Privacy Policy

This is an English translation provided for convenience. The legally binding version is the Spanish one, available at boomboomlotter.com/privacidad.

This Privacy Policy explains how Boom Boom Lotter ("BBL", "the application", "the app") processes the personal data of its users, in accordance with Colombia's Law 1581 of 2012, Decree 1074 of 2015 and other applicable Colombian rules on the protection of personal data. By using BBL, the user accepts the practices described in this policy.

1. Data controller

• Controller: Boom Boom Lotter, based in Bucaramanga, Colombia.
• Contact and privacy email: boomboomlotter@gmail.com.

2. What BBL is and what it does NOT do

BBL is an independent tool for personal tracking and management of lottery plays. It is not affiliated with, sponsored, authorized or endorsed by Coljuegos, Baloto, MiLoto, ColorLoto, Operador Nacional de Juegos S.A.S. or their concessionaires, operators or licensees.

BBL does not sell bets, does not collect game payments, does not issue or validate tickets, does not pay prizes and does not provide intermediation services for gambling. The combinations and tickets the user records are stored on their own device and are not sent to our servers, unless the user voluntarily enables cloud backup (see section 6).

3. Data we process

Depending on the features the user uses, we may process:

• Identification and contact data: name and email address, only if the user creates an account (sign-in with Google or Apple).
• App usage data and preferences (language, settings).
• Technical identifiers: unique device identifier (device UUID) and push notification token (FCM token).
• History of plays and results the user records: by default only on the device; uploaded to the cloud only if the user enables backup.
• Technical data needed for security, operation and internal statistics.

We do not deliberately collect sensitive data or data of minors (see section 9).

4. Purposes of processing

• Create and manage the user's account (when one exists).
• Store the user's history and preferences.
• Send notifications about results of draws the user chooses to follow.
• Sync content across devices when the user enables backup.
• Handle requests, inquiries and complaints.
• Prevent fraud and ensure the correct operation of the app.
• Produce internal metrics and usage statistics.
• Comply with legal obligations and requirements of the competent authority.

We will not sell plays, will not process bets and will not share data with gambling operators, unless expressly requested by the user and where there is sufficient legal basis.

5. Push notifications

To send result notifications we use Firebase Cloud Messaging (a Google service). The user subscribes to "topics" that correspond to draws, and our system associates a device identifier with those topics to deliver the notification. Our server never receives the user's ticket combinations; the match calculation is performed on the device.

6. Cloud backup (optional)

If the user enables backup, their email address and an encrypted copy of their tickets will be stored in our database, for the sole purpose of letting them restore their information on another device. The information is encrypted so that the content of the tickets cannot be read by the server. This feature is voluntary and requires express consent when enabling it.

7. Processors and international transfers

To operate the app we use technology providers that act as data processors under duties of confidentiality, security and limited use of the information, including Google (Firebase Cloud Messaging and authentication services), with servers located outside Colombia, and the provider hosting the backup database. Where there is an international transfer or transmission of data, it will be carried out in accordance with applicable Colombian law and the instructions of the Superintendence of Industry and Commerce (SIC).

8. Rights of the data subject

The data subject may, at any time:

• Access, update and rectify their personal data.
• Request the deletion of their data and proof of the authorization granted.
• Withdraw consent where applicable.
• Submit inquiries and complaints.

To exercise these rights, the data subject may write to boomboomlotter@gmail.com. We will handle inquiries and complaints within the timeframes set by Law 1581 of 2012. If the data subject is not satisfied, they may turn to the Superintendence of Industry and Commerce once the applicable internal procedure has been exhausted.

9. Minors

BBL is intended exclusively for people over 18 years of age and does not intend to deliberately collect personal data of children or adolescents. If we detect the unauthorized processing of a minor's data, we will take the corresponding deletion or blocking measures.

10. Information security

We adopt reasonable technical and administrative measures to protect data against unauthorized access, loss or alteration, including the encryption of sensitive information and access control to the database.

11. Retention

We retain data for as long as necessary to fulfill the purposes described and the applicable legal obligations. When the user deletes their account or requests deletion, we will delete or anonymize their data, unless there is a legal obligation to keep it.

12. Changes to this policy

We may update this policy to reflect changes in the app or in regulations. We will publish the current version at boomboomlotter.com/privacidad and indicate the date of the last update.