PRIVACY POLICY

1.1 Data Minimization & Security

Only strictly necessary data is collected to ensure platform integrity and account identification. We do not sell or trade your personal data to third parties.

• Identification: Email addresses are the primary method for account identification and communication.
• Security Logs: Technical data (including IP addresses, device identifiers, and browser patterns) is collected and processed through Cloudflare. This information is used exclusively to protect the platform against DDoS attacks, automated bots, and fraudulent activities.

1.2 Account Access & OTP Security

To ensure security and privacy, OnLive Draws uses a passwordless authentication system with the following protections:

• Email Masking: All email addresses are securely masked (e.g., u***@mail.com) server-side throughout the entire platform. This information is only visible to the respective authenticated user.
• Access via OTP: Every time a user logs in, a temporary One-Time Password (OTP) is sent to the registered email. This verification process ensures that the user currently has access to the account and minimizes the risk of unauthorized breaches.
• Users are solely responsible for maintaining access to their registered email accounts. OnLive Draws cannot recover accounts if access to the original email is lost.

1.3 Third-Party Services & Cookies

The platform integrates specific third-party providers to enhance security, analyze performance, and facilitate participation:

• Cloudflare: Used for advanced security (WAF), load balancing, and performance optimization. Cloudflare may place cookies or use technical tracking to distinguish legitimate users from automated threats.
• Google Analytics: Utilized to gather anonymized data regarding platform usage trends and site traffic. This information is used exclusively to improve user experience and platform functionality.
• CPX-RESEARCH: As the external survey provider, CPX-RESEARCH collects data necessary for participant qualification and completion verification. Participation in surveys is voluntary and subject to their own specific privacy policy, which we encourage you to review.
• Prize Fulfillment: Digital gift card providers handle distribution data only for delivery purposes. OnLive Draws does not store physical address data.

1.4 Data Retention & Erasure

We maintain minimal data solely for account identification and security. To permanently remove your account, contact our support team. Deletion is irreversible and results in the loss of all tickets and progress. This process applies only to our internal databases; drawing history is preserved for integrity, and third-party data (e.g., CPX-RESEARCH) remains subject to their independent policies.

2.1 Modifications to Privacy Policy

OnLive Draws reserves the right to update or modify this Privacy Policy at any time. Significant changes will be communicated via the registered email or a prominent notice on the platform. Continued use of the platform after such modifications constitutes full acceptance of the revised policy.