Lucky Day, as a Data Controller, is bound by the requirements of the GDPR for Data Subjects.

Personal Data. Lucky Day processes the following personal data when users use the Services:

• Names and email addresses information
• Date of Birth (To confirm eligibility)
• Gender
• Paypal or Venmo Email Address and Account name (For sending award payments)
• User names and passwords
• Behavioral data related to your use of the Services
• Mobile operating system (i.e. iOS or Android)
• Cellular phone number
• Mobile IP Address (see below)
• Geo-location services for determining locally appropriate Prizes

We collect information about you when you download the App from the App Store or Google Play on your mobile device and commence using the Services. When you open your App or when you install updates to the App, we collect certain information about your device (including your IP address). Our App includes features that connect to our servers and offer you the ability to install updates to the App. We may keep track of information such as whether the update was successful or not. We may use the information collected through opening the App or App updates to validate your version of the App and confirm that your accrued awards are valid.

Description of Types of Processing. You agree that we are entitled to obtain, use and process the personal data you provide to us to enable us to provide the Services and for other related purposes including:

• Updating and enhancing user profile information
• Behavioral tracking and analysis for improving the Services and its features for users
• Fulfilling orders for virtual goods and services
• Fulfilling orders for virtual goods and services
• Handle customer service or technical support questions
• Legal and regulatory compliance
• Processing payments or other awards to winners
• Communicating with you regarding your alternative method of entry
• Notifying you if you are a winner of any one of our sweepstakes
• Processing for security, system integrity (the prevention of hacking, cheating and other improper or unlawful activities), or enforcement purposes.
• Determining the prizes appropriate for your local jurisdiction

The above types of processing are necessary to provide you with the Services, and for Lucky Day to be compliant with applicable sweepstakes laws, and so if you decide to withdraw consent for any of the above processing, you will no longer be able to use the App and your account will be deleted. For more detailed information as to why Lucky Day processes personal data in this manner, click here.

You may opt in to the following types of processing, however, and can withdraw your consent at any time. For information on how to opt out, please click on this link.

• In-App marketing of third party products and services to you
• Publish your location to other App users when you win
• Identify winners by their user name in the in-App leadership board
• Alerting you of new products or services, features, updates, promotions, gaming, contests, drawings, special events, offers and/or enhancements to the App
• Behavioral tracking of your use of the App, time of use, duration of use, etc.. so that we can offer you products and services we think may be of interest to you

Third Party Processors and Automation. We use third-party software providers for automated data collection and processing purposes. They will not use your data for any purposes and will only hold the data in line with our policy on data retention. Further, automation allows us to enhance your user experience, provide you with in-App incentives and promotions and determine the odds of any sweepstakes you participate in.