Cookie Policy
Last Updated: 12 April 2026
This Cookie Policy explains how Big Lucky Choice ("we", "us", or "our") uses cookies and similar tracking technologies on bigluckychoice.com (the "Site"). It forms an integral part of our Privacy Policy and is designed to comply with the General Data Protection Regulation (GDPR), the UK GDPR, the EU ePrivacy Directive, Canada's PIPEDA and CASL, and other applicable privacy laws.
If you are located in the EEA, UK, or another region that requires prior consent for non-essential cookies, we will ask for your consent before placing those cookies. You can update your preferences at any time using the [Manage Cookie Preferences] control.
1. Data Controller
The data controller for personal data collected through cookies and similar technologies on this Site is:
Big Lucky Choice
Website: bigluckychoice.com
Email: privacy@bigluckychoice.com
For questions about this Cookie Policy or to exercise your data rights, please contact us at the email above.
2. What Are Cookies and Similar Technologies?
Cookies are small text files stored on your browser or device when you visit a website. They allow the Site to recognise your browser across visits and remember information about your interactions. We also use related technologies including pixels/web beacons, local storage, SDKs, and device identifiers. For simplicity, all of these are referred to collectively as "cookies" throughout this Policy.
Session cookies are deleted when you close your browser. Persistent cookies remain on your device until their expiry date or until you delete them. First-party cookies are set directly by us; third-party cookies are set by external domains such as analytics or advertising providers.
Pixels are small invisible images embedded in pages or emails that record when and how you interact with content, and are typically used alongside cookies for analytics and retargeting.
3. Legal Basis for Cookie Processing (GDPR / UK GDPR)
We process personal data via cookies on the following legal bases:
- Consent (Article 6(1)(a)): All non-essential cookies — including analytics, advertising, retargeting, and personalisation cookies — are placed only with your prior, freely given, specific, informed, and unambiguous consent. Consent is collected via our cookie consent banner. You may withdraw consent at any time via [Manage Cookie Preferences].
- Legitimate interests (Article 6(1)(f)): Strictly necessary cookies required for the Site to function securely and correctly (e.g., session management, fraud prevention, load balancing) are set on the basis of our legitimate interest in operating a secure and functional website. We have assessed that this interest is not overridden by your rights and freedoms.
For Canadian visitors, we rely on implied consent for strictly necessary cookies and express consent for non-essential cookies under PIPEDA and CASL.
4. Categories of Cookies We Use
A. Strictly Necessary (Essential) — First-party — No consent required
These cookies are required for the Site to function. They enable core features such as page navigation, session management, security, and fraud prevention. They cannot be disabled without significantly impacting your experience. They do not collect personal data for marketing purposes.
| Cookie Name | Purpose | Lifespan |
|---|---|---|
| session_id | Maintains your session state across pages | Session (deleted on browser close) |
| csrf_token | Prevents cross-site request forgery attacks | Session |
| cookie_consent | Stores your cookie preference choices | 12 months |
B. Preference / Functionality — First-party — Consent required in EEA/UK
These cookies remember choices you make on the Site such as language, region, or UI display settings to improve your experience on return visits.
| Cookie Name | Purpose | Lifespan |
|---|---|---|
| user_prefs | Stores language and regional preferences | 6 months |
C. Analytics and Measurement — First-/Third-party — Consent required
These cookies help us understand how visitors use the Site by collecting information about pages visited, time spent, scroll depth, referral sources, and navigation paths. This data is used in aggregate to improve Site performance and content. Where required by law, these cookies are only loaded after you consent.
| Provider | Cookie / Technology | Purpose | Lifespan |
|---|---|---|---|
| Google Analytics (Google LLC) | _ga, _ga_*, _gid | Visitor analytics, session measurement, A/B testing | _ga: 26 months; _gid: 24 hours |
| Microsoft Clarity (Microsoft Corp.) | _clsk, _clck, MUID | Anonymised session recording and heatmaps | _clsk: 1 day; _clck: 12 months; MUID: 13 months |
D. Advertising, Retargeting and Interest-Based Advertising — Third-party — Consent required
These cookies are set by our advertising partners to build a profile of your interests based on your browsing behaviour on this Site and other sites across the web. They are used to deliver advertisements that are relevant to you, to limit how often you see an ad, and to measure the effectiveness of advertising campaigns. These cookies may involve the transfer of your data to third parties in the United States and other countries outside the EEA or UK. They are only activated after you provide consent.
