Privacy Policy
This policy explains what TriLuck processes when you visit the site, create an account, join a draw, deposit, withdraw or contact support.
1. Scope and responsibility
This policy covers personal information processed by TriLuck through the public website, account area, API, administration tools and support Inbox. It does not replace the privacy notices of independent services such as NOWPayments.
TriLuck determines why account and transaction data are used for the platform. Infrastructure and payment providers process certain information under their own terms and data-processing arrangements.
2. Information you provide
- Name, email address and password submitted during registration.
- Your permanent USDT BEP20 payout address.
- Text messages sent through the Inbox or Contact form.
- Withdrawal amounts and information needed to review a request.
- Any information you voluntarily provide during support or verification.
3. Information created by your use
- Account identifier, status, timestamps and security events.
- Draw entries, allocated ticket numbers, Golden Ticket results and purchase history.
- Platform balance entries, deposits, prize credits and withdrawals.
- Session, browser, IP address and request logs used for operation and abuse prevention.
- Inbox read, deletion and administrative audit states.
4. How we use information
- Create and authenticate accounts.
- Allocate tickets and record draw results.
- Maintain balances and verify deposits and withdrawals.
- Send service, security and transaction messages.
- Prevent fraud, resolve disputes, debug errors and protect the platform.
- Meet legal, tax, accounting and compliance obligations where applicable.
5. Passwords and sensitive wallet information
The backend stores passwords as one-way hashes rather than readable passwords. TriLuck does not need and will never legitimately request your crypto seed phrase or private key.
A public payout address is still personal account data when linked to your identity and transaction history, so it is protected and disclosed only as needed to operate the service.
6. Service providers and disclosures
TriLuck currently uses Firebase Hosting to deliver frontend files, Render to host the backend API, Aiven to host the MySQL database and NOWPayments to provide hosted crypto invoices. These providers may process IP addresses, request metadata, account-related records or payment information as needed to provide their services.
Information may also be disclosed when reasonably necessary to comply with law, protect rights and safety, investigate fraud, enforce agreements, complete a business reorganization or act with your direction. TriLuck does not sell personal information for money.
7. Cookies and browser storage
TriLuck uses an essential secure session cookie so the backend can recognize your authenticated browser. Language and limited interface preferences may be stored in local browser storage.
Disabling essential storage may prevent login or other account features from working. TriLuck should obtain any consent required before adding optional analytics or advertising technologies.
8. International processing
Infrastructure and payment providers may process information in countries different from yours. Where required, TriLuck and its providers must use lawful safeguards for international transfers.
9. Retention
Information is kept only as long as reasonably needed for accounts, transactions, prize records, support, fraud prevention, backups and legal obligations. Financial and audit records may be retained after account closure when required or justified.
Deleting an Inbox message from the user view does not necessarily delete the administrative record needed for security or dispute evidence.
10. Security
TriLuck uses HTTPS, secure session settings, access controls, password hashing, server-side validation and database records. No system can guarantee absolute security, so protect your email account, device and login credentials.
Report suspected unauthorized access through the Contact page as soon as possible.
11. Your choices and rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection or a portable copy of personal information, and to complain to a data-protection authority.
Some requests may be limited by identity verification, transaction integrity, fraud prevention or legal retention duties. The fixed payout address cannot currently be edited through the account interface.
12. Age, changes and contact
TriLuck is not intended for anyone under 18 or below the legal participation age in their jurisdiction. This policy may change as the platform, providers or law change; the effective date identifies the latest version.
Use the Contact page for privacy questions or requests. TriLuck may need to verify your identity before acting on an account-specific request.