Privacy Policy

Effective date: 1 November 2026 · Last updated: 1 November 2026

This Privacy Policy explains what information Ulot Capital ("Ulot", "we", "us") collects when you use the Ulot Capital app and website (the "Service"), why we collect it, and how it is protected. By creating an account you agree to this policy and to our Terms of Use.

1. Who we are

The Service is operated by Ulot Capital (operator: Tolu Idowu). Contact: [Contact email to be added]. Until that is published, contact us through the in-app support channels.

2. What the Service does

Ulot Capital is a betting-assist / copy-staking tool. You keep your own account with Cloudbet, a third-party sportsbook. When you activate, you give Ulot your own Cloudbet Trading API key so that Ulot can place stakes on your Cloudbet account and read your balance and bet results. Ulot cannot deposit into or withdraw from your Cloudbet account — the Trading API does not allow it.

3. Information we collect

Account details: username, display name, email address, and your password (stored only as a one-way hash).
Cloudbet connection: the email address you registered on Cloudbet with, and your Cloudbet Trading API key. The key is encrypted at rest; after you save it, only its first and last 4 characters are shown again.
Balances and betting activity: your Cloudbet balance and the stakes Ulot places for you (event, market, odds, stake, result, profit/loss), plus derived figures such as equity, reserve floor and staking sizes.
Ulot wallet and fees: your fee-balance deposits (amount, network, transaction hash and the deposit address you sent from), service-fee charges, withdrawal requests and the payout address you give us.
Referrals: your referral code, who referred you (if anyone), the accounts you refer, and referral earnings, transfers and withdrawal requests.
Notifications: if you link Telegram alerts, your Telegram chat ID and username.
Technical data: basic server logs (such as IP address, time and requested page) used for security and troubleshooting.

We do not collect your Cloudbet password, bank card details, or government ID documents. Identity checks (KYC) on Cloudbet are handled by Cloudbet, not by Ulot.

4. How we use it

To run your account and sign you in.
To check your Cloudbet API key, read your balance and place stakes on your Cloudbet account, sized from your own balance.
To calculate and charge service fees, track your fee balance, and process withdrawal requests.
To credit referral earnings.
To show you your history and statistics, and send alerts you opted into.
To keep the Service secure, prevent abuse and fraud, and meet legal obligations.

We do not sell your personal information and we do not use it for third-party advertising.

5. Sharing

Cloudbet: your API key is sent to Cloudbet when placing bets and reading balances on your behalf. Cloudbet's own privacy policy governs what Cloudbet does with your data.
Blockchain networks: fee deposits and payouts happen on public blockchains, where transaction details are publicly visible.
Infrastructure providers: hosting and network providers that run the Service (for example our server host and Cloudflare), only as needed to operate it.
Law: where we are required to by law or valid legal process, or to protect users and the Service.

6. Security

API keys are encrypted at rest, passwords are hashed, and the Service is reached over HTTPS. No system is perfectly secure; if you think your key has been exposed, revoke it in Cloudbet straight away and remove or replace it in Ulot. We recommend creating a Trading API key only, never sharing your Cloudbet password, and using a strong unique password for Ulot.

7. Retention and deletion

We keep account, fee and betting records for as long as your account is active and afterwards for as long as needed for accounting, dispute and legal purposes. You can remove your Cloudbet API key at any time; once removed, Ulot can no longer place bets for you. To close your account or ask for a copy or deletion of your data, contact us at the address above. Some records (for example fee and payout records) may need to be kept even after closure.

8. Age

The Service is for adults only — 18 or older, or the legal gambling age where you live if that is higher. We do not knowingly collect data from anyone under 18; such accounts will be closed.

9. International use

Our servers may be located outside your country (including in the European Union). By using the Service you understand your data may be processed there. Where data-protection laws such as the Nigeria Data Protection Act 2023 or the EU GDPR give you rights (access, correction, deletion, objection), contact us to use them.

10. Changes

We may update this policy. The "Last updated" date above will change, and important changes will be shown in the app.