Privacy Policy

Ilotto Privacy Policy — How Your Data Is Collected and Kept Secure

Your privacy is our highest priority at ilotto. This policy clearly sets out what data we collect, why we collect it, and how we keep it safe.

Last Updated: 1 January 2026 Language: English Version: 2.5
Our Commitment
No Sale or Sharing of Data
256-Bit SSL Encryption
Right to Erasure at Any Time
Fully Transparent Data Usage Policy
GDPR-Compliant Data Protection
SSL Encryption
GDPR Compliant
No data sharing with third parties
Secure Data Storage
Personal control
Key Points

Our six core principles of data protection

The six core principles we follow to keep your data safe on ilotto

Minimal Data Collection

We only collect the information necessary to provide our services. No unnecessary personal data is requested.

Security of the highest standard

All data is protected with 256-bit SSL encryption. Bank-grade security measures are in place.

Data Under Your Control

You have full rights to view, correct, or delete your data — and can make a request at any time.

No data sharing with third parties

Your personal data is never sold or shared with advertisers or third parties.

International standards compliance

International data protection standards, including GDPR, are upheld. Regular third-party audits are conducted.

Full transparency

Every aspect of how we collect and use data is clearly outlined in this policy. There is nothing hidden.

This privacy policy applies to all services on the ilotto platform. By using ilotto, you are deemed to have agreed to this policy. If you have any questions, please contact our support team.

1. Introduction

In today's digital world, protecting personal information is more important than ever. ilotto treats this as its highest priority. We believe your data belongs to you — we are simply its custodians.

This Privacy Policy explains what data ilotto collects, how it is used, how long it is retained, and what rights you have. We want you to use ilotto with full knowledge and confidence.

Ilotto is an internationally licensed platform and complies with GDPR and all applicable international data protection regulations. This policy was last updated on 1 January 2026.

2. What Data We Collect

Ilotto collects two types of data — information you provide directly, and information collected automatically.

Data TypeWhat InformationTime of collection
Identity InformationFull name, date of birth, nationality, NID/passport numberRegistration & KYC Verification
Contact InformationEmail, mobile number, addressRegistration
Payment InformationMobile banking number, bank details (encrypted)Transactions
Gaming dataBetting history, game sessions, win/loss recordsGaming
Technical InformationIP address, device information, browser typeAutomatic
Usage InformationPage visits, click patterns, session durationAutomatic

We never collect your mobile banking or banking PIN/password. Payment gateways communicate directly with the relevant financial institution.

3. Why We Collect Your Data

Ilotto only collects data for legitimate and clearly defined reasons. Each piece of information serves a specific purpose:

  • Service Delivery: For creating an account, accessing games, and processing transactions.
  • Identity Verification (KYC): To meet legal obligations and prevent financial fraud.
  • Security assurance: To detect unauthorised access and fraudulent activity.
  • Customer Support: To resolve your issues and respond to your queries.
  • Responsible Gaming: To monitor gaming behaviour and identify early signs of problematic activity.
  • Platform Improvement: To analyse usage patterns and improve your experience.
  • Legal compliance: For regulatory reporting and fulfilling legal obligations.

4. How Your Data Is Used

Collected data is used solely for the purposes listed below. ilotto never sells your information for profit.

1
Account Management

Your data is used to keep your account active and to verify your login.

2
Transaction processing

For processing deposits and withdrawals and maintaining transaction history.

3
Sending Notifications

To send transaction confirmations, security alerts, and important updates.

4
Personalised Experience

To suggest games and offers tailored to your preferences.

To stop receiving promotional communications, disable "Marketing Communications" in your account settings or contact support. This is your right.

5. Sharing Information with Third Parties

Ilotto does not generally share your data with third parties. However, limited data sharing with certain trusted partners is necessary to operate our services:

  • Payment provider: Mobile Pay, Nagad, banks — only the minimum information required to process transactions.
  • Game provider: International game companies — user identification data required to operate games.
  • Technology Partners: Cloud server and security service providers — in encrypted form only.
  • Legal Authorities: Under a valid court order or directive from a regulatory authority — as required by law.

All partners are bound by strict confidentiality agreements and may only use data for specified purposes. Under no circumstances is any information shared with advertisers.

