Privacy Policy
Last revised: March 2025. This policy explains what personal data Meridian Media Ltd collects when you browse our LuckyBoom review portal, why we collect it, and what you can do about it. We are an affiliate publisher, not a casino — we never hold player accounts, take deposits, or process gambling transactions.
1. Controller
The controller within the meaning of Art. 4(7) GDPR is:
Meridian Media Ltd
159 Old Bakery Street, STJ 3140 St Julian's, Malta
Registered with the Malta Business Registry, registration number C 16861
VAT ID: MT62443360
Phone: +356 2724 3187
Email: admin@luckyboom-casino.black
The responsible person for data-protection matters is Nadia Camilleri. You can reach her directly at privacy@luckyboom-casino.black for any question about how your data is handled.
2. What we collect
We keep the data we gather to a minimum. There is no account registration on this portal, no newsletter, and no comment section.
- Server log files. Each time you load a page, our hosting provider automatically records your IP address, the date and time of the request, the page requested, your browser type and version (user agent), the referring URL, and the amount of data transferred. This happens on any website you visit — it is a technical requirement, not a choice we made to profile you.
- Consent records. When you accept or decline cookies via our banner, we store a timestamped record of that decision. This is how we demonstrate compliance if a regulator ever asks.
- Contact-form data. If you write to us, we process your name, email address, and the content of your message. Nothing more.
We do not collect special categories of data under Art. 9 GDPR, and we do not carry out automated decision-making or profiling within the meaning of Art. 22.
3. Legal bases
Every processing activity on this site rests on one of two grounds under Art. 6(1) GDPR:
| Processing | Legal basis |
|---|---|
| Server log files (security, error diagnosis) | Art. 6(1)(f) — legitimate interest in the stable, secure operation of the portal |
| Non-essential cookies and analytics | Art. 6(1)(a) — your consent, given via the cookie banner |
| Consent records | Art. 6(1)(c) — legal obligation to demonstrate compliance |
| Contact-form enquiries | Art. 6(1)(f) — legitimate interest in responding to you; Art. 6(1)(b) where the enquiry precedes a contract |
Where we rely on legitimate interests, we have weighed those interests against your rights. Log data is not merged with other sources and is not used to identify you personally.
4. Cookies and analytics
Strictly necessary cookies — the ones that keep the site functioning and remember your banner choice — load without consent because the site cannot work without them. Everything else, including any analytics or measurement cookies, is blocked until you actively opt in. No consent, no tracking. That is the rule under both the GDPR and the ePrivacy framework, and we follow it.
You can withdraw consent at any time, with the same ease as you gave it. Reopen the cookie settings via the link in the footer, toggle your choice, and the change takes effect immediately. Withdrawal does not affect the lawfulness of processing that happened before you changed your mind.
5. Recipients and transfers
We work with a small number of processors: our hosting provider, which stores log files on servers within the EU, and — only if you consent — an analytics provider. Both act under written contracts pursuant to Art. 28 GDPR and may process data solely on our documented instructions.
If a processor or sub-processor transfers data outside the European Economic Area, that transfer is covered by an adequacy decision under Art. 45 GDPR or by standard contractual clauses under Art. 46(2)(c). We do not sell personal data, rent it out, or share it with third parties for their own marketing.
6. Retention
Server log data is kept only as long as necessary for security and troubleshooting — in our case no longer than 30 days — and is then deleted or anonymised. Consent records are retained for as long as the consent remains valid, plus the period needed to answer any supervisory inquiry. Contact-form correspondence is deleted once your enquiry is resolved and no legal retention duty applies, typically within 12 months.
7. Your rights under the GDPR
You hold the full set of rights under Chapter III of the Regulation:
- Access (Art. 15) — a copy of the personal data we hold about you.
- Rectification (Art. 16) — correction of inaccurate data.
- Erasure (Art. 17) — deletion where no overriding ground for storage exists.
- Restriction (Art. 18) — freezing processing while a dispute is checked.
- Portability (Art. 20) — receiving data you provided in a structured, machine-readable format.
- Objection (Art. 21) — objecting at any time to processing based on legitimate interests.
- Withdrawal of consent (Art. 7(3)) — revoking consent at any point, effective for the future.
Send any request to privacy@luckyboom-casino.black. We respond within one month, as Art. 12(3) requires. You also have the right to lodge a complaint with the data-protection supervisory authority in the Netherlands, or with the authority in your place of residence, work, or the place of the alleged infringement.
8. Affiliate links and outbound tracking
Our reviews contain affiliate links to LuckyBoom and other operators. When you click one, you leave this portal. From that moment, the operator's own privacy policy governs what happens to your data —