Last updated: May 2026
1. Information We Collect
When you register and use LuckyDraw, we collect:
- Account data: Full name, email address, mobile number, date of birth, gender.
- Location data: Country, province, city, postal code, and delivery address.
- Activity data: Points earned, draws entered, coupons redeemed, and login history.
- Technical data: IP address, browser type, device information (for fraud prevention only).
2. How We Use Your Information
- To operate and improve the Platform.
- To deliver prizes to winners.
- To send transactional emails (verification, password reset, winner notifications).
- To prevent fraud and enforce our Terms.
- To display aggregate, anonymised statistics.
3. What We Do NOT Do
- We do not sell your personal data to third parties.
- We do not display your full name publicly — only a masked name (e.g., A*** K***) appears on the Winners page.
- We do not store plain-text passwords.
4. Data Security
All passwords are hashed using bcrypt. Personal information (name, mobile, email) does not appear in server logs. Data is transmitted over HTTPS (TLS 1.2+).
5. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
6. Your Rights
- Request access to your personal data.
- Request correction of inaccurate data.
- Request deletion of your account and data.
To exercise these rights, please contact us.
7. Cookies
We use session cookies only for authentication. We do not use tracking or advertising cookies.
8. Third-Party Services
We use Google AdSense and external SMTP providers (SendGrid/Mailgun) for advertising and email delivery. These services have their own privacy policies.
9. Changes to This Policy
We may update this policy periodically. We will notify registered users of significant changes by email.