Lotus365 Privacy Policy

This Privacy Policy explains what personal information we collect when you visit Lotus365, create an account or use our sports and casino services. It also explains why we use that information, when we share it, how long we retain it and what requests you can make.

Read this policy before submitting personal information. If you do not agree with the practices described here, do not create an account or continue using the service.

Scope of This Policy

This policy applies to personal information processed through:

the Lotus365 website and mobile website;
the Lotus365 Android application;
sports betting and live betting;
the betting exchange;
casino and live casino products;
account registration and verification;
deposits, withdrawals and transaction reviews;
promotions and account messages;
customer support.

A third-party website, payment service, game provider or other external service may publish its own privacy terms. Those terms apply when that third party controls how it processes your information.

Information We Collect

The information we collect depends on whether you browse the site, register an account, make a transaction or contact support.

Account and Contact Information

When you register or update an account, we may collect:

full name;
date of birth;
mobile number;
email address;
residential address;
username and Lotus365 ID;
account currency;
communication preferences;
security questions or recovery information.

You are responsible for keeping your contact details current. Incorrect information can delay verification, password recovery or withdrawals.

Identity and Verification Information

We may request information needed to confirm age, identity, address, account ownership or the source of funds.

This can include:

government-issued identification;
a photograph or video used for identity verification;
proof of address;
payment ownership evidence;
bank or wallet details;
occupation or source-of-funds information;
verification results supplied by an identity-checking provider.

We may compare submitted information with records obtained from verification services, payment providers or lawful public sources.

Payment and Transaction Information

When you deposit or withdraw, we may process:

transaction amount;
date and time;
payment method;
bank, wallet or UPI details;
transaction reference;
account balance;
failed or reversed transaction information;
withdrawal and verification status.

Complete card security codes, card PINs, banking passwords and OTP codes should not be sent to us through support.

Payment providers may process additional information under their own privacy policies.

Betting and Gaming Activity

We record activity needed to operate the account and settle transactions, including:

sports and casino products opened;
bets, stakes, odds and results;
exchange orders and exposure;
casino wagers and game results;
deposits, withdrawals and balance changes;
bonuses and promotional activity;
session dates and duration;
responsible gaming controls;
account restrictions and self-exclusion records.

This information forms part of the account history and may be used to answer a dispute or investigate unusual activity.

Device and Technical Information

When you use the website or app, we may receive:

IP address;
device type and model;
operating system;
browser type;
language and time zone;
app version;
device or advertising identifiers;
login time;
pages and features opened;
cookie and similar technology data;
crash, error and performance logs;
approximate location derived from the network or device.

We use this information to operate the service, recognise account sessions, investigate errors and detect unauthorised access.

We do not require precise device location unless a feature, security check or applicable restriction requires it and the device provides the relevant permission.

Support Communications

We keep messages sent through email, live chat, forms or other support channels.

A support record can include:

the message and any attachment;
the time and communication channel;
the account involved;
steps taken to resolve the request;
security or verification notes;
call recordings where recording is disclosed.

Do not include information unrelated to the request.

Information About Risk and Account Security

We may create records relating to:

failed login attempts;
suspected account sharing;
device or payment changes;
duplicate accounts;
disputed transactions;
fraud or misuse indicators;
identity inconsistencies;
unusual betting or gaming activity;
responsible gaming concerns;
complaints and investigations.

These records help us decide whether additional checks, restrictions or contact with the account holder are required.

How We Collect Information

We obtain information:

directly from you;
through your use of the website or app;
from payment and verification providers;
from sports, exchange and casino suppliers;
from fraud-prevention and security services;
from cookies and similar technologies;
from support communications;
from lawful public sources;
from another person who reports an account security or responsible gaming concern.

When someone else contacts us about you, we assess the information before using it. We do not disclose your account information to that person merely because they submitted a report.

How We Use Personal Information

We use personal information for the purposes described below.

Operating the Account

We process information to:

create and maintain the Lotus365 account;
authenticate logins;
display balances and account history;
accept and settle eligible bets or games;
process deposits and withdrawals;
provide customer support;
send service and security messages.

Some account information is required to provide the requested service. If it is not supplied, we may be unable to open or maintain the account.

Identity, Age and Payment Verification

We use identity and payment information to confirm that:

the account holder meets the age requirement;
the submitted identity belongs to the account holder;
account details are accurate;
a payment method is connected to the correct person;
a withdrawal request is authorised;
additional source-of-funds checks are completed when required.

We may restrict an account while a verification review remains incomplete.

Security, Fraud Prevention and Service Integrity

We use account, device and transaction data to identify:

unauthorised logins;
stolen or manipulated payment details;
account sharing;
duplicate or linked accounts;
bonus abuse;
collusion or market manipulation;
technical interference;
activity that conflicts with our terms.

A security review can result in an additional verification request, delayed transaction, temporary restriction or account closure.

Responsible Gaming

We may review account activity for indicators that a user could be losing control over gambling.

The information considered may include deposits, losses, session duration, changes in activity, cancelled withdrawals, repeated payment attempts, requests to increase limits and communications with support.

Depending on the circumstances, we may send information about account controls, contact the user, limit access to a product, restrict transactions or close the account.

The separate Responsible Gaming page explains the controls and support routes available to users.

Service Analysis and Development

We may analyse technical and account activity to:

diagnose errors;
improve page and app performance;
understand how features are used;
prevent system misuse;
measure the result of a service change;
plan product capacity.

Where possible, reports are aggregated or de-identified so they do not directly identify an individual user.

Marketing and Promotions

We may use account and contact information to send information about Lotus365 products or promotions where the communication is permitted.

Marketing preferences can be changed through the account or by using the unsubscribe method in the message.

