Privacy Policy

Effective: 2026-10-01

1. Controller

White Panther Enterprise LLC

Boca Raton, FL 33432
USA
support@mustlotto.com

2. Data we process

• Account: email address, optional name, password (stored only as a secure hash), language, account status, and the dates of registration, email confirmation and last login.
• Your wheels: the numbers, saved wheels and result checks you create.
• Security: login attempts (email, IP address, time) to protect accounts against password guessing.
• Server logs: IP address, time, requested page and browser type, recorded by our web server. IP addresses in rotated logs are anonymised.
• Emails: we send necessary emails (confirmation, password reset) and, if you subscribe, account and billing messages.
• Payments: when you buy Premium, the payment is handled by our payment provider (Stripe). We receive a customer reference, your plan and the payment status – never your full card number.

3. Purposes and legal bases

• Providing your account, wheels and subscription – performance of a contract (Art. 6(1)(b) GDPR).
• Security, abuse prevention and server logs – legitimate interests (Art. 6(1)(f) GDPR).
• Invoices and tax records – legal obligation (Art. 6(1)(c) GDPR).

We do not sell your data and do not use advertising trackers or analytics cookies.

4. Cookies

We only use strictly necessary session cookies that keep you logged in and remember your language and currency. Because they are required for the site to work, no consent is needed.

5. Recipients

• Hosting and email delivery: Host Europe (GoDaddy group), servers in the EU.
• Payments: Stripe.
• Bot protection: Cloudflare Turnstile on the registration and password-reset forms checks that you are human (Cloudflare, Inc., USA).
• Authorities, where required by law.

6. Transfers outside the EU

Our website runs on servers in the EU. The operator is based in the USA, and our payment provider may process data in the USA. Such transfers rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or on the EU Standard Contractual Clauses.

7. How long we keep data

• Account data and saved wheels: until you delete your account.
• Accounts whose email address was never confirmed: deleted after 30 days.
• Login attempts: deleted after 30 days.
• Server logs: kept for a limited period, then deleted.
• Billing records: as required by tax law (up to 10 years).

8. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interests. To use these rights or to have your account deleted, write to support@mustlotto.com. You can also complain to a data protection supervisory authority, in particular in your country of residence.

9. Security

We use encrypted connections (HTTPS), store passwords only as hashes and limit login attempts.

10. Minimum age

MustLotto is intended only for people aged 18 or over.

11. Changes

We update this policy when our service or the law changes. The version published here applies.