What we collect, why we collect it, who we share it with — including our market research survey partners — and the control you keep over your data.
No Data Sales
We never sell your personal information to third parties
Encrypted Storage
Industry-standard encryption for data in transit and at rest
Your Control
Request access, correction, or deletion of your data anytime
Data Minimization
We only collect what's necessary for platform operation
Lootycash ('we,' 'our,' or 'us') respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, mobile application, or services (collectively, the 'Platform'). By using the Lootycash Platform, you agree to the collection and use of information in accordance with this Privacy Policy.
We may collect personal information that you provide directly to us, including but not limited to: (a) Name or username, (b) Email address, (c) Date of birth (for age verification), (d) Payment or withdrawal details (cryptocurrency wallet addresses, payment method information as required for rewards processing).
To maintain platform security and prevent fraud, we automatically collect certain technical information when you access our Platform: (a) Device identifiers and fingerprints (unique device ID, hardware specifications), (b) IP address and geolocation data, (c) Browser type, version, and operating system, (d) App usage and activity logs, (e) Network characteristics and connection data, (f) Screen resolution and device settings.
We collect information about your activity on the Platform to verify offer completion and reward eligibility: (a) Completed offers and tasks, (b) Reward earning and redemption history, (c) Transaction records and withdrawal requests, (d) Fraud detection signals and behavioral patterns, (e) Engagement metrics and usage statistics.
We use cookies, web beacons, and similar tracking technologies to enhance user experience and platform functionality. You may control cookie preferences through your browser settings, though disabling certain cookies may limit platform functionality.
We use collected information to: (a) Operate, maintain, and improve the Platform, (b) Create and manage user accounts, (c) Verify offer completion and reward eligibility, (d) Process withdrawals and distribute rewards, (e) Provide customer support and respond to inquiries, (f) Send important account notifications and updates.
We use your information to: (a) Prevent fraud, abuse, and multiple accounts, (b) Detect and prevent unauthorized access, (c) Monitor for suspicious activity and policy violations, (d) Protect the integrity of the Platform and our users, (e) Enforce our Terms & Conditions.
We may use your information to: (a) Comply with legal and regulatory obligations, (b) Respond to legal requests and court orders, (c) Protect our legal rights and interests, (d) Prevent illegal activities and enforce our policies.
We may use aggregated, anonymized data to: (a) Analyze platform usage and performance, (b) Improve user experience and features, (c) Develop new services and offerings, (d) Conduct research and analytics.
To protect the Platform and all users from fraud and abuse, Lootycash employs sophisticated automated and manual systems to detect suspicious activity. These systems may analyze: (a) Device fingerprinting and hardware characteristics, (b) IP address monitoring and geolocation verification, (c) Behavioral analysis and usage patterns, (d) Account relationships and connection analysis, (e) Transaction patterns and anomaly detection.
We use Cloudflare Turnstile to distinguish real people from automated traffic when accounts are created or signed in. Turnstile runs silently in the background and may process limited technical information about your browser and device to make that decision; it does not require you to solve puzzles and does not track you across other websites. Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/), which is incorporated into this Policy by reference.
All fraud prevention data is collected and used strictly for: (a) Security monitoring and threat assessment, (b) Compliance with partner requirements, (c) Fraud prevention and detection, (d) Protection of user accounts and platform integrity, (e) Enforcement of Terms & Conditions.
Security-related data may be retained longer than other information types to identify patterns, prevent repeat violations, and maintain the safety of the Platform for all users.
Lootycash does NOT sell, rent, or trade users' personal information to third parties for marketing purposes. Your privacy is important to us, and we will never monetize your personal data.
We may share limited information with trusted third-party service providers who assist in operating our Platform: (a) Offerwall and advertising partners (for offer verification and crediting only), (b) Payment processors and cryptocurrency services (for reward fulfillment and withdrawal processing), (c) Cloud hosting and infrastructure providers, (d) Analytics and performance monitoring services, (e) Customer support and communication tools.
All third-party service providers are contractually required to: (a) Maintain appropriate data protection standards, (b) Use data only for specified purposes, (c) Implement reasonable security measures, (d) Comply with applicable privacy laws and regulations.