| Provider | Cookie / Technology | Purpose | Lifespan |
|---|---|---|---|
| Google Ads / DoubleClick (Google LLC) | IDE, NID, DSID, _gcl_au | Ad delivery, retargeting, conversion tracking | IDE: 13 months; _gcl_au: 90 days |
| Meta (Facebook) Pixel | _fbp, _fbc, fr | Ad retargeting, conversion measurement, Custom Audiences | _fbp: 90 days; fr: 90 days |
| Microsoft Advertising | _uetsid, _uetvid, MUID | Ad conversion tracking and retargeting | _uetsid: 1 day; _uetvid: 16 days; MUID: 13 months |
You can withdraw consent for advertising cookies at any time via [Manage Cookie Preferences]. Withdrawal stops future data collection but does not retroactively delete data already processed by third parties.
5. Third-Party Recipients and Their Purposes
When you consent to non-essential cookies, the following third parties may receive personal data collected through this Site. Each acts as an independent data controller for their own processing activities:
-
Google LLC (United States)
Services: Google Analytics, Google Ads, DoubleClick, Google Tag Manager.
Data received: Anonymised IP address, cookie identifiers, device type, browser, pages visited, ad interactions.
Transfer safeguard: Standard Contractual Clauses (SCCs) + supplementary measures.
Opt-out: GA Opt-out | Ad Settings
Privacy policy: policies.google.com/privacy -
Meta Platforms Ireland Ltd. (Ireland / United States)
Services: Facebook Pixel, Custom Audiences, Conversions API.
Data received: Hashed identifiers, pixel events, browsing actions, conversion data.
Transfer safeguard: SCCs (Meta Ireland to Meta US); adequacy for EEA–Ireland transfer.
Opt-out: Ad Preferences
Privacy policy: facebook.com/privacy/policy -
Microsoft Corporation (United States)
Services: Microsoft Advertising, Microsoft Clarity.
Data received: Cookie identifiers, session data (anonymised), click and conversion data.
Transfer safeguard: SCCs + Microsoft EU Data Boundary commitments.
Opt-out: Microsoft Ad Opt-out
Privacy policy: privacy.microsoft.com -
Functional Software Inc. (Sentry) (United States)
Services: Application error and performance monitoring.
Data received: Anonymised error logs, browser/device metadata (essential/operational only).
Transfer safeguard: SCCs.
Privacy policy: sentry.io/privacy -
OneSignal Inc. (United States) — only if you opt in to push notifications
Services: Web push notifications.
Data received: Browser/device push token, notification interaction data.
Transfer safeguard: SCCs.
Privacy policy: onesignal.com/privacy_policy
We review our third-party vendors regularly and update this list as our partners change. Non-essential vendors are only active with your consent where required.
6. International Data Transfers and Safeguards
Several of our third-party partners are based in the United States, which does not benefit from a general adequacy decision under the EU GDPR. For transfers of personal data from the EEA or UK to the United States and other third countries, we rely on the following safeguards:
- Standard Contractual Clauses (SCCs): We use the European Commission's 2021 SCCs (and, for UK transfers, the UK IDTA) in our contracts with US-based processors including Google LLC, Microsoft Corporation, Functional Software Inc., and OneSignal Inc.
- EU–US Data Privacy Framework (DPF): Where a third-party provider is certified under the EU–US Data Privacy Framework or the UK Extension thereto, we may rely on that certification as an additional transfer mechanism.
- Supplementary measures: Where appropriate, we apply technical measures such as data minimisation, pseudonymisation, and IP anonymisation to reduce risks associated with third-country transfers.
