you do — not the deposit, not the balance, not the outcome.
Your rights, and the 20-working-day clock
Under information privacy principle 6 of the Privacy Act 2020 you may ask what personal information we hold about you. Section 44 gives us 20 working days to respond. If the request belongs with someone else, we must tell you about the transfer within 10 working days.
Principle 7 gives you the right to have information corrected, or to have your statement of correction attached where we disagree. From 1 May 2026, principle 3A additionally requires us to tell you when we have collected information about you from a source other than you.
The Privacy Act 2020 contains no general right to erasure. Where a reader is covered by a framework that does provide one, we apply it on request rather than argue about which law reaches us. Either way, deletion of an email thread we are relying on as evidence of a published correction may be refused, and we will say so in writing.
Where the data sits, and 3 processors
Site hosting and network logging sit with Cloudflare; email sits with our mail provider; nothing else touches reader data. That is 3 processors in total, and the list is short deliberately.
Information is stored and processed on our providers' infrastructure outside New Zealand, and may be accessed by our team and contractors in other countries. Principle 12 of the Privacy Act 2020 requires us to satisfy ourselves that comparable safeguards apply before information leaves New Zealand, and our processors are bound by written terms to that standard.
If something goes wrong: notification within 72 hours
Where a breach is likely to cause serious harm, we notify the Office of the Privacy Commissioner and the affected people. Our internal target is notification within 72 hours of confirming the breach. Section 118 of the Privacy Act 2020 makes failure to notify an offence carrying a fine of up to NZ$10,000.
If you think we have breached your privacy, raise it with us first — the Privacy Commissioner will ordinarily expect that. If we do not resolve it, complaining to the Commissioner is free.
Changes to this policy
Material changes are announced on this page with a new review date, and the previous version is available on request for 36 months. Continued use of the site after a change means you accept the current version; the date at the top of this page is the only version marker that matters.
Responsible gambling
This site is for readers aged 18 and over. Gambling carries a negative expected return over time and is not a way to make money.
Free, confidential, 24/7 support in New Zealand: Gambling Helpline on 0800 654 655, or free text 8006. Te reo Māori: 0800 654 656. Pasifika: 0800 654 657. PGF Services: 0800 664 262 or free text 5819.
Disclosure
We may earn commission from some operators listed on this site, which is what the referral parameter above is for. Commission changes no score and no ranking position — see how we test and our affiliate disclosure. Questions about this policy: contact us.
Sources
- Privacy Act 2020, section 44 — responding to an IPP 6 request — 20 working days; 10 working days for transfers
- Office of the Privacy Commissioner — the privacy principles — IPP 3A in force from 1 May 2026
- Office of the Privacy Commissioner — your privacy rights — complaint is free; raise it with the agency first
- Office of the Privacy Commissioner — principle 6, access to personal information
- Gambling Helpline New Zealand — contact — 0800 654 655, text 8006
Helpline numbers and statutory timeframes on this page are re-checked at every review. Where this policy and the Privacy Act 2020 conflict, the Act wins and we amend the policy.