We may disclose your information when required by law or to: (a) Comply with legal processes, court orders, or government requests, (b) Enforce our Terms & Conditions and policies, (c) Protect the rights, property, or safety of Lootycash, our users, or others, (d) Prevent fraud, security threats, or illegal activities.
In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections.
User data is retained only as long as necessary to: (a) Provide services and maintain your account, (b) Process pending rewards and withdrawals, (c) Resolve disputes and provide customer support, (d) Comply with legal, regulatory, and tax obligations, (e) Enforce our Terms & Conditions and prevent fraud.
We may retain certain data after account termination or deletion for: (a) Fraud prevention and security monitoring (to prevent banned users from creating new accounts), (b) Legal compliance and record-keeping requirements, (c) Resolving disputes and enforcing agreements, (d) Backup and disaster recovery purposes.
Upon your request or after the retention period expires, we will securely delete or anonymize your personal information, except where retention is required by law.
We implement reasonable technical and organizational measures to protect user data against unauthorized access, loss, alteration, or misuse, including: (a) Encryption of data in transit and at rest, (b) Secure server infrastructure and access controls, (c) Regular security audits and vulnerability assessments, (d) Employee training on data protection and security, (e) Multi-factor authentication for sensitive operations.
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.
In the event of a data breach that may compromise your personal information, we will notify affected users in accordance with applicable laws and take appropriate remedial measures.
You have the right to: (a) Request access to the personal information we hold about you, (b) Request correction of inaccurate or incomplete data, (c) Update your account information at any time through your account settings.
You may request deletion of your account and personal information by contacting our support team. Please note that: (a) Deletion is subject to legal and regulatory retention requirements, (b) Some data may be retained for fraud prevention and security purposes, (c) Pending transactions must be completed before deletion, (d) Deletion is irreversible and will result in loss of all account data.
You may request a copy of your personal data in a structured, commonly used, and machine-readable format, subject to verification of your identity.
You may opt out of promotional emails by: (a) Clicking the unsubscribe link in emails, (b) Adjusting your notification preferences in account settings, (c) Contacting our support team. Note that you cannot opt out of essential service communications.
You may control cookie settings through your browser preferences, though this may limit platform functionality.
To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days. We may require identity verification before processing requests.
Lootycash does not knowingly collect personal information from individuals under the age of 18 (or the applicable age of majority in their jurisdiction). Our Platform is intended for users who meet our eligibility requirements as stated in our Terms & Conditions.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete such information as quickly as possible.
If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.
When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
This Privacy Policy is governed by and construed in accordance with the laws of Bangladesh, without regard to conflict of law principles.
We comply with applicable data protection and privacy regulations, including: (a) the EU General Data Protection Regulation (GDPR) and UK GDPR for users in the EU/EEA and United Kingdom (see Section 16), (b) the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) for California residents (see Section 17), (c) applicable data protection laws of Bangladesh, and (d) other data protection regulations applicable in the jurisdictions where our users reside.
Our Platform is operated from Bangladesh and our data is hosted on servers located in the European Union. If you access our Platform from other countries, you are responsible for compliance with local laws. By using the Platform, you consent to the transfer of your information to these locations, subject to the safeguards described in Section 9 and the rights described in Sections 16 and 17.
Our Platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of these external sites.
When you interact with third-party offers or services through our Platform, those third parties may collect information about you. Their data collection and use practices are governed by their own privacy policies, not this Privacy Policy.
We encourage you to review the privacy policies of any third-party services you interact with through our Platform.
Lootycash reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes to this Privacy Policy, we will: (a) Update the .Effective Date. at the top of this policy, (b) Notify users via email or Platform notification, (c) Post the updated policy on our website.
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must discontinue use of the Platform and may request account deletion.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected] | Website: https://lootycash.com | Support: Available through our help center
We will respond to privacy-related inquiries within 30 days of receiving your request. For urgent security matters, please mark your communication as .urgent..
LootyCash offers optional paid surveys operated by third-party market research networks, including TheoremReach (a riwi company). Taking part is voluntary and gated behind your explicit consent, collected at registration or before your first access to a survey wall.
