Lilu Casino Privacy Policy

Who Controls Your Data

The data controller for all personal information processed in connection with lilu-casino.com is Novasphere Entertainment, incorporated in Costa Rica under registration number 3-102-925440, with its registered office at Edificio Sabana Bussines Center, piso doce, Boulevard Ernesto Rohrmoser, Mata Redonda, Canton 01, San Jose, Provincia 01, Costa Rica. Any questions or requests relating to your personal data may be directed to [email protected].

What Information We Collect

When you register an account, we collect your full legal name, date of birth, email address, residential address, and preferred currency. During the KYC verification process we may collect copies of government-issued identity documents, proof of address documents, and source-of-funds documentation.

Payment processing requires collection of payment method identifiers such as partial card numbers, e-wallet account references, or cryptocurrency wallet addresses. We do not store full card numbers; these are tokenized through our PCI-DSS-compliant payment processing partners including Visa, Mastercard, Skrill, Neteller, and MiFinity.

We automatically collect technical data during each session, including your IP address, browser type and version, device identifiers, operating system, pages visited, game sessions played (including the title, provider such as BGaming or Evolution Gaming, stake size, and outcome), login timestamps, and session duration.

How We Use Your Information

Personal data collected at registration and during KYC is used to verify your identity, maintain your account, comply with legal obligations, process deposits and withdrawals, and prevent fraud and money laundering. Game session data is used to calculate bonus eligibility, apply wagering progress, and resolve disputes.

Email communications are sent for transactional purposes (deposit confirmations, withdrawal notifications, security alerts, and terms updates) and, where you have opted in, for promotional communications covering bonus offers and platform news. You may withdraw your marketing consent at any time from your account settings.

Technical and behavioural data is processed for platform security, fraud detection, product improvement, and anonymized analytics. The legal basis for processing varies by category: contract performance for account and payment data, legal obligation for KYC and AML data, and legitimate interest for security and analytics purposes.

We transfer personal data to third parties solely where necessary for the operation of the platform. Game software providers including BGaming, Pragmatic Play, Play’n GO, NetEnt, Evolution Gaming, Ezugi, and others receive session-level data required to operate their games within our platform. Payment service providers including Skrill, Neteller, MiFinity, Neosurf, Paysafecard, and cryptocurrency network processors receive payment data necessary to execute transactions. KYC and identity verification services receive the documentation you submit during the verification process. Analytics and fraud detection services may receive pseudonymized technical and behavioural data.

We do not sell personal data to third parties. We do not share personal data for third-party marketing purposes.

Data Retention

Account data is retained for the duration of your account relationship with Lilu Casino and for a minimum of 5 years following account closure, in accordance with legal obligations related to anti-money laundering and financial record-keeping. KYC documentation is retained for the period required by applicable law. Technical logs are retained for up to 12 months. Where data is no longer required for any legitimate purpose it is deleted or anonymized.

Your Rights as a Data Subject

Depending on your jurisdiction of residence you may have the following rights regarding personal data we hold about you: the right to access a copy of your data; the right to correct inaccurate or incomplete data; the right to request deletion of your data subject to legal retention obligations; the right to restrict processing in certain circumstances; the right to object to processing carried out on the basis of legitimate interest; and the right to receive your data in a portable electronic format.

To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days. Identity verification will be required before disclosing or modifying account data.

International Data Transfers

Novasphere Entertainment is incorporated in Costa Rica. Data processed in connection with lilu-casino.com may be stored and processed in locations outside your country of residence, including in countries where data protection laws may differ from those in your jurisdiction. Where personal data is transferred internationally, appropriate safeguards are applied in accordance with applicable privacy regulations.

Cookies and Tracking Technologies

lilu-casino.com uses cookies and similar tracking technologies. Strictly necessary cookies are required for account sessions, security, and platform functionality and cannot be disabled. Analytical cookies collect anonymized usage data to help us understand how players navigate the platform. Preference cookies store settings such as language and currency selection. Marketing cookies, where enabled, support retargeting and affiliate tracking.

You may manage cookie preferences through the consent management tool displayed on your first visit to the site. Strictly necessary cookies cannot be declined as they are essential to platform function. Disabling analytical or marketing cookies will not affect your ability to use Lilu Casino.

Complaints to a Supervisory Authority

If you believe your personal data has been processed in a manner that violates applicable privacy law, you have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction. Please contact us first at [email protected] so we have the opportunity to address your concern directly.

Contact for Data Requests

All data subject requests should be submitted in writing to [email protected]. Please include your registered email address and a description of your request. For identity verification purposes we may ask you to provide a copy of an identity document before processing the request.