Privacy Policy

1. Definitions and Interpretation

In this Privacy Policy, capitalised terms have the meanings defined below. These definitions apply whether the terms are used in the singular or plural form.

• Account – A unique profile registered by a user to access certain features of our Service.
• Affiliate – Any entity that directly or indirectly controls, is controlled by, or is under common control with the Company.
• Company – Refers to Aussie Lotto and its operators, collectively referred to as “we”, “us”, or “our” in this Policy.
• Cookies – Small data files placed on your device to collect information about browsing behaviour and preferences.
• Country – Refers to the Commonwealth of Australia, where our services are primarily offered and regulated.
• Device – Any digital device used to access the Service, such as a smartphone, tablet, or desktop computer.
• Personal Data – Any information that relates to an identified or identifiable individual, including name, email address, and usage patterns.
• Service – The website and digital platform provided under aussie-lotto.com, including all features, content, and functionality.
• Service Provider – A third party that processes data on behalf of the Company in accordance with our instructions and applicable law.
• Usage Data – Information automatically collected through your interaction with the Service, such as IP address, browser type, and time spent on pages.
• You – The individual accessing or using the Service, or the legal entity on behalf of which such individual is acting.

These definitions are intended to ensure clarity and consistency throughout this Privacy Policy. If any other terms are defined in subsequent sections, those definitions will apply accordingly.

2. Information We Collect

We collect personal and non-personal information in order to provide and improve our services, comply with legal obligations, and enhance your user experience. Information is collected directly from you, automatically through your device, or from third-party sources, where legally permitted.

2.1 Personal Data

Personal Data refers to information that can be used to identify you as an individual, either directly or indirectly. We may collect the following types of Personal Data:

• Full name, email address, phone number, residential address, and date of birth
• Identity verification documents (e.g. driver licence, passport) as required by law
• Bank details and payment information, including IBAN for prize disbursement
• Account login credentials and preferences
• Any other information voluntarily provided by you when using our services

2.2 Usage Data

Usage Data is collected automatically when you interact with our website or services. This includes:

• Device type, operating system, browser type, and version
• IP address and approximate geolocation
• Pages visited, time spent, and referring URLs
• Error logs and diagnostic information

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons and scripts) to personalise content, remember preferences, and analyse user behaviour. By using our website, you consent to the use of cookies unless you disable them in your browser.

• Essential Cookies: Required for core site functionality, such as login security.
• Preference Cookies: Store user settings like language or region.
• Analytics Cookies: Collect anonymous data to help us understand user engagement and improve site performance.

You can control cookie settings through your browser or device preferences. Note that disabling certain cookies may affect site functionality.

3. How We Use Your Information

We use the information we collect in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Your Personal Data is used only for legitimate purposes necessary to deliver and maintain our services, comply with legal obligations, or with your consent.

Specifically, we may use your information to:

• Create, verify, and manage user accounts
• Process and confirm lottery ticket purchases
• Administer prize payments and related financial obligations
• Provide customer support and respond to enquiries
• Send administrative updates related to your account or the service
• Communicate service improvements, promotions, and special offers (if consented to)
• Personalise your experience and display relevant content
• Monitor, analyse, and improve website functionality and performance
• Comply with regulatory requirements and prevent fraudulent activity
• Support business continuity, corporate transactions, or legal enforcement

We do not use your personal information for profiling or automated decision-making that significantly affects your legal rights, unless you are explicitly informed and your consent is obtained where required.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in our emails or by contacting us directly.

4. Sharing Your Information

We only share your personal information when it is necessary for legitimate business or legal purposes. We do not sell your personal data to third parties. Information may be disclosed in the following circumstances:

• With Service Providers: We may share your data with trusted third-party vendors who assist us in delivering our services, such as payment processors, customer support providers, IT services, analytics platforms, and identity verification partners. These providers are contractually bound to safeguard your data and use it only for authorised purposes.
• With Affiliates: We may share information with our affiliated companies under common control, where necessary to provide services or carry out internal functions.
• For Legal or Regulatory Compliance: We may disclose your information where required to comply with applicable laws, court orders, law enforcement requests, or regulatory obligations, including obligations under anti-money laundering (AML) and responsible gambling regulations.
• In Business Transfers: If we are involved in a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of that transaction. We will take reasonable steps to ensure your rights are preserved.
• With Your Consent: We may disclose your information to third parties if you have given your explicit and informed consent for such sharing.

We take reasonable steps to ensure that any third parties we share data with operate in compliance with applicable privacy laws and maintain appropriate technical and organisational safeguards.

5. Data Retention

We retain your personal information only for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, including to satisfy any legal, regulatory, accounting, or reporting requirements.

The specific retention periods depend on the type of data and the context in which it was collected. In general:

• Account and identity data is retained while your account remains active and for a reasonable period thereafter to comply with legal obligations and to respond to disputes or enforcement requests.
• Transaction and payment records are retained in accordance with financial record-keeping laws and tax regulations, which may require retention for up to seven years.
• Usage data may be retained for analytical, security, or service improvement purposes, but is typically stored in aggregate or anonymised form.
• Marketing preferences and consents are retained until you withdraw consent or request deletion, unless otherwise required by law.

When personal data is no longer required for the purposes for which it was collected, we will take reasonable steps to delete, destroy, or de-identify it in accordance with applicable laws and secure data disposal practices.

