Privacy Policy

Magic Reward is operated by Magic Webs Technologies Pvt Ltd, Office No. 705, ABC Tower-1, Sector 135, Noida, Uttar Pradesh 201305, India. For anything in this policy, contact us at hello@magicwebs.in.

There are two kinds of people in this product, and we handle their data differently: business users, who sign in to run a prize wheel, and participants, who enter a wheel run by one of those businesses. Where a business runs a wheel, that business is the data controller for its participants and we act as a processor on its behalf.

Only what the business running the wheel asks for on its entry form:

• Name — if the business has enabled the name field.
• Phone number — if enabled. It is also used to make sure one person gets one spin per wheel.
• Custom fields — any extra questions the business has added, such as an email address or a city.
• Spin result — which prize was drawn and when.

We do not ask participants for payment details, government identifiers, precise location, contacts, photos, or any other data from their device.

• Account details — your company name, the slug used in your wheel's public address, and a password, which is stored only as a salted hash and never in a form we can read.
• Content you upload — wheel, background, pointer and prize images.
• Configuration — prizes, odds, form fields and any webhook endpoints you set up.

• Running the wheel: showing the right prizes, drawing a result, and enforcing one spin per person.
• Letting the business see and export its own registrations.
• Sending events to webhook endpoints that a business has configured, so its own systems can act on a registration or a win.
• Keeping the service secure and diagnosing faults.

We do not sell personal information, and we do not use participant data to advertise to anyone or to build profiles across businesses.

Participant data is visible to the business whose wheel was entered, and to no other business on the platform. Beyond that, information is shared only with:

• Our hosting and database providers, who store the data on our behalf under contract.
• Any endpoint a business configures under Webhooks. Once an event is delivered to a business's own systems, that business's privacy policy governs what happens to it.
• Authorities, where we are legally required to disclose.

Registrations are kept for as long as the business keeps its wheel active, so it can honour prizes and avoid duplicate entries. When a business closes its account, or when a deletion request is made, the associated data is removed as described below.

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to or restrict how it is used.

To exercise any of these, see Delete your data or write to hello@magicwebs.in. If you entered a wheel run by a business, we may need to pass your request to that business, since the data is theirs.

Traffic is encrypted in transit. Passwords are stored as scrypt hashes with a per-account salt. Webhook deliveries are signed with a per-endpoint secret so a receiver can verify that a request genuinely came from us. Participant records are never readable by the browser directly — every read and write goes through an authenticated server route.

Magic Reward is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has entered a wheel, contact us and we will remove the record.

If we change this policy we will update the date at the top of this page. Significant changes will be communicated to business users through the dashboard.

Magic Webs Technologies Pvt Ltd
Office No. 705, ABC Tower-1, Sector 135, Noida, Uttar Pradesh 201305, India
hello@magicwebs.in
+91 99990 64055