Privacy Policy

1. Introduction

LottoLogic ("we", "us", or "our") operates the website at www.lottologic.co.za (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using LottoLogic, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide Directly

• First name and surname (during registration)
• Email address (during registration or sign-in)
• Password (stored as a secure hash — we never store plain-text passwords)
• Payment information (processed by Payfast — we do not store card details)

2.2 Information Collected Automatically

• IP address and approximate location (country/region)
• Browser type and version
• Pages visited and features used within LottoLogic
• Date and time of access
• Referring URLs

2.3 OAuth Sign-In (Google)

If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password. Only the information necessary to create and manage your account is stored.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your LottoLogic account
• Provide and personalise the Service
• Process Premium subscription payments via Payfast
• Send transactional emails (account confirmation, password reset)
• Respond to support requests and inquiries
• Monitor and improve the performance and security of our platform
• Comply with legal obligations

We do not use your data for unsolicited marketing emails. We do not sell your personal information to any third party.

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Supabase — our database and authentication provider. Your account data is stored securely on Supabase infrastructure.
• Payfast — our payment processor for Premium subscriptions. Payfast processes payments independently and is subject to its own privacy policy.
• Google — if you use Google OAuth sign-in, Google processes the authentication. Subject to Google's Privacy Policy.
• Legal requirements — if required by law, court order, or governmental authority in South Africa.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase, which operates data centres with industry-standard security controls. We implement the following measures to protect your information:

• Passwords are hashed and never stored in plain text
• All data transmissions are encrypted via HTTPS/TLS
• Row-Level Security (RLS) policies restrict database access per user
• OAuth tokens are managed by the respective identity providers

Despite our best efforts, no method of electronic storage or internet transmission is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

LottoLogic uses session cookies to maintain your authenticated state. These are strictly necessary for the Service to function. We do not use advertising cookies or third-party tracking pixels. You may disable cookies in your browser settings, but this will prevent you from staying signed in.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. payment records for tax purposes, which may be retained for up to 5 years).

8. Your Rights (POPIA)

In accordance with the Protection of Personal Information Act (POPIA) of South Africa, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at support@lottologic.co.za.

9. Children's Privacy

LottoLogic is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: