Privacy Policy

This policy explains how Coastline Media Ltd, the organisation behind the LuckyBoom review portal, handles your personal data. We operate as an affiliate publisher, not as a casino operator. Our purpose is to provide independent reviews and information about gaming platforms, including LuckyBoom Casino, for readers in the Netherlands and across Europe. We are committed to transparency and compliance with the General Data Protection Regulation (EU) 2016/679.

1. Controller

The data controller responsible for the processing of your personal data on this portal is:

Coastline Media Ltd
52 Triq San Gorg, STJ 3140 St Julian's, Malta
Phone: +356 2726 1161
Email: legal@luckyboomclub.eu

Our data-protection contact is Adrian Attard, reachable at privacy@luckyboomclub.eu. You may direct any questions or concerns regarding data processing to this address. The company is registered in the Malta Business Registry under number C 73644, with VAT ID MT14052655. Our editorial responsibility rests with the Editor-in-chief, based at the same registered office.

2. What we collect

We collect a limited set of data, strictly necessary for the operation and security of the portal. The information we process falls into three categories:

• Server log files: When you visit our site, our servers automatically record your IP address, the date and time of your request, your browser's user agent string, and the referring URL. This data is collected for security monitoring, error analysis, and to maintain the integrity of our systems.
• Consent records: We maintain a record of your cookie consent choices. This includes the date and time you gave or withdrew consent, the version of the consent banner you accepted, and the categories of cookies you permitted. This is necessary to demonstrate our compliance with the GDPR and the ePrivacy Directive.
• Contact-form data: If you choose to contact us via a form on the portal, we will collect the information you provide, such as your name and email address, solely to respond to your inquiry. We do not use this data for marketing unless you explicitly agree to it.

We do not collect any special category data, nor do we process data relating to gambling activities. Our role is strictly that of an affiliate publisher.

3. Legal bases

Every processing activity we undertake is grounded in a specific legal basis under Article 6(1) of the GDPR. The primary bases for our operations are as follows:

• Consent (Article 6(1)(a)): This is the legal basis for the placement of non-essential cookies and the use of analytics tools. You have the right to withdraw your consent at any time, and we make this process as simple as giving it.
• Legitimate interests (Article 6(1)(f)): We rely on this basis for the processing of server log files. Our legitimate interest is to ensure the security, stability, and proper functioning of the portal. This interest is balanced against your rights, and we collect only the minimum data necessary for this purpose. We have conducted a balancing test to confirm that our interest does not override your fundamental rights.

We do not process personal data for the purposes of profiling or automated decision-making.

4. Cookies and analytics

Our portal uses cookies to enhance your experience and to analyse traffic. We distinguish between two types of cookies:

• Essential cookies: These are strictly necessary for the basic functionality of the website, such as remembering your consent preferences. They are set without requiring your consent.
• Non-essential cookies: These include analytics and performance cookies. They are only placed after you have given your explicit consent via our cookie consent banner. You can withdraw this consent at any time by accessing the cookie settings from the footer of any page on our portal. The process for withdrawing consent is identical in effort and accessibility to the process for giving it.

Our analytics tools are used to understand how visitors interact with our content, which helps us improve our reviews and the overall user experience. We do not use analytics data to identify individual users or to track your activity across other websites.

5. Recipients and transfers

We share your data only with service providers who process it on our behalf, acting as data processors under a written agreement that ensures GDPR compliance. The main categories of recipients are:

• Hosting providers: Our website is hosted on servers within the European Economic Area (EEA). The hosting provider processes server log files on our behalf.
• Analytics processors: If you consent to analytics cookies, data may be shared with a processor who provides us with aggregated and anonymised traffic statistics. This processor is also based within the EEA.

We do not transfer personal data outside the EEA. Should this change in the future, any such transfer will be made only on the basis of appropriate safeguards, such as Standard Contractual Clauses, as required by the GDPR. We will inform you of any such transfer before it occurs.

6. Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. Server log files are kept for a maximum of 90 days and are then automatically deleted. Consent records are retained for the duration of your interaction with the portal and for a period of three years after your last visit, to demonstrate compliance. Contact-form data is deleted once your inquiry has been resolved, unless we require it for legal or regulatory reasons. We review our data retention policies on a quarterly basis to ensure they remain proportionate.

7. Your rights under the GDPR

You have a number of rights concerning your personal data. These rights are guaranteed by the GDPR and can be exercised at any time by contacting us at privacy@luckyboomclub.eu. The rights include:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request the correction of inaccurate or incomplete data.
• Right to erasure: You can request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: You can request that we limit the processing of your data in certain circumstances.
• Right to data portability: You