🔒 Privacy Policy

ILotto Privacy Policy — How your personal data is collected, used, and protected

Your privacy is our top priority at iLotto. This policy explains with full transparency — what data we collect, why we collect it, and how we keep it secure.

Update: 1 January 2026 Language: Bengali Criteria: GDPR Compliant Encryption: SSL 256-bit
🛡️
Your Data is Secure
iLotto never sells your personal data to third parties.
Fully encrypted storage
No data shared with third parties
Right to Erasure
Regular Independent Audits
🔐
256-bit SSL Encryption
🚫
Data is never sold
🌐
GDPR Compliant
🗑️
Right to Data Deletion

🛡️ How iLotto Protects Your Information

Six core practices through which we protect your privacy

🔒
Encrypted data storage
SSL 256-bit Protection

All your data is stored with military-grade 256-bit SSL encryption. Protection is ensured at every level, from data transmission to storage.

  • Data-in-Transit Encryption
  • Data-at-rest encryption
  • Encrypted backup system
🚫
No data shared with third parties
No Sale of Data

ILotto never sells your personal data to advertisers, data brokers, or any other third party. Your data belongs to you.

  • Not used for advertising
  • No data shared with data brokers
  • Limited sharing with partners
🔍
Regular Security Audits
Independent third party

ILotto's security systems are regularly audited by independent cybersecurity experts. Any vulnerabilities found are resolved immediately.

  • Quarterly cyber audits
  • Penetration Testing
  • Vulnerability assessment
👤
Restricted Access Controls
Role-based access

Your data is only accessible to staff who need it to perform their duties. Strict role-based access controls ensure no one beyond that can view your information.

  • Minimum Access Policy
  • Staff access logs recorded
  • Regular access reviews
Scheduled Data Deletion
Data Retention Policy

No data is retained beyond what is necessary. A specific retention period is defined for each type of data.

  • Account Data: Retained while the account is active
  • Transaction data: 5 years (legal requirement)
  • Log Data: 1 year
🌐
GDPR & International Standards
Global Privacy Standards

ILotto follows the principles of GDPR — Europe's most stringent data protection law. This is not just a legal obligation; it is our commitment.

  • Right to Data Portability
  • Right to Be Forgotten
  • Easy consent withdrawal
1

Introduction & Scope

ILotto's Privacy Policy ("Policy") explains how we collect, process, and store personal information from users of our website, mobile app, and all related services.

ILotto believes privacy is a fundamental right. That's why we've built a system from the ground up where your data is used solely to provide the services you need. We follow the principles of GDPR and other leading data protection laws worldwide.

Consent: By using iLotto, you agree to this Privacy Policy. If you have not read it or disagree with any part of it, please contact us: privacy@ilotto.im

2

What data is collected

ILotto collects the following types of information:

Data Type Example Required?
Identity Information Name, date of birth, national ID number Yes
Contact Information Mobile number, email address Yes
Financial Information Payment method details (bKash, Nagad number) Yes
Transaction Data Deposit, withdrawal, and betting history Yes
Device Information IP address, browser, operating system Automatic
Usage Data Page visits, gaming patterns, session duration Automatic
Contact Information Support chat and email records Optional

We never collect the following sensitive information:

  • Religious beliefs or political opinions.
  • Medical or health-related information (except data related to responsible gaming).
  • Full bank card numbers — only the last 4 digits are stored.
3

Why we collect and how we use your data

ILotto collects data for specific purposes. There is a clear reason behind every piece of information we gather:

  • Account creation and management: For registration, login, and account security.
  • Payment Processing: To process deposits and withdrawals.
  • Identity Verification (KYC): To meet legal obligations and prevent fraud.
  • Customer Support: To resolve your issues and respond to your queries.
  • Platform Improvement: To analyze usage patterns and improve our services.
  • Responsible Gaming: To detect unusual gaming patterns and protect members.
  • Legal Compliance: Required for Anti-Money Laundering (AML) laws and other regulatory obligations.

Our commitment: Your data is not used for any purpose beyond those stated above. Consent for marketing communications is obtained separately and can be withdrawn at any time.

4

Data Sharing Policy

ILotto never sells your personal data. However, your information may be shared in the following limited circumstances:

  • Payment providers: bKash, Nagad, Rocket, and banks — only the information required to complete a transaction.
  • Game providers: Live Casino or Sports platform — minimum necessary session data only.
  • Regulatory authority: To licensing bodies or law enforcement agencies when required by law.
  • Cybersecurity Auditor: For security assessment purposes — without full identification.

ILotto has strict data processing agreements in place with every third-party provider. They may only use data for specified purposes and are required to maintain the same level of protection.