- PIPEDA (Canada): For transfers outside Canada, we implement equivalent contractual safeguards to meet PIPEDA standards.
You may request further information about the specific transfer mechanisms in place by contacting us at privacy@bigluckychoice.com.
7. Cookie Retention Periods
Retention periods for cookies vary by category and provider. A summary is provided below:
| Category | Typical Retention |
|---|---|
| Strictly necessary (session) | Duration of browser session only |
| Strictly necessary (persistent) | Up to 12 months |
| Preference / functionality | Up to 6 months |
| Analytics (e.g., Google Analytics _ga) | Up to 26 months |
| Advertising / retargeting | Up to 13 months from last interaction |
| Consent record (cookie_consent) | 12 months (renewed on preference update) |
After these periods, cookies expire automatically. You can also delete cookies at any time via your browser settings.
8. Your Choices and Controls
Consent Manager. Click [Manage Cookie Preferences] at any time to review and update your consent for non-essential cookie categories. Your preferences are saved for 12 months and can be changed at any time.
Browser controls. Most browsers allow you to block or delete cookies via their settings. Blocking essential cookies may affect Site functionality. Refer to your browser's help documentation for instructions.
Mobile device settings. iOS and Android provide options to reset your advertising identifier or limit ad tracking in your device privacy settings.
Global Privacy Control (GPC). Where legally required (e.g., under the CPRA in California), we honour valid GPC signals as an opt-out from sale/sharing of personal data for advertising purposes.
Industry opt-out tools:
- Canada: youradchoices.ca/choices (DAAC)
- EU/UK: youronlinechoices.eu (EDAA)
- US: aboutads.info/choices (DAA)
Note: Industry opt-outs are browser- and device-specific. Clearing your cookies may remove the opt-out preference, in which case you should re-apply your settings.
9. Canadian Addendum (PIPEDA + CASL)
This section applies to Canadian visitors and supplements the Policy above.
Consent basis. Under PIPEDA, we rely on your implied consent for strictly necessary cookies and your express consent for non-essential cookies (analytics and advertising). Under CASL, cookies required to provide a service you have requested do not require express consent; non-essential cookies do.
iGaming context. Where our Site relates to online casino content, we may use geolocation and age-verification technologies to help ensure access is limited to individuals of legal gambling age in their province or territory (generally 19+, or 18+ in Alberta and Quebec).
IBA opt-outs in Canada. Visit youradchoices.ca/choices to manage advertising preferences across DAAC-member companies. These preferences are browser-specific.
Contact for Canadian residents. Email privacy@bigluckychoice.com and indicate that you are a Canadian resident when making any privacy-related request.
10. Cookie Highlights for Canadian Players
🍪 What we use: Essential cookies for core Site functions; optional analytics and advertising cookies for performance measurement and personalised ads.
✅ Your control: Use [Manage Cookie Preferences] at any time, or visit youradchoices.ca/choices.
🧭 iGaming note: Geolocation and age-gate tools may be used to ensure compliance with provincial gambling regulations.
🔐 Privacy law: We follow PIPEDA and CASL. Express consent is required for non-essential cookies.
🌍 Third-country transfers: US-based providers are covered by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
📧 Contact: privacy@bigluckychoice.com
11. How to Manage Cookies in Your Browser
- Chrome: support.google.com/chrome/answer/95647
- Edge: support.microsoft.com
- Firefox: support.mozilla.org
- Safari (macOS/iOS): support.apple.com
- Opera: help.opera.com
Clearing cookies will also remove your saved opt-out preferences. Revisit [Manage Cookie Preferences] after clearing to re-apply your choices.
12. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in technologies, partners, or applicable law. The "Last Updated" date above reflects the most recent revision. Continued use of the Site following an update constitutes acceptance of the revised Policy.
13. Contact Us
For any questions about this Cookie Policy, to withdraw consent, or to exercise your data rights, contact:
Big Lucky Choice — Privacy Team
Email: privacy@bigluckychoice.com
Website: bigluckychoice.com