Privacy Policy

The controller responsible for processing your personal data in connection with MyCasino and the website g359.slonik.store is:

Grand Casino Luzern AG
Haldenstrasse 6
6006 Luzern
Switzerland
UID: CHE-108.361.212

Grand Casino Luzern AG operates MyCasino under a Swiss casino concession and the online concession extension 2023-A-12-E, under the supervision of the Federal Gaming Board (ESBK). This policy applies to all personal data we process through the website, your player account and our support channels.

We process personal data in accordance with the Federal Act on Data Protection (FADP), in force since 1 September 2023, its implementing ordinance and the data protection provisions of the Federal Act on Gambling and Swiss anti-money-laundering legislation.

We process only the personal data we need to run a licensed online casino, meet our legal obligations and provide our services. Depending on how you use MyCasino, this includes:

• identification and contact data (name, date of birth, address, email, mobile phone);
• identity documents and verification results;
• payment and transaction data;
• gaming activity, limits and responsible gambling measures;
• technical data about your device and connection;
• the content of your communication with us, for example via the contact form or email.

Most of this data comes directly from you. We also receive data from payment providers, game providers, identity verification services and, where required by law, from the national exclusion register kept by Swiss casinos.

We process your data for the following purposes: opening and managing your account, verifying your identity and age, handling payments, providing the games, protecting players, preventing money laundering and fraud, complying with our duties towards the authorities, answering your requests and keeping the website secure. Processing is based on the performance of our contract with you, our legal obligations under Swiss gambling and anti-money-laundering law, our legitimate interests (for example IT security) and, where required, your consent.

To open an account, you provide your first and last name, date of birth, email address, mobile phone number, postal address (postcode and city) and a password. We also record when and from which country the account was opened.

We use this data to create and manage your account, to check that you are at least 18 years old and live or have your habitual abode in Switzerland, and to make sure that each person holds only one account. We also compare your details with the national exclusion register, as Swiss law requires.

Your password is stored only in encrypted (hashed) form. We will never ask you to tell us your password by email or phone.

Swiss gambling law and anti-money-laundering rules require us to verify your identity. For this purpose we process a copy of your passport or Swiss/EU identity card and, where necessary, proof of address. Until verification is complete, your account remains temporary.

The data processed during verification includes the information on your document (such as name, date of birth, nationality, document number and expiry date), the image of the document and the result of the check. We may use a specialised identity verification service that processes this data on our behalf and under our instructions.

Where the law requires it, we also carry out further checks, for example on the origin of funds or against sanctions and politically exposed persons lists.

When you deposit or withdraw money, we process the payment method you choose, the amount in CHF, the date and time, the transaction reference and, depending on the method, details of the bank or payment account. Card numbers are processed by the payment provider; we receive only the information needed to identify the transaction.

We use payment data to carry out your transactions, to make sure that payouts go only to an account held in your own name, to keep your account balance and transaction history, and to detect money laundering and fraud.

Payment providers such as TWINT, PostFinance, card schemes, e-wallets and banks act partly as our processors and partly as independent controllers under their own privacy policies.

We record your gaming activity: the games you play, stakes, winnings and losses, session times and the limits, breaks and exclusions you set. This data forms your gaming history, which you can view in your account.

We are legally required to analyse gaming activity in order to detect signs of problem gambling at an early stage. This may involve automated analysis of patterns such as rising stakes or long sessions. If such signs appear, a member of our team reviews the case before any measure such as a contact, a restriction or an imposed exclusion is decided.

Game providers receive the data needed to run a game round (for example a pseudonymous player ID, stakes and results). They do not receive your contact details.

When you visit the website, our servers automatically record technical data: your IP address, the date and time of access, the pages visited, browser type and version, operating system, device type and the referring website.

We also keep event logs for your account, such as logins, failed login attempts, changes to settings and security events. We use this data to provide the website, check that you are accessing from Switzerland, detect misuse and attacks, and analyse technical errors.

Server log files are deleted or anonymised after a short period unless they are needed to investigate a security incident or to meet a legal obligation.

We use a small number of cookies that are necessary for the website to work (session, age confirmation, your cookie choice) and one functional cookie that remembers your language. We do not currently use analytics or marketing cookies.

If we introduce analytics or marketing tools in the future, they will only be activated after you have given your consent in the cookie banner. You can change your choice at any time via the “Cookie settings” link in the footer.

Details on each cookie, its purpose and duration can be found in our Cookie Policy.

We do not sell your personal data. We share it only where this is needed for the purposes described above, where you have consented or where we are legally required to do so. The recipients fall into these categories:

• Payment providers and banks, to process deposits and withdrawals;
• Game providers, to run the games in our catalogue;
• Identity verification services, to check your identity documents;
• IT hosting and technical service providers, who operate our servers and systems on our behalf;
• Authorities, in particular the Federal Gaming Board (ESBK) and the Money Laundering Reporting Office Switzerland (MROS), as well as courts and law enforcement authorities where the law requires it;
• Other Swiss casinos, through the national exclusion register.

Service providers that process data on our behalf are bound by contract to use it only according to our instructions and to protect it appropriately.

We store personal data in Switzerland or in countries that offer an adequate level of data protection according to the Federal Council. If data is transferred to a country without adequate protection, we use recognised safeguards such as standard contractual clauses.

We keep personal data only as long as necessary for the purpose for which it was collected or as required by law. Data linked to anti-money-laundering and gambling law, such as identification documents, transaction records and gaming history, is kept for the statutory retention periods, for example 10 years for anti-money-laundering records.

Once the retention period has expired and no other legal obligation applies, we delete or anonymise the data. If you close your account, data we are legally required to keep is retained until the end of the respective period.

Under the FADP you have the following rights with regard to your personal data:

• Right of information: to know whether and which personal data we process about you;
• Right to rectification: to have inaccurate data corrected;
• Right to deletion: to have data deleted, unless we must keep it by law;
• Right to object: to object to certain processing, for example based on our legitimate interests;
• Right to data portability: to receive data you have provided to us in a common electronic format;
• Right to withdraw consent at any time, with effect for the future.

To exercise your rights, write to privacy@g359.slonik.store. We may ask you to prove your identity so that we do not disclose data to the wrong person. Please note that some rights are limited by our legal obligations, for example under anti-money-laundering law.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

We protect your data with appropriate technical and organisational measures against loss, misuse, unauthorised access and alteration. These include encrypted data transmission (TLS), hashed passwords, access controls based on the need-to-know principle, logging of access to sensitive data and regular security reviews.

Our staff and service providers who have access to personal data are bound by confidentiality obligations.

You can help protect your account too: choose a strong password that you do not use elsewhere, keep your login details to yourself and log out after playing on a shared device. If you suspect that someone has accessed your account, contact us immediately.

For questions about data protection or to exercise your rights, please contact:

Grand Casino Luzern AG, Data Protection
Haldenstrasse 6, 6006 Luzern, Switzerland
Email: privacy@g359.slonik.store

For general questions about your account, please use our contact form or write to support@g359.slonik.store.

We may update this privacy policy when our services, the legal situation or our data processing change. The current version is always published on this page, with the date of the last update shown at the top.

If a change significantly affects how we process your data, we will inform you in your account or by email before it takes effect.

This policy is available in German, Italian, English and French. In case of discrepancies between the language versions, the German version prevails.