Your data

Privacy Policy

We collect the minimum needed to run a licensed lottery product safely, and we never sell your personal data.

Last updated · August 2026

What we collect

  • Identity: name, date of birth, address, and government ID for age and identity verification.
  • Contact: email address and, optionally, phone number.
  • Financial: payment method details (tokenised by our processor), deposits, withdrawals and wallet balance.
  • Play data: tickets, stakes, play types, draws entered and results.
  • Technical: IP address, approximate location, device and browser information, and security logs.

Why we use it

  • To create and secure your account and verify you are 21+ and eligible.
  • To accept tickets, grade draws and pay winnings.
  • To meet anti-money-laundering, tax and regulatory obligations.
  • To detect fraud, bonus abuse and problem-play patterns.
  • To send service messages, and marketing only where you have opted in.

Who we share it with

Identity verification providers, payment processors, cloud hosting and analytics providers, regulators and law enforcement where legally required, and professional advisers. Each processor is contractually bound to use your data only on our instructions.

How long we keep it

Account, transaction and ticket records are retained for a minimum of five years after account closure to satisfy gaming and financial regulations. Marketing preferences are kept until you withdraw consent. Self-exclusion records are kept permanently so exclusions cannot be bypassed.

Security

Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and administrative actions are logged and reviewed. We recommend a unique password and two-factor authentication on your account.

Cookies

We use strictly necessary cookies for sign-in and fraud prevention, and optional analytics cookies to understand product usage. You can reject optional cookies without losing access to play.

Your rights

  • Access a copy of the data we hold about you.
  • Correct inaccurate details.
  • Request deletion, subject to our regulatory retention duties.
  • Object to or restrict certain processing.
  • Withdraw marketing consent at any time.

Email privacy@goldraw.com. We respond within 30 days.