Lucky Fans | Antidotes

What we collect: Your first and last name, your date of birth, your mobile number, your email address, the identity document you register with (a Thai national ID number or a passport number), and the receipts you upload. A receipt image may also show your delivery address or part of your payment details.
Why we collect it: To check that your purchases qualify and to work out the number of Lucky Fan entries your verified purchases have earned, which is what the draw for the 48 places is made from. Antidotes also records the validated amount of each receipt so that a reviewer can reconcile it against the entries it earned; the campaign publishes no ranking and does not show you a position. Your phone number is what ties your receipts together into one entry. Your identity document and date of birth are used only to confirm that you are old enough to take part and that the person collecting a prize is the person who entered.
How it is kept: Encrypted in transit and at rest. Receipt images are stored privately and can only be opened through short-lived links; they are never publicly accessible. Your identity document number and date of birth are kept out of our application logs and are shown only in masked form to the review team. Access is limited to named members of that team, and every review action is logged.
Your rights: You can ask to see the information held about you, ask us to correct it, and ask for your account to be closed. A closure request is recorded with a reference and passed to Antidotes for review; sending it does not delete anything by itself. Your account, your receipts and your campaign records stay in place while the request is reviewed, and some information may have to be kept in order to run and audit the campaign.