6. Cookie Policy

The ilotto website and app use cookies — small text files stored on your device. The types of cookies we use and their purposes are outlined below:

Cookie TypePurposeValidityCan it be turned off?
Essential Login sessions, security Upon session end No
Analytics Usage Statistics 1 year Yes
Preferences Language, theme settings 6 months Yes
Marketing Showing Relevant Offers 30 days Yes

You can manage cookies at any time through your browser settings. However, disabling essential cookies may affect the platform's functionality.

7. Data Retention & Retention Periods

Ilotto retains data only for as long as necessary. Retention periods by data type are outlined below:

  • Account information: For the duration of active account use and 5 years after closure.
  • Transaction Records: 7 years as required by law.
  • KYC documents: 5 years.
  • Gaming History: 3 years.
  • Support Chat Logs: 1 year.
  • Login logs: 90 days.

Once the retention period expires, data is securely deleted or anonymised. Certain data may be retained longer where required by law.

8. Your Data Rights

As an ilotto member, you have the following rights regarding your personal data:

Right to Access

You can view what personal information we hold about you.

Right to Rectification

You can request corrections to any inaccurate or outdated information.

Right to deletion

You may request deletion of your data where there is no legal obligation to retain it.

Right to restrict processing

You may request that data processing be restricted under certain circumstances.

Right to Data Portability

You may request a copy of your data.

Right to Object

You may object to your data being used for marketing or profiling purposes.

To exercise any of these rights, email our support team at support@ilotto.pro. All requests will be responded to within 30 days of receipt.

9. Children's Privacy

Ilotto is strictly not intended for anyone under the age of 18. We do not knowingly collect data from minors.

If a minor has registered on ilotto, the associated account and data will be deleted immediately. If you believe a child is using your account, contact support right away.

A note for parents — please enable parental controls on your devices and keep your ilotto account login credentials away from children.

10. Security Measures

Ilotto uses industry-leading technology to protect your data:

  • Encryption: 256-bit TLS/SSL encryption on all data transmissions.
  • Firewall: Advanced firewall and intrusion detection system.
  • Secure Servers: Data centers are ISO 27001 certified.
  • Regular Audits: Third-party security audits are carried out on a regular basis.
  • Staff Training: All staff are trained on data protection practices.
  • Action on Data Breach: In the event of a data breach, affected users will be notified within 72 hours.

Even with all these measures in place, it is important that you also take responsibility for your own account security. Use a strong password and never share your login credentials with anyone.

11. Policy Changes

Ilotto may update this Privacy Policy from time to time. Before any significant changes, we will:

  • We will send a notification to your registered email address.
  • We will display a notice on the platform.
  • We will update the "Last Updated" date at the top of this page.

Continued use of ilotto after any changes takes effect constitutes acceptance of the updated policy. We recommend visiting this page regularly.

12. Contact

For any questions or requests regarding this Privacy Policy, please contact us:

  • Live Chat: 24/7 Bengali-language support is available.
  • Email: support@ilotto.pro (Response time: 24–48 hours)

Requests for data deletion or account closure will be processed within 30 days of identity verification.

Common Privacy Questions

No, not at all. ilotto never collects or sees your mobile banking PIN or password. When making a payment, you enter your PIN directly through Mobile Pay or Nagad's own secure payment gateway. ilotto only receives a confirmation of whether the transaction was completed.

No. ilotto never sells or shares your personal information with advertisers or marketing companies. Your data is shared only to deliver our services and, where legally required, with a limited number of partners.

Partially. When an account is closed, login-related information is deleted. However, transaction records and KYC data must be retained for a legally required period. Once that period expires, all remaining data is securely deleted.

You can opt out of promotional messages by going to "Notification Preferences" or "Marketing Communications" in your account settings, or by contacting our support team for assistance. Please note that transaction confirmations and security alerts cannot be disabled.
Your data is secure

Enjoy ilotto with complete peace of mind

Read and understood our Privacy Policy? Join ilotto with confidence — your data and funds are always protected.

SSL
256-Bit Encryption
GDPR
International standards
0
Sale of Data to Third Parties

By registering, you are deemed to have accepted our Privacy Policy

বাংলা