5

Security Measures

ILotto uses world-class technology to keep your data secure:

  • Encryption: All data is stored with 256-bit AES encryption and transmitted via TLS 1.3 protocol.
  • Firewall: Multi-layered firewall and intrusion detection system.
  • Two-Factor Authentication (2FA): An additional layer of security for logins and withdrawals.
  • Automated threat detection: Detects unusual activity in real time.
  • Regular Audits: Quarterly third-party security assessments.
  • Staff Training: All staff receive regular data protection training.

In the Event of a Data Breach: In the event of a security breach, iLotto is required to notify the relevant regulatory authorities within 72 hours and will inform affected members as quickly as possible.

6

Data Retention Period

ILotto does not retain data beyond what is necessary. The retention period for each data type is outlined below:

Data Type Retention Period Reason
Account Information For the duration of active account + 1 year Service delivery
Financial Transactions 5 years Legal & Regulatory Requirements
KYC Documents 5 years AML Legal Obligations
Support Chat 3 Years Quality Improvement & Dispute Resolution
Log Data 1 year Security analysis
Cookie Data 30 Days – 2 Years (depending on cookie type) User Experience
7

Cookie Policy

ILotto uses cookies and similar technologies to enhance your experience and keep the platform running smoothly. A cookie is a small data file stored on your device.

Types of cookies we use:

9

Protection of minors

ILotto strictly enforces an 18+ policy. Collecting or processing data from minors is strictly prohibited on our platform.

  • Age verification is conducted at the time of registration.
  • If a minor is identified, their account is immediately closed and all data is deleted.
  • Data relating to minors is never used for any purpose.

If you suspect a minor is using iLotto, please notify us immediately: privacy@ilotto.im

10

International Data Transfers

Your data is primarily stored in Bangladesh. However, some service providers' servers may be located in other countries. In such cases:

  • Data is only transferred to GDPR-approved countries or those with adequate data protection measures in place.
  • Appropriate contracts and safeguards are in place before any transfer.
  • All terms of this policy apply to international transfers as well.
11

Privacy Policy Updates

ILotto may update this Privacy Policy as needed. For significant changes:

  • You will be notified by email at least 30 days before any changes take effect.
  • A notice will be displayed on the website.
  • If you do not agree to the updated policy, you will have the option to close your account.

Current Version: This Privacy Policy 1 January 2026 Effective date. Version: v3.2

12

Contact & Data Protection Officer

For any questions about this Privacy Policy or your personal data, please contact our Data Protection Officer:

  • Email: privacy@ilotto.im
  • General support: support@ilotto.im
  • Live Chat: Bottom right corner of the website
  • Response Time: Within 48 business hours

Requests to access, correct, or delete your data will be fulfilled within 30 days following identity verification.

⚖️ Your Data Rights

Your rights under GDPR and international privacy laws

👁️
Right to Know

You have the right to know what information iLotto holds about you. You can request a copy of your data at any time.

✏️
Right to Rectification

You have the right to correct any inaccurate information. Update your details via Account Settings or by contacting support.

🗑️
Right to Deletion

You may request deletion of your data in certain circumstances. Everything will be removed except data we are legally required to retain.

🚫
Right to Object to Processing

You may object to the use of your data for marketing communications or any other specific purpose. Your consent can be withdrawn at any time.

📦
Right to Data Portability

You have the right to download your data in a machine-readable format (JSON or CSV). Requests will be fulfilled within 30 days.

⏸️
Right to restrict processing

In certain circumstances, you can request that we limit how your data is processed. Your data will be locked during any investigation.

📧 Want to Exercise Your Rights?

Email us at privacy@ilotto.im or contact our support team via live chat. Your request will be completed within 30 days of identity verification.

❓ Privacy FAQ

Frequently asked questions

No. iLotto does not share your data with any external advertisers or use it for third-party targeted advertising. Your email address is only used to send iLotto's own promotional emails with your consent, and you can unsubscribe at any time.

Most of your personal data is deleted upon account closure. However, financial transaction records and KYC information must be retained for 5 years to meet legal obligations. This data is fully encrypted and is not used for any service delivery.

Your full card number or mobile banking PIN is never stored on iLotto's servers. Only the reference number required to complete a transaction is retained. All payments are processed through PCI DSS compliant systems.

Email privacy@ilotto.im or submit a request via live chat. Once your identity has been verified, a complete copy of your data will be sent within 30 days in JSON or PDF format.

Limited data transfers may occur because some service providers' servers are located in other countries. However, transfers are always made to GDPR-approved countries and under strict contractual agreements. Full data protection is ensured in all cases.
🔒

Your data is safe — join iLotto with confidence!

Register today on Bangladesh's safest and most trusted gaming platform. Your privacy is our top priority.

About Us Terms & Conditions Responsible Gaming FAQ
বাংলা