1Introduction
This Privacy Policy explains how Grand Casino Luzern AG ("we", "us") processes personal data in connection with the website g366.slonik.store and the online casino offered under the brand mycasino.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and its ordinance, and — where it applies to you — the EU General Data Protection Regulation (GDPR). Because we operate a licensed casino, we are additionally bound by the Swiss Federal Act on Gambling (GSA) and the Anti-Money Laundering Act (AMLA), which require us to process certain data.
2Data Controller
The controller responsible for data processing is:
Grand Casino Luzern AG
Haldenstrasse 6
6006 Luzern, Switzerland
UID CHE-108.361.212
Email: support@mycasinos.ch
For all data protection matters, including the exercise of your rights, contact us at the address above with the subject "Data protection". Our data protection contact person can be reached at the same address.
3Personal Information
We process the personal data you give us and data that arise when you use our services. Depending on the service, this includes:
- Identification data: first and last name, date of birth, nationality, address and canton of residence
- Contact data: email address and mobile phone number
- Account data: account number, status, limits, breaks and exclusions
- Communication: messages to our support team and our replies
4Registration Data
When you register, we process your name, date of birth, email address, mobile number, canton of residence and password. The password is stored only as a cryptographic hash; we cannot read it.
We use these data to open and manage your account, to check that you are of age and live in Switzerland, and to ensure that each person holds only one account. The legal basis is the performance of the contract and our legal obligations under the GSA.
5Identity Verification
The law requires us to identify every player. For this purpose we process a copy of your identity document and, where necessary, confirmation of your address. We also check whether you are registered in the Swiss register of excluded players, which is kept jointly by Swiss casinos and the licensed lottery operators.
Verification data are used only for identification, for the protection of minors and for the prevention of money laundering and fraud.
6Payment Information
For deposits and withdrawals we process transaction data: amount in CHF, date, payment method, reference and the account to which a withdrawal is paid. Card numbers and payment credentials are processed by the respective payment service provider, not stored by us in full.
We monitor transactions as required by the AMLA. Withdrawals are made only to an account in the player’s own name.
7Gaming Activity
We record your gaming activity: games played, stakes, wins, session times, limits and changes to limits. We are legally obliged to do so and use these data to keep your account, to protect players (early detection of risky behaviour under our social concept) and to report to the supervisory authority where required.
8Technical Data
When you visit our website, our servers process technical data such as IP address, date and time of access, browser type, operating system and the pages visited. These data are needed to deliver the website securely, to detect misuse and to fix errors. Server logs are deleted after 30 days unless needed to clarify an incident.
For the contact form we store only a hashed (non-reversible) form of your IP address to limit abuse.
9Cookies
We use cookies and similar technologies. Essential cookies (session, security, language, age confirmation, your cookie choice) are always set because the website cannot work without them. Functional, analytics and marketing cookies are set only with your consent, which you can give or withdraw at any time in the cookie settings.
Details are explained in our Cookie Policy.
10Analytics
With your consent we may use analytics tools to understand how our pages are used, in aggregated and pseudonymised form. Without your consent no analytics scripts are loaded. At present, no analytics provider is active on this website; should this change, this section and the Cookie Policy will name the provider.
11Third-Party Services
We work with carefully selected service providers who process data on our behalf: hosting and IT providers, game providers (who receive a pseudonymous player ID, not your name), payment service providers, identity verification services and email delivery. They are contractually bound to confidentiality and to the purposes we set.
Data are processed mainly in Switzerland. If data are transferred to a country without adequate data protection, we ensure appropriate safeguards, in particular the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
We disclose data to authorities only where the law requires it, for example to the ESBK or to criminal prosecution authorities.
12Data Retention
We keep personal data only as long as necessary for the purpose or as required by law:
- Account, identification and transaction data: at least 10 years after the end of the business relationship (AMLA, commercial law)
- Exclusion data: as long as the exclusion applies, and as required by the GSA
- Support messages: up to 2 years after the request has been closed
- Server logs: 30 days
- Data of unverified temporary accounts that are closed: as required by the GSA and AMLA, then deleted
13User Rights
Within the limits of the applicable law you have the right to:
- request information on the personal data we process about you
- have incorrect data corrected
- request deletion or restriction of processing, unless we are legally obliged to keep the data
- receive data you provided to us in a common electronic format (data portability)
- withdraw consent at any time with effect for the future
- object to processing based on legitimate interests
Send your request to support@mycasinos.ch. We may ask you to prove your identity. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if the GDPR applies, with the supervisory authority of your EU/EEA country of residence.
14Data Security
We protect your data with technical and organisational measures: encrypted transmission (TLS), hashed passwords, access only for authorised staff on a need-to-know basis, logging of access, regular updates and backups. No transmission over the internet is completely secure; we therefore ask you to keep your password confidential and log out after use on shared devices.
15Contact Information
For questions about this Privacy Policy or about your data, contact Grand Casino Luzern AG, Haldenstrasse 6, 6006 Luzern, or write to support@mycasinos.ch. You can also use the contact form.
16Policy Updates
We may update this Privacy Policy when our services or the law change. The version published on this page applies; the date of the last update is shown above. For significant changes we inform registered players by email or in their account.
