Privacy policy
Last updated: 12 November 2026
This policy explains what LuckyLot collects, why, and how it is protected.
What we collect
- Account: name, mobile number (verified by OTP) or Google email, city and address.
- Identity (KYC): photos of your Aadhaar (with the first 8 digits covered), PAN card and a light bill; the last 4 digits of your Aadhaar and your PAN number. We never store your full Aadhaar number.
- Distributors: business name, Gumasta and Udyam numbers and certificate photos.
- Activity: tickets, wallet payments, draw results, notifications, and the device token used to send you notifications.
- App diagnostics: crash reports to fix problems.
Why we use it
- To run your account, sell tickets, run draws and contact winners.
- To verify identity and prevent fraud, as required for prize payouts.
- To send notifications about your tickets, draws and account.
- To keep records required by law (for example payments and taxes).
Who can see it
- KYC documents are stored privately; apps cannot open them directly. Only LuckyLot staff with permission, and the distributor you are linked to, can view them, and every view is logged.
- When you win, your first name and the first letter of your last name are shown with the winning ticket number.
- We use Google Firebase (sign-in, notifications, storage) and Railway (servers) to run the service. We do not sell your data.
How long we keep it
We keep your account while it is open. Financial and ticket records are kept as long as the law requires, even after an account is deleted.
Your rights
Under India's Digital Personal Data Protection Act, 2023 you can:
- See what personal data we hold about you and how we use it (in the app, or by writing to us).
- Correct or update details that are wrong or out of date.
- Delete your account and data from the app (Account → Delete my account) or by following these steps, except records the law requires us to keep.
- Withdraw consent for optional uses, such as appearing in the winners gallery.
- Name a person who can use these rights for you if you die or cannot act.
- Complain to our Grievance Officer (below) and, if you are not satisfied, to the Data Protection Board of India.
This website
This website counts visits and which buttons are tapped (for example "Get the app"), using Google Analytics from Firebase, so we can improve it. It does not ask for your name or number. Google Analytics uses cookies (small files in your browser) to tell visits apart; you can block or delete them in your browser settings and the website still works. The map in "Visit us" loads Google Maps only when you tap "Show the map". Chat buttons open WhatsApp, where WhatsApp's own privacy policy applies.
Winners gallery
A winner's photo, first name with the first letter of the surname, city, prize and their words appear in the app and on this website only if the winner agrees in writing. A winner can ask us to remove them at any time by calling or emailing us.
Grievance Officer
For any complaint or question about your personal data, write to our Grievance Officer:
Grievance Officer, LuckyLot
Email: luckylot009@gmail.com (subject "Grievance")
Address: 288 Baitul Ansar Building, Gala No. 9, Kaneri, Bhiwandi, Maharashtra 421302, India
We confirm we received your complaint within 2 working days and resolve it within 30 days.
Changes to this policy
If we change this policy, we update the date at the top and, for important changes, tell you in the app.