Privacy Policy

This Privacy Policy explains how Valletta Point Media Ltd, the publisher of this affiliate review portal, handles personal data when you visit the website. The portal reviews online casinos such as LuckyBoom Casino but does not itself operate gambling services. We process only the data necessary to run the site, to measure audience interest, and to comply with legal obligations under Regulation (EU) 2016/679, the General Data Protection Regulation.

1. Controller

The controller responsible for the processing of your personal data is:

Valletta Point Media Ltd
129 Tower Road, STJ 3140 St Julian's, Malta
Registration number: C 13552
Tax / VAT ID: MT15318376
Email: office@luckyboom-casinos.eu

Our data-protection contact is Clara Attard, reachable at privacy@luckyboom-casinos.eu. You may direct any question, request or complaint about your personal data to that address. The company has been registered with the Malta Business Registry since 2019.

2. What we collect

When you load a page on this portal, our web server automatically records a limited set of technical details in log files. Each entry contains your IP address, the date and time of the request, the requested URL, the HTTP status code, the size of the response, and the user-agent string supplied by your browser. The referrer header is captured when present. Log files are rotated and archived on a short cycle.

If you write to us through the contact form, we collect the fields you fill in: typically your name, email address and the message body. We do not request sensitive categories of data such as health, religion or political opinion, and we ask that you do not include them. Consent records are stored separately, capturing the version of the cookie banner shown, your answer, and the timestamp.

3. Legal bases

Each processing activity rests on a specific article of the GDPR.

• Art. 6(1)(f) — legitimate interests: the collection of server log files, the short-term defence against abuse, and the secure operation of the website. Our legitimate interest is the stable delivery of editorial content to readers in the Netherlands.
• Art. 6(1)(a) — consent: any non-essential cookie, analytics tag, or marketing pixel that fires after you accept the banner. Consent is specific, informed and freely given.
• Art. 6(1)(b) — contract: the handling of contact-form submissions where your message relates to a request you have made.
• Art. 6(1)(c) — legal obligation: the retention of consent logs and tax-relevant correspondence for the periods set by Maltese and EU law.

4. Cookies and analytics

The portal uses strictly necessary cookies to remember your cookie-banner choice and to keep basic security features working. These cookies do not require consent. Non-essential cookies, including audience measurement and any third-party tags embedded in articles, load only after you click Accept on the banner. No non-essential cookie runs by default.

You can withdraw your consent at any time. Withdrawal takes the same number of clicks as giving consent: open the cookie settings panel, adjust your choice, and save. Withdrawal does not affect the lawfulness of any processing carried out before you changed your mind. Browser-level blocking remains available at all times.

5. Recipients and transfers

We share personal data with a small set of processors bound by written contracts under Art. 28 GDPR. The current categories are:

• Hosting: a data-centre operator located within the European Economic Area, responsible for storing log files and the website content.
• Analytics: a measurement provider that processes pseudonymised usage data to help us understand which reviews attract readers.
• Email delivery: a transactional mail service used for replies to contact-form submissions.

Where a processor sits outside the EEA, the transfer relies on the appropriate safeguards under Chapter V GDPR — typically the European Commission's Standard Contractual Clauses, supplemented by a transfer impact assessment. No data is sold or rented to third parties.

6. Retention

Server log files are kept for 30 days in their raw form, then aggregated into anonymous statistics. Consent records are kept for 24 months so we can demonstrate compliance in the event of a query from a supervisory authority. Contact-form messages are deleted within 12 months of the conversation closing, unless you ask us to keep them for longer. Backup tapes rotate on a 35-day cycle and are overwritten automatically.

7. Your rights under the GDPR

You hold the following rights against the controller:

• Access — request a copy of the personal data we hold about you (Art. 15).
• Rectification — ask us to correct inaccurate or incomplete data (Art. 16).
• Erasure — request deletion, where the legal grounds of Art. 17 apply.
• Restriction — ask us to pause processing while a dispute is examined (Art. 18).
• Portability — receive data you provided to us in a structured, machine-readable format (Art. 20).
• Objection — oppose processing based on Art. 6(1)(f), including audience measurement carried out on that basis (Art. 21).
• Withdrawal of consent — at any time, with effect for the future, where processing rests on Art. 6(1)(a).

You also have the right to lodge a complaint with the supervisory authority for your habitual residence in the Netherlands. We would, however, prefer the chance to address your concern first — write to privacy@luckyboom-casinos.eu and we will reply within 30 days.

8. Affiliate links and outbound tracking

Articles on this portal contain outbound links to operators such as LuckyBoom. Clicking such a link takes you to the operator's own website, at which point their privacy policy applies instead of ours. Some operators attach a tracking parameter to the destination URL so that the affiliate relationship can be attributed correctly. The operator then collects data under its own controller status, its own legal bases, and its own retention rules. We do not control that downstream processing. Before you register with any operator, read their policy carefully.