Privacy Policy
Last updated: May 2026
Introduction
Balkan Lotto (balkanlotto.com) is a frontend interface for the Megapot protocol. This document describes how we handle your data.
Data we collect
We do not collect personal data in the traditional sense (name, email, phone, address). The data that passes through our site is: (1) your public wallet address when connecting; (2) on-chain transactions, which are by nature publicly visible on the Base network; (3) your country code, derived from your IP address (see the 'Geo-location' section below). We do not ask for or store passwords, seed phrases or private keys, those remain entirely with you.
Cookies
We use minimal functional cookies to remember your language preference and wallet session (Privy). We do not use tracking, analytics or marketing cookies. Functional cookies do not require explicit consent under GDPR.
Blockchain data
All transactions occur on the Base network and are publicly visible on BaseScan and similar explorers. We do not store private keys or have access to your funds. Ticket purchases, prizes and claims are permanently recorded on-chain. That is a natural property of blockchain technology and cannot be erased.
Geo-location (compliance)
To comply with the terms of the Anjouan gaming license under which the Megapot protocol operates, we determine the country from which you access the site. This happens via the /api/geo endpoint, which reads a country-code header that Vercel automatically adds to every HTTP request (derived from your IP address on their edge network). The country code is used solely to decide whether your jurisdiction permits site access or ticket purchase. We do NOT log or store the country code or your IP address. The value exists only in memory during the processing of your request. The country code is briefly cached (5 minutes) in your browser via a Cache-Control header to reduce request volume, but is not shared with third parties. You can verify this by inspecting network traffic in your browser developer tools (Network tab).
Third-party services
We use Privy for wallet connection (their privacy policy: privy.io/privacy), the Megapot protocol for on-chain ticket processing (megapot.io/privacy), and Vercel as our hosting provider. Vercel processes IP addresses during request routing, but these are not exposed to our application logic. See their privacy policies for details.
Your rights
Since we do not store personal data about you, we have no database from which it could be erased. If you want to sever your connection to the site, simply disconnect your wallet and clear your browser cookies. After that, there is no link between you and our infrastructure.
Contact
For privacy questions, reach out via the /contact page.