Privacy

• Your account. Your name, email, password, date of birth, the state you play from, and when you accepted the terms. Your password is stored by our sign-in provider in scrambled (hashed) form; we never see it. If you arrived through a referral link or a campaign, we record the code or the site you came from.
• Your play. Every Gold Coin and Lotty Coin that goes in or out of your account, your drop entries, your Daily Spins, and every table round: the bets, the cards or number drawn, and the result.
• Purchases. The package, the amount, and the payment reference from our payment provider. Payments are handled by NOWPayments; we never receive or store card numbers or wallet keys.
• Redemptions. The wallet address you give us for the payout, and what we need to verify your identity the first time you redeem: typically your legal name, date of birth, address and a photo ID. An identity-verification provider may collect these for us.
• Prizes. If you win a drop, your shipping address and phone number to deliver the item, and the tax information the law requires for prizes.
• Messages. What you send through the support page, the name and email you give us, and, if you're signed in, which account sent it.
• Automatically. A cookie that keeps you signed in. If you play without an account, your balances are kept in your own browser, not on our servers. Our hosting provider keeps standard server logs (IP address, browser type, pages requested) to run and protect the site. We don't use advertising cookies or third-party analytics.

• To run your account and keep your balances and history.
• To confirm you're eligible: 18 or older (19 in Alabama and Nebraska, 21 in Mississippi), and in a state where PlayLotty is offered.
• To run drops and draws, and to deliver prizes.
• To process purchases and redemptions.
• To prevent fraud, cheating and duplicate accounts.
• To answer your messages, and to send the emails the service needs: sign-up confirmation, sign-in links, password resets and account notices.
• To meet our legal, tax and regulatory obligations.

We don't sell or rent your personal information, and we don't share it for advertising. We share it only with:

• Companies that run parts of PlayLotty for us, for that purpose only: Supabase (database and sign-in), Vercel (hosting), Resend (email delivery) and NOWPayments (payments), plus identity-verification and shipping providers when a redemption or a prize needs them.
• Authorities, when the law requires it: tax reporting of prizes, or a lawful request such as a subpoena.
• A buyer or successor, if PlayLotty is ever sold or merged, under this same policy.

Draw results are public so anyone can check them: a lot's draw page shows the winning entry's reference and ticket numbers, not your name or email.

We keep your account details while your account is open. Coin, entry, purchase, redemption, table and draw records are financial records: they can't be edited, and we keep them as long as the law requires for tax, audit and anti-fraud purposes, including after an account is closed. Support messages are kept while we handle them and for our records afterwards.

You can ask us to:

• Show you the personal information we hold about you, or send you a copy.
• Correct it. You can change your name on your account page yourself.
• Close your account and delete your personal information, except the records we must keep by law.
• Pause your account for a while if you want a break from playing.

Send any of these through the support page. We'll confirm it's you, then answer within 45 days. Depending on where you live you may have more rights under state law; we honor these requests for every player, wherever they live.

The site only runs over encrypted connections. Database rules let each player see only their own records, staff access depends on their role, and coin records can only be added to, never edited. No system is perfectly secure: if you think someone has used your account, tell us straight away through the support page and change your password.

PlayLotty is for adults 18 or older (19 in Alabama and Nebraska, 21 in Mississippi). We don't knowingly collect information from anyone younger; if we learn we have, we delete it and close the account.

If this policy changes, we'll post the new version here with a new date. If a change affects how we use information you've already given us, we'll tell you on the site or by email first.

Questions about your privacy go through the support page. Choose "Account and sign-in" and start your message with "Privacy". Your information is stored in the United States.