Privacy Notice

At a glance

• Luckbox collects only the information needed to run and protect the service.
• Luckbox does not sell your personal data.
• Bank and delivery details are encrypted.
• You can ask about, correct or delete eligible personal data through Support.

1. Who is responsible

P-COM TECHNOLOGY PRIVATE LIMITED is responsible for personal data used by Luckbox. Its registered office and company details are shown above. To make a privacy request, use Support in your signed-in account or a verified channel on the Complaints page.

2. Information we collect

• Account: your public Account ID and either your verified mobile number or your Google account identifier and verified email address.
• Security: OTP requests, Google sign-in confirmation, sign-in details, IP address, time and signals used to stop fraud or repeated requests. Luckbox does not store your Google password or Google access token.
• Promotions: a random browser code, campaign, page and click time when you open a Luckbox promotion link. We do not save your full IP address or browser details with that promotion click.
• Payments and draws: payment references, wallet records, orders, entry numbers, prizes, withdrawals and refunds. Our payment provider receives Luckbox-generated contact details, not your real mobile number or email address.
• Bank transfers: bank name, IFSC code, account number, account holder name and the IP address used to submit the secure form.
• Eligibility records: any age or location confirmation already linked to your account. Normal draw entry does not require third-party KYC.
• Prize delivery: your final product-or-cash choice and, if you choose the product, the name, address, phone and tracking details needed to deliver it.

3. Why we use it

We use this information to sign you in, protect your account, connect a new account to a promotion opened in the previous 30 days, confirm payments, update wallets, run draws, publish results, deliver prizes, answer complaints, prevent misuse and meet legal or tax duties. We will not use it for unrelated marketing without giving you the required notice and choice.

4. Public player information

Draw pages may show a Luckbox-generated cartoon avatar, public Account ID, masked mobile number when one is linked, broad country, number of entries, prizes entered and prizes won. Your email address, full mobile number, address, wallet and payment details are never shown on a public player page.

We share other information only when needed by approved identity, SMS, payment, hosting, security, professional, purchasing and delivery partners. Google processes Google sign-in under its own privacy terms. Luckbox does not sell personal data.

5. Processing locations

Our hosting or service partners may process information outside your state or India only where the law permits it and suitable protection is in place. We will update this notice if an important processing location or partner category changes.

6. How long we keep it

The promotion code stays in your browser for up to 30 days and is cleared after successful registration. We keep promotion records only as long as needed for campaign reports and checks. We keep account, payment, wallet, draw, refund and support records as long as needed to provide the service, keep it safe, answer complaints and meet tax or legal duties. Delivery details are encrypted and deleted or permanently anonymised when no longer needed.

7. Security

Luckbox uses secure connections, protected OTP records, sessions that can be cancelled, limited staff access, locked financial and draw records, encrypted bank and delivery details, backups and access logs. Only authorised staff can open full bank details, and every access is recorded. No system is risk-free. Luckbox will provide any incident notice required by law.

8. Your choices and rights

We explain what information a form asks for and why it is needed. Subject to law, you may ask for a copy or correction of your data, deletion of eligible data, account closure or help with a privacy complaint. You may withdraw consent where we rely on consent, but this does not affect earlier lawful use or records we must keep. Submit your request through Support in My Account or a verified contact channel.

9. Children

The service is restricted to adults aged 18 or older and is not directed to children. Suspected underage accounts may be blocked while the account, transaction and refund position is reviewed.

10. Website analytics and advertising

We use Google Analytics, Meta Pixel and Meta Conversions API to measure page visits and understand how people reach Luckbox through advertising. These services may receive the page URL, browser and device information, cookie identifiers, and events for activity views, new registrations, recharge orders, successful recharges and confirmed draw entries. Recharge and entry events include the transaction amount in INR and an event identifier to reduce duplicate counting. We do not add your mobile number, email, bank details or wallet balance to Meta events. Automatic matching and automatic event setup are not enabled by our pixel code.

When existing Meta tracking cookies are available, our server can also report confirmed events using those cookie identifiers and your browser type. This helps record a successful recharge even if you do not return to Luckbox. We keep this server matching context and pending browser event identifiers for no more than seven days. Server reporting skips requests carrying a Global Privacy Control or Do Not Track signal. You can manage cookies and tracking through your browser settings. These providers process information under their own privacy terms.