Privacy rules for LazyBar accounts, payments and digital activity
Last Updated: August 21, 2026
This Privacy Policy describes the personal information processed in connection with LazyBar registration, gambling activity, payments, verification, support, marketing and website security. It should be read with the Terms and Conditions and any cookie notice shown on the site. The live legal text and applicable law control if a summary conflicts with a mandatory requirement.
Data categories and collection points
| Category | Examples | Collection point |
|---|---|---|
| Account and identity | Name, date of birth, address, phone, email, credentials | Registration and profile |
| Verification | Photo ID, address evidence, payment ownership, source-of-funds material | KYC and enhanced due diligence |
| Financial | Deposits, withdrawals, method identifiers, transaction references | Cashier and payment providers |
| Technical | IP address, device, browser, login history, cookies, security events | Site and PWA |
| Activity and communications | Games, bets, limits, promotions, chat, email and call records | Account use and support |
Purposes and legal grounds
| Purpose | Typical legal basis |
|---|---|
| Create and operate the account | Performance of contract |
| Age, identity, AML and fraud controls | Legal obligation and legitimate interests |
| Process payments and withdrawals | Contract, legal obligation and fraud prevention |
| Security, diagnostics and service improvement | Legitimate interests |
| Optional marketing and certain cookies | Consent where required |
| Claims, audits and regulatory reporting | Legal obligation and legitimate interests |
Sharing and international processing
Information may be shared with regulators, law-enforcement bodies, identity and fraud-screening providers, payment processors, hosting and security vendors, auditors, professional advisers and corporate service providers. Access is limited to the function being performed. Cross-border processing is subject to contractual, legal or adequacy safeguards required for the destination and the data involved.
Retention
Records are retained for as long as necessary to operate the account and meet anti-money-laundering, tax, regulatory, dispute and legal-claim obligations. Different record classes can have different retention periods. Data can be isolated from routine use while it remains required for compliance or defence of claims.
Security measures
- Encryption protects data in transit; payment providers apply their own card-data controls.
- Identity and access controls restrict internal handling.
- Intrusion detection and monitoring operate continuously.
- Security testing is performed periodically by internal or third-party specialists.
- No internet service can guarantee absolute security; suspected compromise should be reported immediately.
Data rights
Depending on applicable law, a person may request access, correction, deletion, restriction, portability or objection; withdraw consent; and ask for information about significant automated decisions. Identity verification may be required before a request is completed. Some data cannot be deleted while a legal retention duty applies.
Cookies, marketing and complaints
Essential cookies support login, security and account functions. Analytics and marketing technologies depend on the consent framework shown to the user. Marketing preferences can be changed through account settings or the unsubscribe route in a message. A privacy complaint may be raised through authenticated support and, where applicable, with the competent national data-protection authority.