Privacy Policy

The controller responsible for processing your personal data in connection with mycasino is Grand Casino Luzern AG. The company operates the land-based Grand Casino Luzern and offers online casino games on the basis of an extension of its casino concession.

Company

Grand Casino Luzern AG

Address

Haldenstrasse 6, 6006 Luzern, Switzerland

UID

CHE-108.361.212

Concession

326-12; online extension 2023-A-12-E

Supervisory authority

Federal Gaming Board (ESBK)

Email

support@g295.slonik.store

The applicable legislation includes in particular the Federal Act on Data Protection (FADP/DSG, revised version in force since 1 September 2023), the Federal Act on Gambling (Gambling Act, BGS) together with the Gambling Ordinance (VGS), and the Anti-Money Laundering Act (AMLA/GwG). Where the EU General Data Protection Regulation (GDPR) applies to a processing activity, we also comply with its requirements.

We only process the data required for the lawful operation of an online casino in Switzerland and for the use of your player account. Depending on how you use the website, this includes the following categories:

• Master and contact data: first name, surname, date of birth, residential address (street, postcode, town), email address, mobile number.
• Login data: user ID and password (stored exclusively in encrypted, unreadable form).
• Identification data: details and copies of official identity documents, proof of address and the result of the check against the register of gambling exclusions.
• Payment and transaction data: selected payment method, amounts, times and status of deposits and withdrawals, details of the payment account used for withdrawals.
• Gaming data: games played, stakes, wins and losses, playing times and account balance.
• Player protection data: deposit and loss limits set, gaming breaks, exclusions and information on your financial and professional situation, where required for the assessment under Art. 80 BGS.
• Communication data: content of enquiries sent via the contact form or by email, and our replies.
• Technical data: IP address, browser type, time of access and the cookies and localStorage entries described in the Cookie Policy.

We process sensitive personal data only where required by law, for example information relating to a gambling exclusion or indications of problematic gambling behaviour.

We process your personal data exclusively for clearly defined purposes:

• opening, managing and closing your player account;
• verifying your age, identity and residence and checking against the register of gambling exclusions;
• processing deposits, withdrawals and game rounds;
• implementing the social concept required by law: limits, gaming breaks, early detection of problematic gambling behaviour and exclusions;
• fulfilling due diligence obligations under the Anti-Money Laundering Act (identification, clarifications, documentation);
• answering your enquiries to customer support;
• ensuring the secure and stable operation of the website, including protection against misuse and fraud;
• meeting disclosure and reporting obligations towards the Federal Gaming Board (ESBK) and other competent authorities.

Your data is not used for advertising, profiling for marketing purposes or sale to third parties.

As a rule, the FADP does not require a legal basis for processing, provided the processing principles are observed. Nevertheless, we base our processing on clearly stated grounds which also meet the requirements of the GDPR where it applies:

• Performance of a contract: managing the player account and processing games, deposits and withdrawals in accordance with the Terms and Conditions.
• Legal obligations: identification, player protection and exclusions under the BGS and VGS, due diligence and record-keeping obligations under the AMLA, supervision by the Federal Gaming Board (ESBK).
• Overriding legitimate interest: secure operation of the website, prevention of misuse and the establishment or defence of legal claims.
• Consent: for non-essential cookies, should such cookies be used in future. Consent can be withdrawn at any time with effect for the future.

Without the information required by law, we cannot open a player account or offer games involving real-money stakes.

For registration we collect your first name, surname, date of birth, residential address, email address, mobile number and a password of your choice. You also confirm that you are at least 18 years old, have your residence or habitual abode in Switzerland, are not subject to a gambling exclusion and accept the Terms and Conditions.

We need this information to assign an account unambiguously to one person, to check the statutory conditions for participation and to ensure that each person holds only one account.

The age check shown on your first visit to the website does not replace the verification carried out at registration. Your answer is merely stored in the «age_ok» cookie so that the question does not appear on every visit.

After registration you have a temporary player account, which is valid for a maximum of 30 days. Within this period we verify your first name, surname, date of birth and residential address using an official identity document and check your data against the register of gambling exclusions.

For this purpose we may request copies of an official identity document and proof of address. Verification is required by law (BGS, VGS, AMLA). If it is not completed within the deadline, the account is blocked.

We keep copies of identity documents and identification records only for as long as required by the Anti-Money Laundering Act and protect them with restricted access rights.

Deposits can be made using TWINT, PostFinance Pay, Visa, Mastercard, Apple Pay, YAPEAL, Paysafecard, Neteller and Skrill. Depending on the method you choose, the data required for the payment is transmitted to or processed by the respective payment service provider.

We store the amount in CHF, the time, method and status of each transaction. Full card details are processed by the payment service providers; we only receive the information needed to allocate the payment.

Withdrawals are made exclusively to a payment account held in your name. To this end, we check that the account holder matches the details in your player account.

For every game round we record the game, provider, stake, result, time and the resulting account balance. This data is required for correct settlement, for handling complaints and for supervision by the Federal Gaming Board (ESBK).

We also analyse gaming data as part of the social concept in order to identify signs of problematic gambling behaviour at an early stage, such as sharply rising stakes, frequent deposits or very long gaming sessions. If there are indications, we may contact you and carry out further clarifications.

