Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains what personal information Lotus Ludo ("we", "us", the "Platform") collects when you use lotusludo.com and our app, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. Please read it together with our Terms & Conditions.

Lotus Ludo is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, contact privacy@lotusludo.com and we will delete it.

1. Information You Give Us

Account information: your name or display name, username, email address and/or mobile number, your password (stored only as a secure one-way hash, never in readable form), age confirmation, and your country.
Profile information: profile picture, cover image, bio, and anything else you add to your profile. Anything on your profile is visible to other users.
Content you create: chat messages, direct messages, reels and videos, images, comments, room names and descriptions, and audio you transmit in a live voice room.
Identity documents: where you take part in verification (KYC), Social Gifts and Withdrawals, or agency programmes, the documents and details you submit for that purpose.
Support correspondence: the messages, screenshots and contact details you send us through the contact form, support tickets or email.

2. Information We Collect Automatically

IP address. We collect and store the IP address your device connects from. We use it for security (detecting unauthorised access, abuse and multiple-account fraud), for approximate country-level location, and to meet legal obligations. An IP address is treated as personal information under laws such as the GDPR.
Device and browser information: device type, model, operating system and version, browser type and version, screen size, language, time zone, and a device identifier we generate to recognise the same device across sessions.
Usage information: pages and screens you open, rooms you join, games you play and their results, features you use, session start and end times, and referring pages.
Log data: dates and times of requests, error reports, and actions taken on your account by you or by our moderators.
Approximate location, derived from your IP address at country or region level. We do not collect precise GPS location.

3. Cookies and Similar Technologies

We and our partners use cookies and similar technologies (local storage, session storage and similar browser storage) to run the Platform and to understand how it is used.

Strictly necessary cookies keep you signed in, keep your session secure, remember your consent choices and protect against fraud. The Platform cannot work without them, so they cannot be switched off.
Preference storage remembers settings such as your chosen theme, audio devices and interface options.
Analytics cookies help us understand which pages are visited and where problems occur.
Advertising cookies are set by advertising partners to select and measure advertisements. See section 4.

Your choices: most browsers let you see the cookies a site has set, delete them, and block some or all of them, usually under Settings then Privacy. Blocking strictly necessary cookies will stop you being able to sign in. You can opt out of personalised advertising as described in section 4.

4. Advertising, Google AdSense and Third-Party Cookies

We may display advertisements on parts of the Platform, including advertisements served by Google AdSense. You should know the following:

Third-party vendors, including Google, use cookies to serve advertisements based on your prior visits to this website and other websites.
Google's use of advertising cookies enables it and its partners to serve advertisements to you based on your visit to our site and/or other sites on the internet.
You may opt out of personalised advertising by visiting Google Ads Settings at https://www.google.com/settings/ads
You can opt out of a third-party vendor's use of cookies for personalised advertising at https://www.aboutads.info/choices/ or https://optout.networkadvertising.org/
Third-party advertisers may also place cookies or web beacons themselves. We do not control these and this Privacy Policy does not cover them. Google's is at https://policies.google.com/technologies/partner-sites

5. Analytics

We may use Google Analytics, a web analytics service provided by Google LLC, to understand how the Platform is used. Google Analytics uses cookies and similar identifiers to collect information such as the pages you visit, how long you spend on them, your approximate location, and your device and browser type. This information is transmitted to and stored by Google.

We use it in aggregate to improve the Platform, not to identify you personally. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout . Google's privacy policy is at https://policies.google.com/privacy

6. Payment Information

Payments for virtual coins and other purchases are processed by third-party payment providers. Virtual coins have no cash value and cannot be exchanged for real money. Depending on your country and the method you choose, this may include Stripe, a UPI provider, or another regulated processor shown at checkout.
We do not receive or store your full card number, CVV or banking credentials. Those go directly to the payment provider, who is responsible for handling them securely.
We do store a record of the transaction: the amount, currency, date and time, what was purchased, the transaction reference, whether it succeeded or failed, and the masked identifier the provider returns to us. We need this to credit your account, answer payment questions, process refunds, prevent fraud and meet our tax and accounting obligations.
Where you request a payout under Social Gifts and Withdrawals, or take part in a payout programme, we collect the payment details necessary to pay you, and any identity information required by law.
Payment providers process your information under their own privacy policies. Please read the policy of the provider shown at checkout.

7. How We Use Your Information

To create and operate your account and provide the Platform's features.
To run games, voice rooms, tournaments, gifting, levels and rewards.
To process purchases, credit coins, handle refunds and pay out Social Gifts and Withdrawals.
To keep the Platform safe: detecting fraud, cheating, multiple accounts, abuse and unauthorised access.
To moderate content and enforce our Community Guidelines and Terms.
To answer your support enquiries and complaints.
To send service messages about your account, security or important changes.
To understand how the Platform is used and improve it.
To display and measure advertising.
To comply with legal obligations and respond to lawful requests.

