Lotto Privacy Policy — Our Commitment to Protecting Your Data

Lotto (https://lotto-baji.com) is a trusted online gaming platform built with Bangladeshi players in mind. We believe that every member's privacy is a fundamental right.

This Privacy Policy explains what information lotto collects, why it's collected, and how it is used and kept secure. This policy applies to our website, mobile app, and all related services.

We may update this policy from time to time. For any significant changes, you will be notified via email or in-app notification. The date of the latest update is always shown at the top of the page.

To deliver the best and safest gaming experience on lotto, we collect certain information. Below is a breakdown of the types of data we collect:

Registration Information

• Full name and date of birth (for age verification)
• Mobile number and email address
• Password (stored in encrypted form — never visible to us)
• District or division of residence (optional)

KYC Verification Information

• National ID (NID) number & photo
• Passport or driving license (as an alternative)
• Selfie photo (for identity verification)

Financial Transaction Data

• BKash, Nagad, or Rocket number
• Transaction amount & time
• Transaction ID

Automatically Collected Information

• IP address & device type
• Browser version & operating system
• Time spent on the platform and which pages you visited
• Cookies & local storage data

Lotto uses your information only for specific, legitimate purposes. We never sell your data or use it without authorization.

We analyze your betting patterns solely to promote responsible gaming, so we can step in and offer support if anyone appears to be at risk of excessive gambling.

Lotto stores your data on secure servers located in ISO 27001-certified data centers with round-the-clock physical and digital security.

Retention Period

• Active account data: retained for as long as the account remains active.
• After account closure: up to 5 years, as required by law.
• KYC documents: 5–7 years, in accordance with regulatory requirements.
• Transaction records: retained for up to 7 years for audit purposes.
• Log files and cookies: typically retained for 90 days to 1 year.

Lotto never sells your data. However, limited information may be shared with trusted third parties in specific circumstances:

• Payment Processors: bKash, Nagad, and approved payment gateways — used solely to process transactions.
• KYC Verification Agency: Licensed verification service providers used to confirm your identity.
• Technology Service Providers: Cloud hosting and cybersecurity partners — bound by strict confidentiality agreements.
• Legal Authority: When required by a lawful order from a Bangladeshi court or regulatory authority.
• Fraud Prevention Agencies: In compliance with legal obligations related to investigations into money laundering or other illegal activity.

Your information is never shared beyond the cases outlined above. Any data shared with third parties is governed by their own privacy policies — and we ensure they are contractually bound to uphold them.

Lotto uses cookies on its website and app to enhance your experience. Cookies are small text files stored in your browser.

Types of Cookies We Use

• Essential Cookies: Login sessions and security tokens — the site cannot function without these and cannot be disabled.
• Functional Cookies: Remembers your language preference and theme settings.
• Analytics Cookies: To understand which pages are visited most (similar to Google Analytics). You can turn this off.
• Marketing Cookies: Used to show relevant offers. Only active with your consent.

Every member registered with lotto has the following rights over their personal data:

• Right to Access: You can request to see what information we hold about you.
• Right to Rectification: You can update any information that is incorrect or out of date.
• Right to Erasure: You can request deletion of specific data where there is no legal obligation to retain it.
• Right to Object to Processing: You may object to your data being used for marketing purposes at any time.
• Data Portability: You can request a copy of your data in a structured, readable format.
• Withdrawal of Consent: You can opt out of marketing communications at any time.

To exercise any of these rights, email us at support@lotto-baji.com. We will respond within 30 business days.

Lotto upholds the highest industry standards in data protection — not just in words, but through concrete technical safeguards:

• TLS 1.3 encryption is used for all data transmissions.
• Passwords are stored using bcrypt hashing — even our staff cannot view them.
• Two-factor authentication (2FA) is available for all users.
• Regular third-party security audits and penetration testing.
• Suspicious login attempts are automatically blocked.
• Staff access is restricted to the minimum data necessary (Principle of Least Privilege).

Lotto strictly prohibits anyone under the age of 18 from using the platform. We do not knowingly collect or process data from minors.

If we become aware that a minor has created an account, it will be immediately closed and all associated data will be securely deleted.

If parents notice anything suspicious, please contact support@lotto-baji.com — we will act promptly.

For any questions, complaints, or requests regarding this Privacy Policy, please reach out to our dedicated Privacy Team:

We take every privacy-related request seriously and work to resolve it as quickly as possible.