Privacy Policy

This Privacy Policy describes how Toshikazu Horioka, operating as "Lucklot" ("we", "us", or "our"), collects, uses, and protects personal information in connection with the Lucklot instant-win campaign service (the "Service").

1. Providing, operating, and maintaining the Service
2. Running campaigns and issuing/managing coupons
3. Sending win notifications and promotional messages via SMS or email (only with your explicit opt-in consent)
4. User authentication and account management
5. Billing and payment processing
6. Service improvement and development
7. Aggregated analytics (in a non-personally-identifiable form)
8. Fraud detection and prevention
9. Customer support
10. Legal compliance

Store operators use Lucklot to collect participant information through their campaigns. Data responsibilities are shared as follows:

• Store Operators (Data Controllers): responsible for informing participants about how their data is used and for complying with applicable data protection laws
• Lucklot (Data Processor): processes participant data on behalf of store operators and implements appropriate security measures

We do not sell your personal information. We share data only in the following circumstances:

1. When required by law or legal process
2. To protect the safety, rights, or property of any person
3. With your consent

We implement the following measures to protect your personal information:

• Encryption in transit (TLS/SSL)
• Encryption at rest (database-level encryption)
• Strict access controls with tenant-level data isolation
• Monitoring for unauthorized access

We use cookies strictly for essential service functions:

• Authentication cookies: maintaining login sessions
• CSRF protection cookies: preventing unauthorized requests

We do not use advertising or tracking cookies. You may configure your browser to refuse cookies, but some Service features may not function properly.

Store operators may send promotional messages via SMS or email to participants who have explicitly opted in by checking the marketing consent checkbox during campaign participation. The checkbox is unchecked by default.

You can opt out at any time by:

• Replying STOP to any promotional SMS message
• Updating your channel preferences on your My Page (linked in each message)

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate personal data
• Deletion: request deletion of your personal data
• Restriction: request that we stop processing your personal data

To exercise any of these rights, please email us at privacy@luck-lot.com. We will verify your identity and respond within 30 days.

We retain personal information only for as long as necessary to fulfill the purposes described in this policy. When data is no longer needed, we delete or anonymize it promptly.

Data required to be retained by law (such as billing records) will be kept for the legally mandated period.

The business-facing features of the Service (account registration and campaign management) are intended for users aged 18 and older. Campaign participation is open to all ages; however, participants under 16 should participate with parental or guardian consent. Store operators are responsible for providing appropriate guidance when their campaigns are likely to involve minors.

Our servers and service providers are located in Japan and the United States. By using the Service, you acknowledge that your data may be transferred to and processed in these countries. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. The updated policy takes effect when posted on this page.

For questions or concerns about this Privacy Policy or our data practices, please contact:

This Privacy Policy is governed by the laws of Japan. The Japanese-language version of this policy is the authoritative version; this English translation is provided for convenience.