Privacy Policy

LUCKYSTAR — PRIVACY POLICY

Last updated: 01 09 2026

This Privacy Policy explains how LuckyStar ("LuckyStar," "we," "us," or "our") collects, uses, stores, and protects your personal information when you use this website to browse draws, purchase tickets, or check your ticket status.

1. INFORMATION WE COLLECT
When you purchase a ticket or use this website, we collect:
- Your full name (and the name(s) you provide for each ticket, if you buy more than one)
- Your mobile number
- A password you create, used to look up and download your tickets later
- Payment details you submit, including your chosen payment method, transaction/reference ID, and a screenshot of your payment receipt
- Ticket and purchase records (draw entered, quantity, price paid, status, date/time)
- Basic technical information such as your language preference (English/Urdu), stored temporarily in your browser session

We do not collect or store your actual bank/wallet account credentials — only the payment proof (screenshot and transaction ID) you choose to submit for verification.

2. HOW WE USE YOUR INFORMATION
We use the information above to:
- Create and manage your buyer account and tickets
- Verify your payment and approve or reject your ticket accordingly
- Let you look up and download your tickets using your mobile number and password
- Contact you about your ticket status, including via WhatsApp, using the mobile number you provided
- Publish winner announcements (name, prize, and winning ticket serial number) on the public Winners page if you win a draw
- Maintain the security and proper functioning of the website
- Comply with legal obligations, if any, related to operating this draw

3. HOW YOUR INFORMATION IS STORED
- Your password is never stored in plain text — it is hashed using industry-standard encryption (bcrypt) before being saved.
- Payment screenshots and draw/logo images are stored securely on our server and are only accessible through the website; the upload folder is configured to block any file from being run as a script.
- Payment screenshots are only viewed by LuckyStar's admin team for the purpose of verifying your payment.
- We do not sell, rent, or trade your personal information to third parties.

4. WHAT SHOWS UP PUBLICLY
If you win a draw, your name, the prize you won, and your ticket's serial number will be displayed on the public Winners page. Your mobile number, password, and payment details are never made public.

5. COOKIES & SESSION DATA
This website uses browser session storage (not third-party tracking cookies) to:
- Remember your language choice (English/Urdu)
- Keep track of your progress while buying a ticket (e.g., which step of the purchase you're on)
- Keep the admin panel signed in after login
This information is temporary and is cleared when your session ends or you log out.

6. THIRD-PARTY SERVICES
This website loads fonts and styling from Google Fonts and Tailwind CSS's content delivery network to display properly. These services may receive your browser's IP address and basic request information as a normal part of how web fonts/styles are delivered, in accordance with their own privacy policies. We do not use these services to track you across other websites, and we do not run advertising or analytics scripts on this website.

7. WHATSAPP COMMUNICATION
If LuckyStar contacts you about your ticket via WhatsApp, this is done using the mobile number you provided at checkout, through WhatsApp's standard "click to chat" link. LuckyStar does not have access to your other WhatsApp messages or contacts.

8. DATA RETENTION
We retain your account, ticket, and payment verification records for as long as necessary to operate the draw, resolve disputes, and comply with any applicable legal or accounting requirements. If you would like your data removed, see Section 10 below.

9. CHILDREN'S PRIVACY
This website is not intended for individuals under 18 years of age, and we do not knowingly collect personal information from anyone under 18.

10. YOUR RIGHTS & CHOICES
- You can view your own tickets at any time via the "My Ticket" page using your mobile number and password.
- You may request a copy of the personal information we hold about you, or request that it be deleted, by contacting us using the details in Section 12 — noting that we may need to retain certain records (e.g., of a confirmed prize win) for legitimate record-keeping purposes even after a deletion request.
- You are responsible for keeping your ticket-lookup password confidential; we cannot verify your identity through any means other than your mobile number and password combination.

11. DATA SECURITY
We take reasonable technical measures to protect your information, including password hashing, restricted admin access, and blocking direct execution of uploaded files. However, no method of online storage or transmission is 100% secure, and we cannot guarantee absolute security.

12. CONTACT US
If you have any questions about this Privacy Policy or how your information is handled, please contact us at:
- WhatsApp/Phone: 03168168123
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in how the website operates. Updates will be posted on this page with a revised "Last updated" date. Continued use of the website after changes are posted constitutes acceptance of the revised policy.