Privacy Policy
Effective: 2026-10-30 · BUKCS PTE. LTD.
This policy explains what personal data BUKCS PTE. LTD. ("LottosLab", "we") collects through the LottosLab website and apps, why, and what choices you have.
1. Who we are
LottosLab is operated by BUKCS PTE. LTD., a company incorporated in Singapore. We are the controller of the personal data described here. Contact: [email protected].
2. Data we collect
We collect only what the service needs:
- Guest account: a random install ID generated by the app (or a cookie ID on the website), app language, platform and app version.
- Sign-in (optional): when you sign in with Google, Apple, NAVER or Kakao, the account identifier issued by that provider and your email address. Apple "Hide My Email" addresses are kept as provided. We never receive your password.
- Name and mobile number (optional, NAVER and Kakao sign-in only): provided by the provider only if you agree on its consent screen. They are stored encrypted, shown masked on My page, and used to identify you and to send the draw-result and prize notifications you turn on. You can delete them on My page at any time.
- Your activity: combinations you receive, favorite lottery, notification settings, community posts, nicknames and comments you choose to publish.
- Purchases: product, price, currency, store transaction ID, subscription status and refunds. Card details are handled by Apple, Google or Stripe and never reach us.
- Points: balance and history of purchases, use, bonuses and ad rewards.
- Push notifications: the device token issued by Firebase Cloud Messaging.
- Advertising: for free users, Google AdMob may use your device advertising ID and approximate location to serve and measure ads. Rewarded-ad completion is confirmed to us with your account ID only.
- Technical data: IP address (stored only as a one-way hash for abuse prevention on community posts), country derived from IP, and server logs.
3. Why we use it
- To provide the service: issue combinations that do not overlap between users, show results and send the notifications you turned on.
- To run your account, points and Premium subscription, verify purchases with Apple, Google or Stripe, and handle refunds.
- To keep the service safe: prevent abuse, fraud and duplicate rewards.
- To show ads to free users and to measure the service in aggregate.
- To meet legal obligations such as tax and consumer-protection record keeping.
For users in the EU/EEA and UK, our legal bases are: performance of a contract (account, purchases, combinations), legitimate interests (security, aggregate statistics), consent (personalized ads, push notifications) and legal obligation (payment records).
4. Who we share it with
We do not sell personal data. We share data only with service providers that process it on our behalf or as independent platforms:
- Google (Firebase Cloud Messaging, Google Sign-In, Google Play Billing, AdMob)
- Apple (Sign in with Apple, App Store purchases and notifications)
- NAVER Corp. and Kakao Corp. (NAVER and Kakao sign-in)
- Stripe (website payments)
- Cloudflare (content delivery and security)
- Smileserv (server hosting in the Republic of Korea)
We may also disclose data when required by law or to protect the rights and safety of users.
5. International transfers
Our servers are in the Republic of Korea, and some providers above process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers' standard contractual clauses.
6. How long we keep it
- Account, points and activity data: until you delete your account.
- Purchase and refund records: 5 years after the transaction, for tax, accounting and consumer-protection purposes, even after account deletion.
- Server access logs: up to 3 months.
- Community posts: until you or we remove them, or the account is deleted (posts may remain shown under your nickname as "deleted user" content if needed to keep threads readable).
7. Your rights and choices
- Access, correct, export or delete your data, and object to or restrict processing. Email us and we will reply within 30 days.
- Delete your account at any time in the app: My → Account → Delete account. This removes your account, points and sign-in links immediately.
- Notifications can be turned off in the app or in device settings.
- Ads personalization can be limited in your device settings (Android: Ads → Delete advertising ID; iOS: Allow Apps to Request to Track).
- You may complain to your local data protection authority (for example, the Personal Data Protection Commission in Singapore or Korea, or your EU/UK supervisory authority).
8. Children
LottosLab is not intended for anyone under 19 or under the legal lottery age where they live, whichever is higher. We do not knowingly collect data from children; if you believe a child has used the service, contact us and we will delete the data.
9. Security
Data is encrypted in transit. Email addresses are stored encrypted, and identifiers used for lookups are stored as keyed hashes. Access to production systems is limited and logged.
10. Changes
We will post changes on this page with a new effective date and, for significant changes, notify you in the app beforehand.
11. Contact
Data Protection Officer: Director, BUKCS PTE. LTD. — [email protected]