Lucky Little Devil

Legal

Privacy
Policy

Your privacy matters. Here is exactly what we collect, why, and how we protect it.

We Do Not Sell Your Data

Your personal information is never sold to third parties, ever.

Encrypted & Secure

All data is transmitted and stored using industry-standard encryption.

Transparent by Default

We are clear about what we collect and why, with no hidden practices.

You Are in Control

Access, correct, or delete your data at any time by contacting us.

We believe you have a right to know exactly how your data is handled. This policy is written to be clear and honest, not buried in legal jargon. If something is unclear, reach out and we will explain it plainly.

01

Overview

Lucky Little Devil ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to all personal information collected through luckylittledevil.com, our game platform, and any related services, including purchases, account registration, and the Reaction Cam feature.

By using our platform or purchasing a Lucky Little Devil Charm, you agree to the collection and use of information in accordance with this policy.

02

Information We Collect

We collect information in the following ways:

Information You Provide

  • Full name, email address, phone number, and delivery address when you create an account or place an order
  • Payment information (processed securely via our payment provider - we do not store card details)
  • Account credentials (username and encrypted password)
  • Reaction video footage, if you opt in to the Reaction Cam feature
  • Communications you send us via email or contact forms

Information Collected Automatically

  • IP address, browser type, and device information when you access our platform
  • Game session data including scores, flight outcomes, and timestamps
  • QR code activation logs linked to your account
  • Cookies and similar tracking technologies (see Section 7)

We only collect information that is necessary for the purposes described in this policy. We do not collect sensitive personal information such as health data, government ID numbers, or biometric data.

03

How We Use Your Information

We use your personal information to:

  • Create and manage your Lucky Little Devil account
  • Process orders, payments, and fulfil deliveries
  • Provide access to the game via QR code activation
  • Record and verify game outcomes, including prize eligibility
  • Contact you regarding prize claims, order updates, and account activity
  • Send you newsletters and promotional communications (only if you opt in)
  • Display and promote Reaction Cam footage (only if you opt in)
  • Improve our platform, game, and services through anonymised analytics
  • Comply with legal obligations and prevent fraudulent activity

We will not use your personal information for any purpose not listed above without first obtaining your explicit consent.

04

Sharing Your Information

We do not sell your personal information to third parties. We may share your information with:

  • Payment processors to facilitate secure transactions (e.g. Stripe)
  • Shipping carriers to fulfil and track your order
  • Email service providers to send transactional and marketing communications
  • Analytics providers for anonymised platform usage insights
  • Legal authorities if required to do so by law, court order, or to protect our rights

All third-party service providers we work with are contractually required to handle your data securely and only for the specific purpose for which it was shared.

If we ever transfer, merge, or sell our business, your personal information may be transferred as part of that transaction. We will notify you via email before your data becomes subject to a different privacy policy.

05

Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes outlined in this policy, or as required by law.

  • Account data is retained for the lifetime of your account plus 2 years after closure
  • Order and transaction records are retained for 7 years to comply with Australian financial record-keeping requirements
  • Game session data is retained indefinitely for prize verification and dispute resolution purposes
  • Reaction Cam footage is retained until you request its removal, subject to any third-party platform caching
  • Marketing data is retained until you unsubscribe

When data is no longer required, it is securely deleted or anonymised.

06

Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or misuse. These include:

  • HTTPS encryption for all data transmitted through our platform
  • Encrypted storage of passwords using industry-standard hashing
  • Access controls limiting staff access to personal data on a need-to-know basis
  • Regular security reviews and vulnerability assessments
  • Secure payment processing via PCI-DSS compliant providers

No method of transmission over the internet or electronic storage is 100% secure. While we use all commercially reasonable means to protect your data, we cannot guarantee absolute security. If you suspect your account has been compromised, contact us immediately.

07

Cookies

We use cookies and similar tracking technologies to operate and improve our platform. Cookies are small text files stored on your device. We use the following types:

  • Essential cookies - required for the platform to function (login sessions, cart data)
  • Analytics cookies - anonymised data about how visitors use our site (e.g. Google Analytics)
  • Marketing cookies - used to deliver relevant advertising (only if you consent)

You can control or disable cookies through your browser settings at any time. Disabling essential cookies may affect the functionality of the platform.

We do not use cookies to track you across third-party websites without your consent.

08

Your Rights

Under applicable Australian privacy law and, where relevant, the GDPR, you have the following rights in relation to your personal information:

  • Access - request a copy of the personal information we hold about you
  • Correction - request that we correct inaccurate or incomplete information
  • Deletion - request that we delete your personal information (subject to legal obligations)
  • Portability - request your data in a structured, machine-readable format
  • Objection - object to our processing of your data for marketing purposes
  • Withdrawal of consent - withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@luckylittledevil.com. We will respond within 30 days. Some rights may be subject to limitations where we have legal grounds to retain or process your data.

09

Children's Privacy

Lucky Little Devil is strictly intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 years of age.

If you believe a minor has provided us with personal information, please contact us immediately at privacy@luckylittledevil.com and we will take steps to delete that information promptly.

10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page.

Your continued use of our platform after the effective date of any changes constitutes your acceptance of the revised policy.

11

Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:

Lucky Little Devil - Privacy Officer
Email: privacy@luckylittledevil.com
Website: luckylittledevil.com

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Privacy Questions?

Contact Our Privacy Officer

privacy@luckylittledevil.com - Replies within 30 days

Email Us