Privacy Policy

EOAS LLC is the data controller for personal data processed to operate LootRaiders.

Communities (brands or creators who host tasks) may give us campaign content and see limited campaign results. Where a Community runs its own independent processing (for example, on its Discord server), that Community is controller for that processing.

Prize and payout partners (including the Payout Provider and, where you choose them, PayPal, GCash, gift-card issuers, or digital-asset payout providers) are controllers or processors of the data they need to deliver the prize.

We collect only what we need to run the Service, prevent fraud, and deliver prizes.

2.1 You give us

• Account identifiers from Discord, Google, or X (username, user ID, public profile data the provider shares, email if the provider shares it)
• Email address and, if you provide it, phone number
• Country or region you declare
• Task submissions and proofs (for example, a screenshot or a confirmation that you followed an account)
• Messages you send to support
• Winner claim details: full name, contact email, country, shipping address if a physical prize, payout account email or wallet identifier if that prize type requires it
• Identity documents and a selfie only if we request them for a high-value prize, a legal obligation, or a fraud review
• Contest or creator submissions (text, images, video)

2.2 We collect automatically

• IP address, approximate location derived from IP, device type, browser, operating system
• Date and time of visits, pages viewed, referral source
• Cookie and similar IDs (see Cookie Policy)
• Account and entry logs: tasks completed, Tickets granted or used, wheel spins, leaderboard points, draw entries, device/account links used for fraud review

2.3 Others give us

• Login providers (Discord, Google, X)
• Community tools used to verify a task
• Payout providers (delivery status, failure reason)
• Fraud, sanctions, and security vendors
• Public social posts if a task requires a public action we must check

We do not require payment-card data for entry. If a future paid Community product is added, that checkout provider will collect payment data under its own notice.

We do not sell your personal data for money.

We do not use your data to make fully automated decisions that produce legal effects other than the ordinary automated checks needed to grant Tickets, score a published leaderboard, pick a published random winner, or flag fraud. Fraud flags can delay a prize. You can contact support@eoas.me to ask for a review.

We share personal data only as needed:

• Hosting, cloud, email, and security providers that run the Service
• Login providers you choose (Discord, Google, X)
• Analytics providers, and only after consent where the law requires it
• Communities, limited to what they need to see that a task was completed or that their campaign is running
• Prize and payout partners: the Payout Provider and any gift-card, courier, PayPal, GCash, or digital-asset provider required for the prize you won
• Professional advisers (lawyers, accountants) under confidentiality
• Authorities, courts, or regulators when the law requires it or to protect rights, safety, and the integrity of a draw
• A buyer or successor if EOAS is reorganized or sold, under this Policy

We do not share your data with other users except:

• public leaderboard display (display name / username and points);
• winner announcements (first name or username and prize), unless Official Giveaway Rules say we will keep a winner unpublished.

EOAS is established in Wyoming, United States. Providers and prize partners may process data in the United States, the European Union, the Philippines, and other countries.

Where a transfer law applies (including GDPR Chapter V, POPIA, the Philippines DPA, Nigeria, or Kenya), we use an appropriate safeguard such as:

• an adequacy decision where one exists;
• standard contractual clauses or an equivalent contract;
• your informed consent when that is a lawful fallback;
• a transfer needed to perform the contract with you (for example, sending a prize to your country).

We keep data only as long as needed for the purpose, then delete or irreversibly anonymize it, unless a longer period is required by law.

Subject to the law that applies to you, you may ask us to:

• access your personal data
• correct inaccurate data
• delete data
• restrict or object to certain processing
• receive a portable copy of data you provided
• withdraw consent without affecting prior lawful processing
• lodge a complaint with a supervisory authority

Philippines: you also have rights under R.A. 10173, including to be informed, object, access, correct, and erase, and to complain to the National Privacy Commission.

South Africa: you have POPIA rights, including access and correction. You may complain to the Information Regulator.

Nigeria: you have rights under the Nigeria Data Protection Act / NDPR and may complain to the Nigeria Data Protection Commission.

Kenya: you have rights under the Data Protection Act, 2019 and may complain to the Office of the Data Protection Commissioner.

EU/UK: you may complain to your local supervisory authority. EU representative details will be published here if we are required to appoint one.

How to use your rights

Email support@eoas.me with the subject “Privacy request.” Tell us which right you want to use. We may need to verify it is you. We will respond within the period required by the applicable law (often 30 days; Philippines rules may require a shorter or different period).

We may refuse a request only as that law allows (for example, to keep a winner record required for a promotion audit, or to complete fraud review).

The Service is for adults. We do not knowingly collect personal data from anyone under 18.

If we learn that we have collected data from a person under 18, we will delete the account and that data, except for a minimal record needed to prevent re-registration.

Parents or guardians who believe a minor used the Service should email support@eoas.me.

We use technical and organizational measures appropriate to the risk, including access control, encryption in transit, logging, and limited staff access to winner files.

No online service is completely secure. You must keep your login to Discord, Google, or X under your control.

If a breach is likely to risk your rights, we will notify you and the relevant authority when the law requires it.

We send campaign or newsletter email only if you subscribe or if another lawful basis applies. Every marketing email has an unsubscribe link.

Transactional mail (login, Ticket grant, draw result, prize claim) is part of the Service and is not marketing.

Essential cookies run the Service. Analytics and marketing cookies are used only as described in the Cookie Policy and, where required, after you consent.

Draw winners are selected by a published random method from eligible entries. That process uses account and entry data. It is the mechanics of the promotion, not profiling for advertising.

Leaderboard ranks use published point rules.

We do not sell personal data as that term is used in common US state privacy laws. We honor required opt-out signals for sale or sharing of personal data for cross-context advertising if we ever run that type of advertising. We do not currently sell or share data for cross-context behavioral advertising.

LootRaiders uses YouTube API Services. By using YouTube-related features on LootRaiders, you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google’s handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).

What Google data we access and why

When you connect your Google account, we access your basic profile (name, email address, profile picture) to create and link your LootRaiders account. If you choose to complete a YouTube task, we additionally read — with your consent via Google OAuth — your YouTube channel identity and YouTube activity relevant to that task (for example, whether you liked a specific video, subscribed to a specific channel, or commented on a specific video). We use this data for one purpose only: to verify that you completed the task and award the corresponding prize draw tickets.

What we store

We do not store your YouTube activity, video content, watch history, or comment text. We retain only a task completion record (task, outcome, timestamps and the associated account identifiers) and the OAuth tokens needed to perform verification. We never modify, create, or delete any content on your YouTube account.

Sharing and Limited Use

We do not sell, share, or transfer Google user data to third parties, use it for advertising, or allow humans to read it except where required for security, abuse investigation, or legal compliance. LootRaiders’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Revoking access

You can disconnect your Google account from your LootRaiders account page at any time, and you can revoke LootRaiders’ access to your Google data via the Google security settings page (https://myaccount.google.com/permissions). You may also request deletion of stored data as described in this Policy.

We may update this Policy. The “Last updated” date will change. Material changes will be posted on the Service. Continued use after the effective date means you acknowledge the updated Policy.

Controller:

EOAS LLC

30 N Gould St

Ste N

Sheridan, WY 82801

USA

Email: support@eoas.me

Website: https://lootraiders.games/

Privacy requests: privacy@eoas.me.