Your favourites (games marked with ♥) are stored in your player account when you are logged in. As a guest, favourites are only stored locally in your browser and are not transmitted to us.

Deposit and loss limits, gaming breaks and exclusions are stored in your player account and checked with every deposit and every game launch.

Financial and professional situation

Under Art. 80 BGS we must exclude a person if we know or must assume that they are over-indebted, do not meet their financial obligations or place stakes that are out of proportion to their income and assets. For this assessment we may ask for information on your occupation, income and assets and request supporting documents. We use this information exclusively for player protection.

Exclusions and the exclusion register

A voluntary or involuntary exclusion applies to all casinos in Switzerland (land-based and online) and to corresponding offers in Liechtenstein. For this purpose, the identification data of the excluded person and the type of exclusion are entered in the joint exclusion register and exchanged with the other operators. We check your data against this register at registration and during verification.

The anonymous self-assessment on the Responsible Gambling page is not stored and is not linked to any account.

The website only uses cookies and localStorage entries that are necessary for its operation: the session cookie for login and form protection, storage of your age confirmation, your cookie choice and your language selection, and guests' favourites.

Non-essential cookies would only be set with your consent. You can change your choice at any time via the «Cookie Settings» link in the footer.

A complete list with purpose and storage period can be found in the Cookie Policy.

We currently do not use any analytics, statistics or marketing tools on mycasino. No tracking pixels are used, and your browsing behaviour is not analysed for advertising purposes or passed on to advertising networks.

Should we use such tools in future, this will only happen after this Privacy Policy and the Cookie Policy have been updated, and only with your express consent via the cookie banner.

We only disclose personal data where this is necessary for the purposes stated or required by law. Recipients are:

• Payment service providers – depending on the method you choose (TWINT, PostFinance Pay, Visa, Mastercard, Apple Pay, YAPEAL, Paysafecard, Neteller or Skrill) and the banks involved.
• Game providers – Pragmatic Play, Evolution, Greentube, Hacksaw Gaming, NetEnt, Playtech, Relax Gaming and Push Gaming receive a pseudonymous player ID and the data needed for the game round (stake, result, currency).
• Federal Gaming Board (ESBK) and exclusion register – data on exclusions and information we are required to disclose in the context of supervision.
• Authorities – such as the Money Laundering Reporting Office or criminal prosecution authorities, where there is a legal obligation.
• Hosting and IT service providers – who operate the website and systems on our behalf and are contractually bound to confidentiality and data security.

Where data is transferred to recipients in countries without an adequate level of data protection, we ensure protection through appropriate safeguards, in particular standard contractual clauses, or rely on a statutory exception.

We keep personal data for as long as necessary for the purposes of processing or as long as statutory retention obligations apply:

• Identification and transaction data: under the Anti-Money Laundering Act, we keep identification records and transaction records for ten years after the end of the business relationship or after completion of the transaction.
• Exclusion data: for as long as the exclusion is in place and beyond that where required by gambling law.
• Gaming and account data: for as long as the account exists and thereafter insofar as it forms part of the business and transaction records subject to retention.
• Customer support enquiries: for as long as necessary to handle them and any follow-up questions.

Once the relevant period has expired, the data is deleted or anonymised. The storage periods of cookies are set out in the Cookie Policy.

Under the FADP and, where applicable, the GDPR, you have the following rights:

• Access to information on whether and which personal data we process about you.
• Rectification of inaccurate or incomplete data. You can view much of your information directly in your player account.
• Erasure of your data, unless statutory retention obligations prevent this. Data we must keep under the AMLA or gambling law can only be deleted once the retention period has expired.
• Data release and portability of the data you have provided to us, in a common electronic format.
• Objection to processing based on our legitimate interest, and withdrawal of any consent you have given.
• Complaint to the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), www.edoeb.admin.ch, or, where the GDPR applies, to a supervisory authority in the EU.

To exercise your rights, simply send a message via the Contact page or to support@g295.slonik.store. To protect your data, we may ask you to prove your identity.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss and misuse. These include encrypted transmission via HTTPS, storage of passwords in unreadable form, protection of forms against cross-site request forgery (CSRF protection) and access rights granted on a need-to-know basis.

No system can offer complete protection. Please help to keep your account secure as well: use a strong password that you use only for mycasino, do not share it, and log out after use on shared devices.

If you notice unauthorised access to your account, please inform us immediately via the Contact page.

If you have questions about data protection or wish to exercise your rights, you can reach us as follows:

Post

Grand Casino Luzern AG, Haldenstrasse 6, 6006 Luzern, Switzerland

Email

support@g295.slonik.store

Contact form

Contact page

We will answer your enquiry as quickly as possible and at the latest within the statutory deadlines.

This Privacy Policy applies from 10.08.2026. We will amend it if our data processing or the legal requirements change. The version published on the website is authoritative in each case.

We will inform logged-in users of material changes, in particular the use of new analytics or marketing tools, in an appropriate manner, for example by email or at the next login.

In the event of discrepancies between the language versions, the German version shall prevail.