When you access a survey wall we share a pseudonymous user identifier with the research partner so completions can be matched to your account and rewarded. During surveys, demographic and profiling answers you choose to provide (such as age range, household details, or product preferences) are collected directly by the research partner. Device and approximate location information may also be used by partners for survey matching and quality control.
Research partners process survey responses under their own privacy policies for market research purposes, typically in aggregated or de-identified form. We recommend reviewing the partner's policy — for TheoremReach see theoremreach.com — before participating. LootyCash receives only completion status and reward information, never your individual survey answers.
You can decline survey participation entirely by not consenting or simply not opening survey walls; all other Platform features remain available. Consent can be withdrawn by contacting support, which stops future survey routing (data already provided to a partner is governed by that partner's policy).
By using the Lootycash Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. You consent to the collection, use, and sharing of your information as described herein. If you do not agree with any part of this Privacy Policy, you must not use our Platform.
This section applies to users located in the European Union, the European Economic Area, and the United Kingdom, and supplements the rest of this Privacy Policy. For the purposes of the GDPR and UK GDPR, Lootycash is the data controller of the personal data described in Section 1.
We process your personal data on the following lawful bases: (a) Performance of a contract (Art. 6(1)(b)) — operating your account, tracking offer and survey completions, crediting rewards, and processing withdrawals; (b) Consent (Art. 6(1)(a)) — participation in market research surveys and the associated sharing of data with survey partners (Section 14), and optional marketing communications; you may withdraw consent at any time without affecting prior processing; (c) Legitimate interests (Art. 6(1)(f)) — fraud prevention and security monitoring (Section 3), protecting the integrity of our rewards system, and improving the Platform, balanced against your rights and freedoms; (d) Legal obligation (Art. 6(1)(c)) — compliance with accounting, tax, anti-fraud, and other legal requirements.
Under the GDPR you have the right to: (a) access your personal data, (b) rectify inaccurate data, (c) erasure ('right to be forgotten'), (d) restrict processing, (e) data portability, (f) object to processing based on legitimate interests, (g) withdraw consent at any time where processing is based on consent, and (h) not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Our fraud-prevention systems may flag accounts automatically, but decisions with significant effects (such as account closure or withholding of payment) are reviewed by a human.
To exercise any of these rights, contact us at [email protected] with the subject line 'GDPR Request'. We will verify your identity and respond within one month, extendable by two further months for complex requests (we will inform you of any extension). Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.
Your personal data is primarily hosted on servers located within the European Union. Some processing (such as by our offer, survey, and payment partners) may occur in countries outside the EU/EEA. Where personal data is transferred out of the EU/EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum, as applicable) with our service providers and partners.
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or the place of the alleged infringement. UK users may complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first, but you may contact your supervisory authority at any time.
This section applies to California residents and supplements the rest of this Privacy Policy, pursuant to the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). The categories of personal information we collect and our purposes for collection are described in Sections 1 and 2.
Lootycash does NOT sell your personal information and does NOT share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months. We disclose personal information only to service providers and partners for the business purposes described in Section 4 (such as delivering offers and surveys, processing reward payouts, and fraud prevention), under contracts that restrict their use of the data. We also do not use or disclose sensitive personal information for purposes requiring a 'Right to Limit' under the CPRA.
As a California resident, you have the right to: (a) Know/Access — request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and the categories of third parties to whom it was disclosed; (b) Correct — request correction of inaccurate personal information; (c) Delete — request deletion of your personal information, subject to legal exceptions (e.g., fraud prevention, legal compliance, completing pending transactions); (d) Opt out of sale or sharing — not applicable, as we do not sell or share personal information, but should our practices ever change we will update this policy and provide the required opt-out mechanism; (e) Non-discrimination — we will never deny you services, charge different prices, or provide a different quality of service because you exercised your privacy rights.
Submit requests to [email protected] with the subject line 'California Privacy Request'. We will verify your identity (typically by confirming control of the email address associated with your account) and respond within 45 days, extendable once by a further 45 days with notice. You may designate an authorized agent to submit requests on your behalf; we will require proof of the agent's authority and may still verify your identity directly.