← Back to Login
1 Introduction
ចាក់ឆ្នោតឡូតូ ("we", "our", or "us") provides the ចាក់ឆ្នោតឡូតូ mobile application (com.yukilotto6.app) and web platform (the "Service"), offering Lotto 20/80, Lotto 6/36, Zodiac, and Khla Khlouk betting games. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By installing or using the Service, you agree to this Privacy Policy. If you do not agree, please uninstall the app and discontinue use.
This app is intended for users aged 18 and above. It is not directed at children under the age of 13.
2 Information We Collect
Information You Provide
- Account credentials (username and password) for authentication
- Phone number, when registering or linking your account via Telegram
- Profile details such as display name/avatar image and language/theme preferences
- Betting selections, wager amounts, and balance top-up/withdrawal requests
- Payment reference details you submit for manual top-ups (e.g. bank transaction ID) — we do not collect your card or bank account credentials
- A one-time setup code, if you choose to enable two-factor authentication (2FA)
Automatically Collected Information
- Device type, operating system version, and app version
- IP address for security and session management
- Login timestamps and in-app activity logs
- WebView user agent string
Information We Do NOT Collect
- We do not collect real payment or banking card numbers
- We do not access your device contacts or call logs
- We do not track your GPS or precise location
- We do not collect biometric data
3 How We Use Your Information
We use the information collected solely to operate the Service:
- Authenticate accounts and manage secure login sessions
- Process bets, settle results, and maintain your account balance
- Process deposit and withdrawal requests (KHQR/Bakong, ABA, AC)
- Send account notifications (e.g. registration confirmation, deposit status) via Telegram, if you've linked a Telegram account
- Verify two-factor authentication codes if you've enabled 2FA
- Enforce account security and prevent unauthorized access
We do not sell, rent, or share your personal data with any third parties for marketing purposes.
4 Third-Party Services
Certain features are processed through third-party services acting on our behalf, strictly to provide the Service:
- Telegram Bot API — if you register or link your account via Telegram, your phone number and Telegram chat ID are used to send you account and deposit notifications through Telegram's platform
- Two-factor authentication provider — if you enable 2FA, your authenticator setup code and verification codes are processed by our TOTP verification service to confirm login attempts
- KHQR (Bakong) payment processing — QR payment generation for deposits is handled through Cambodia's national Bakong payment network / our payment gateway partner; we do not receive or store your bank login credentials
These providers only receive the minimum information necessary to perform their function and are not authorized to use your data for their own purposes.
5 Data Safety Summary
| Data Type | Collected | Shared | Purpose |
|---|
| Account credentials | Yes | No | Authentication |
| Phone number | Yes | Telegram | Registration / notifications |
| Telegram chat ID | Yes | Telegram | Account notifications |
| Display name / avatar | Yes | No | Profile display |
| Betting & balance data | Yes | No | Service operation |
| Payment reference IDs | Yes | No | Deposit/withdrawal verification |
| 2FA setup/verification codes | Yes | 2FA provider | Login security |
| IP address | Yes | No | Security / session |
| Device info / OS | Yes | No | App compatibility |
| Payment / card data | No | No | — |
| Location (GPS) | No | No | — |
| Contacts | No | No | — |
| Passwords (stored) | Encrypted | No | Hashed only |
6 App Permissions
- INTERNET — Required to connect to the Service
- ACCESS_NETWORK_STATE — Detect connectivity and show offline notice
- CAMERA — Optional, to take a photo for your profile avatar
- WRITE_EXTERNAL_STORAGE (Android 9 and below only) — To save images such as payment QR codes to your device
- POST_NOTIFICATIONS — To notify you about deposits, withdrawals, and account activity (Android 13+)
The app does not request contacts, precise location, or microphone permissions, and does not run background services.
7 Data Storage & Security
- Passwords are hashed — never stored in plain text
- Sessions use secure, time-limited cookies with automatic expiry
- Role-based access control restricts data visibility per account level
- Two-factor authentication is available for additional login protection
While we implement industry-standard protections, no electronic transmission or storage method is 100% guaranteed to be secure.
8 Children's Privacy
This app is NOT directed at children under the age of 13. Our Service is strictly for users aged 18 and above.
We do not knowingly collect, solicit, or retain personal information from children under 13. If you believe your child under 13 has provided us with personal data, please contact us immediately.
9 Account & Data Deletion
You may request full deletion of your account and personal data at any time. To submit a deletion request:
- Contact us via Telegram or through your registered agent
Upon receiving a verified deletion request, we will delete your profile and personal data within 30 days, except where retention is required by law.
10 Contact Us
If you have questions regarding this Privacy Policy, please contact us:
- Via Telegram (@twin999bot) or your account administrator