Opting out of marketing does not prevent us from sending messages required for:

account security;
verification;
transaction status;
changes to terms or policies;
responsible gaming restrictions;
customer support.

We do not use a self-excluded account to send gambling promotions.

Basis for Processing

The basis on which we process information depends on the purpose and the rules that apply to the user.

Our processing may be necessary to:

provide the account and services requested by the user;
comply with legal or regulatory duties;
protect our legitimate interests in security, fraud prevention, service operation and dispute resolution;
protect the interests of users or other persons;
act on consent where consent is the appropriate basis.

Where processing is based on consent, consent can be withdrawn. Withdrawal does not affect processing completed before the request.

Some records may continue to be processed after consent is withdrawn when another valid reason applies.

Automated Checks and Profiling

We may use automated tools to identify activity requiring further review.

These tools can analyse account, device, transaction and usage information to detect:

fraud or account takeover;
duplicate or connected accounts;
payment risk;
bonus misuse;
unusual betting or gaming patterns;
responsible gaming indicators;
technical abuse.

An automated flag does not always determine the final result. Where appropriate, the account and available evidence are reviewed before a significant restriction is confirmed.

You may contact support to request information about an account decision or ask for a review where that option is available.

When We Share Information

We may share personal information with organisations that help us provide or protect the service.

These can include:

payment processors, banks and wallet providers;
identity, age and address verification services;
fraud-prevention and security providers;
sports data and betting technology suppliers;
exchange, casino and live casino providers;
hosting, cloud storage and communication suppliers;
analytics and technical support providers;
professional advisers and auditors;
companies supporting customer service;
authorities or dispute bodies where disclosure is required or permitted.

A service provider receives only the information needed for its assigned work and is required to handle it under the relevant agreement.

We may also disclose information where necessary to investigate suspected fraud, protect an account, enforce our terms, respond to a valid legal request or protect another person.

If the Lotus365 service or part of it is reorganised or transferred, relevant information may be provided to the parties involved, subject to appropriate confidentiality and security measures.

International Processing

Our service providers and technical systems may be located in different countries.

Where personal information is transferred or accessed internationally, we use contractual, technical or organisational safeguards appropriate to the information and the applicable requirements.

The privacy and data protection rules in a receiving country may differ from those in the user’s location.

How Long We Retain Information

We do not retain every category of information for the same period.

Retention depends on:

whether the account remains active;
the purpose for which the information was collected;
transaction, accounting or verification requirements;
fraud and security risks;
the limitation period for a complaint or legal claim;
a continuing investigation;
the need to enforce an exclusion or account restriction;
instructions from an authorised body.

Account and transaction records may remain after an account is closed. Self-exclusion identifiers may also be retained to help prevent the excluded person from opening or using another account.

When information is no longer required, we delete it, anonymise it or restrict its use, subject to technical and legal requirements.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember settings, protect account sessions and understand service performance.

Cookie categories may include:

strictly necessary cookies;
security and authentication cookies;
preference cookies;
analytics cookies;
advertising or campaign measurement cookies.

Cookies required for login, security or core website functions cannot always be disabled through our controls.

Where consent is required for optional cookies, you can accept, reject or change the relevant setting through the cookie controls. Browser settings can also be used to remove stored cookies, although this may sign you out or reset preferences.

Data Security

We use technical and organisational controls intended to protect personal information against loss, unauthorised access, alteration and disclosure.

Measures may include:

restricted staff access;
account authentication;
encrypted transmission where appropriate;
security monitoring and event logs;
access reviews;
provider assessments;
backup and recovery controls;
incident response procedures.

No online system can eliminate every risk. Users should protect their Lotus365 login details, keep devices secured and report unfamiliar account activity promptly.

We will not ask you to disclose your password, OTP, card PIN or banking password through an unsolicited message.

Your Privacy Choices and Rights

Depending on the rules that apply to you, you may be able to request:

confirmation that we process your information;
access to a copy of your information;
correction of inaccurate or incomplete information;
deletion of information that is no longer required;
restriction of certain processing;
objection to certain uses;
withdrawal of consent;
transfer of information in a usable format;
review of an automated decision;
information about recipients or international processing.

Some requests are subject to identity verification, legal exceptions and record-retention requirements.

For example, closing an account does not require us to erase records needed for transaction review, fraud prevention, dispute handling or self-exclusion enforcement.

We may ask for information needed to identify the account before responding. We do not require an OTP or banking password to process a privacy request.

Marketing Choices

You can stop optional marketing by:

changing the preference in the account;
using an unsubscribe option in a message;
contacting support.

A request can take time to apply across communications already scheduled for delivery.

Security, transaction and policy messages are not marketing and may still be sent while the account exists or relevant records remain.

Information About Other People

Do not submit another person’s identification, payment information or contact details unless you are authorised to do so and the information is required for a legitimate account purpose.

If you contact us about another person’s gambling or account safety, we may record and review the concern. We will not normally confirm whether that person has an account or disclose the action taken.

Age Restrictions

Lotus365 is not intended for anyone under 18 or below the higher legal gambling age that applies in their location.

We may collect limited information about a person who attempts to register while underage when it is needed to prevent account use, investigate the registration or meet record-keeping requirements.

An underage account can be restricted or closed.

Account Closure and Self-Exclusion

Closing or self-excluding an account does not immediately erase its records.

We may retain information needed to:

complete withdrawals and settle pending activity;
investigate account or payment issues;
answer complaints;
enforce the exclusion;
prevent duplicate registration;
meet record-retention requirements.

Self-exclusion records are not used to send gambling promotions.

Changes to This Privacy Policy

We may revise this policy when our services, data practices or requirements change.

The updated version will show a new revision date. When a change materially affects how we use personal information, we may also provide an account notice or another appropriate message.

Continued use after a policy update does not replace consent where consent is specifically required.