Privacy Policy

Data We Collect

When you create an account we collect your email address and display name. If you register via Google or Facebook we also receive your profile picture URL and the OAuth provider ID. We do not receive or store your social media password. When you use coin-based features we store your transaction history (amount, date, reference). We log your last login timestamp and language preference.

How We Use Your Data

We use your data solely to operate the service: authenticating your account, maintaining your coin balance and transaction history, sending transactional emails (email verification, receipts), and displaying personalised content in your preferred language. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

We use the following external services which may process your data under their own privacy policies:

• Google OAuth — for social sign-in (policies.google.com/privacy)

• Facebook Login — for social sign-in (facebook.com/privacy/policy)

• LINE Login — for social sign-in; we collect your email address and display name to create and identify your account (line.me/en/terms/policy)

• Opn Payments (Omise) — for payment processing (omise.co/privacy)

• Dreamstime — editorial images on the Antique Tickets page (dreamstime.com/privacy-policy)

Cookies & Local Storage

We store your authentication tokens (JWT) in your browser's local storage to keep you logged in. We do not use third-party tracking or advertising cookies. Standard server logs (IP address, browser type, page visited) may be retained for up to 90 days for security and debugging purposes.

Data Retention

Your account data is retained for as long as your account is active. You may delete your account at any time from your profile page, which deactivates your account and stops all processing. We retain transaction records for a minimum of 5 years as required by applicable financial regulations.

Your Rights

You have the right to access, correct, or request deletion of your personal data. To exercise these rights please contact us at the address below. We will respond within 30 days.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions please contact us at: mail@thailotto.report