Where the law requires a legal basis (for example under the GDPR), we rely on: performance of our contract with you; our legitimate interests in security, fraud prevention and improving the Platform; your consent for non-essential cookies and marketing, which you can withdraw at any time; and compliance with a legal obligation.

8. Who We Share Information With

We do not sell your personal information. We share it only as described here:

Other users: your display name, profile picture, level, badges, and anything you post publicly or say in a room is visible to others.
Payment providers, to take payment and process refunds and Social Gifts and Withdrawals.
Hosting and infrastructure providers, including our real-time voice infrastructure.
Analytics providers, such as Google Analytics.
Advertising partners, such as Google AdSense.
Communication providers, for sending one-time codes and service emails.
Professional advisers such as lawyers, accountants and auditors, where necessary.
Law enforcement and regulators, where we are legally required to, or where it is necessary to protect someone's safety, our rights, or to investigate fraud or serious abuse.
A successor, if our business is reorganised, merged or acquired. The new owner remains bound by this policy.

Some of these providers are located outside your country. Where information is transferred internationally, we take steps to ensure it remains protected to the standard required by applicable law.

9. How Long We Keep Your Information

We keep personal information only as long as we need it for the purposes above, or as long as the law requires. In practice:

Account information: for as long as your account is open, and up to 90 days after you close it, so it can be restored if you change your mind.
Content you posted: deleted with your account, except where it forms part of another user's conversation or an ongoing moderation or legal matter.
Transaction and payment records: up to 7 years after the transaction, because tax and accounting law requires it.
Server and security logs, including IP addresses: normally 12 months, longer where needed for an ongoing investigation.
Moderation records, reports and enforcement decisions: up to 3 years, so repeat behaviour can be recognised and bans enforced.
Identity and KYC documents: for the period required by applicable financial regulations, then deleted.
Support correspondence: up to 3 years.
Analytics data: retained in aggregated or de-identified form from which you cannot be identified.

Where we must retain something after you have asked for deletion, such as a financial record or a record of a ban to prevent evasion, we keep only what is necessary and stop using it for any other purpose.

10. Deleting Your Account and Your Data

You can ask us to delete your account and personal information at any time. There are two ways:

In the app: open Settings and choose the account deletion option, if available on your account type.
By contacting us: email privacy@lotusludo.com from the address registered to your account, or use our Contact page and choose "Privacy / data request".

What happens next:

We verify that the request genuinely comes from the account holder. This protects you from someone else deleting your account.
We confirm the request within 24 hours and complete it within 30 days.
Your profile, content and personal details are deleted or irreversibly anonymised.
Records we must keep by law, principally financial records, are retained for the periods in section 9 and used for nothing else.
Any unused coins or balance are forfeited and cannot be restored. Please use or withdraw anything you are entitled to before requesting deletion.

11. Your Rights and How to Exercise Them

Depending on where you live, you may have the right to:

Access: request a copy of the personal information we hold about you.
Rectification: have inaccurate information corrected. Most profile details you can edit yourself.
Erasure: have your information deleted, subject to section 10.
Restriction: ask us to limit how we use your information while a query is resolved.
Portability: receive your information in a machine-readable format.
Object: object to processing based on our legitimate interests, and to direct marketing at any time.
Withdraw consent: where we rely on consent, withdraw it at any time. This does not affect what we did before you withdrew it.
Complain: lodge a complaint with your local data protection authority.

To make a request, email privacy@lotusludo.com or use the Contact page and select "Privacy / data request". Tell us which right you are exercising and include your username or User ID. We will ask you to verify your identity, acknowledge within 24 hours, and respond within 30 days. Exercising your rights is free; we may charge a reasonable fee only for requests that are clearly excessive or repetitive.

12. Security

Traffic between your device and our servers is encrypted in transit using HTTPS/TLS.
Passwords are stored as one-way hashes and are never readable by us or by anyone else.
Access to personal information is limited to staff who need it, and administrator actions are logged.
We monitor for unauthorised access, unusual sign-ins and multiple-account abuse.

No system is perfectly secure. Please help by using a password you do not use anywhere else, never sharing your login, and telling us immediately at support@lotusludo.com if you think your account has been accessed by someone else. If a breach occurs that is likely to put your rights at risk, we will notify you and the relevant authority as the law requires.

13. Live Voice Rooms

Audio in a live voice room is transmitted in real time so other people in that room can hear you. Please treat anything you say in a room as public to that room. Where a room is recorded, this is indicated on screen before you speak. Recordings made for moderation purposes are kept only as long as needed to deal with the matter.

14. Links to Other Sites

The Platform may link to third-party websites or show third-party advertisements. We are not responsible for their content or their privacy practices. Please read the privacy policy of any site you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date shows when it last changed. If we make a significant change we will tell you through the Platform or by email before it takes effect. Continuing to use the Platform after a change means you accept the updated policy.

16. How to Contact Us

Privacy and data requests: privacy@lotusludo.com
General support: support@lotusludo.com
Complaints and grievances: grievance@lotusludo.com
Contact form: https://lotusludo.com/legal/contact