In some cases, we may retain certain limited information for fraud prevention, legal enforcement, or compliance with regulatory reporting obligations even after an account has been closed or deleted.

6. Data Transfers

Your personal information may be stored or processed on servers located in Australia or in other jurisdictions where we or our service providers operate. This may involve transferring your data to countries outside of your place of residence, including to jurisdictions that may not have equivalent data protection laws.

When we transfer personal data internationally, we take all reasonable steps to ensure that your information is handled in accordance with this Privacy Policy and applicable laws. This includes, where appropriate:

• Ensuring that the receiving entity is subject to binding data protection obligations;
• Implementing standard contractual clauses approved by relevant regulatory authorities;
• Using data hosting partners who comply with international privacy and security certifications;
• Applying appropriate technical and organisational safeguards, such as encryption and access controls.

By using our services and submitting your personal data, you acknowledge that your information may be transferred to, stored, and processed in jurisdictions outside of Australia.

We will not transfer your data outside of Australia unless we are satisfied that the recipient provides a level of protection for your personal information that is substantially similar to that which is required under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

7. Managing Your Information

You have the right to access, correct, update, or request the deletion of your personal information in accordance with the Privacy Act 1988 (Cth). We are committed to ensuring that your data is accurate, complete, and up to date.

You may manage your personal information by:

• Logging into your account to review and update your profile details;
• Contacting our support team at [email protected] for specific data-related requests;
• Requesting a copy of the personal information we hold about you;
• Requesting deletion of your account and associated data, where legally permitted.

In certain circumstances, we may be required to retain specific information for legal, regulatory, or security purposes, including obligations related to financial reporting, identity verification, or fraud prevention.

If you believe that any of the information we hold about you is incorrect or out of date, you have the right to request correction. We will respond to such requests in a timely manner and notify you of the outcome.

We may request identity verification before fulfilling any privacy-related requests to ensure the security of your data.

8. Legal Disclosures

We may disclose your personal information if we are legally required to do so or when such disclosure is reasonably necessary to comply with our legal obligations, protect our legal rights, or prevent harm.

Circumstances where disclosure may occur include:

• Compliance with court orders, legal proceedings, or lawful requests from regulatory authorities;
• Cooperation with law enforcement investigations, including anti-fraud, anti-money laundering (AML), and responsible gambling enforcement agencies;
• Protecting the rights, safety, or property of Aussie Lotto, its users, or the public;
• Enforcing our Terms of Use or other contractual obligations;
• Responding to claims that user content violates the rights of third parties.

Where appropriate and permitted by law, we will take reasonable steps to notify you of such disclosures, unless doing so would compromise a legal investigation or other lawful exception applies.

We do not disclose your personal information to government or law enforcement agencies without valid legal authority or due process.

9. Security Measures

We take the protection of your personal information seriously. Aussie Lotto implements a combination of technical, administrative, and physical safeguards to protect your data from unauthorised access, disclosure, alteration, or destruction.

• Use of SSL/TLS encryption to protect data transmitted between your device and our servers;
• Restricted access to personal data to authorised personnel only, based on role and necessity;
• Regular security monitoring, vulnerability scanning, and audit logging;
• Secure server infrastructure hosted in data centres with industry-standard protections;
• Implementation of secure authentication procedures and session management;
• Mandatory privacy and data protection training for employees and contractors.

While we take reasonable precautions to protect your information, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security and recommend that you take steps to protect your own data, including:

• Choosing a strong, unique password for your account;
• Enabling device-level protections, such as PINs or biometric locks;
• Keeping your login credentials confidential and secure;
• Immediately notifying us of any suspected unauthorised activity on your account.

If we become aware of a data breach that affects your personal information, we will notify you and any applicable authorities in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

10. Children's Privacy

Our services are intended strictly for individuals aged 18 years and over. Aussie Lotto does not knowingly collect, use, or disclose personal information from persons under the age of 18.

We take reasonable steps to prevent access to our platform by minors, including age verification procedures and visual warnings displayed throughout the website.

If we become aware that we have inadvertently collected personal information from a child or minor in breach of this policy or applicable law, we will take immediate steps to delete that information and, where necessary, report the incident to the appropriate authorities.

If you are a parent or guardian and believe that a child under your care has provided us with personal information, please contact us immediately at [email protected].

Persons under 18 years of age are not permitted to create an account or participate in any games, draws, or promotions offered by Aussie Lotto.

11. Third-Party Links

Our website and services may contain links to third-party websites, applications, or services that are not owned or controlled by Aussie Lotto. These links are provided for your convenience and informational purposes only.

We do not have control over, and are not responsible for, the content, privacy practices, or policies of any third-party websites or services. Accessing third-party websites is done at your own risk, and we recommend that you review the privacy policies of those websites before providing them with any personal information.

The inclusion of a link does not imply our endorsement or affiliation with the linked site. Your interactions with third-party services, including those related to account login, payments, or marketing, are governed by the respective terms and privacy policies of those third parties.

Aussie Lotto disclaims any responsibility or liability for the handling of personal information by any website or service not operated by us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, regulatory, technical, or business developments. When we make material changes, we will take appropriate steps to inform you, consistent with the significance of the changes.

Any changes will become effective when the updated policy is published on our website. The “Last Revised” date at the top of this policy will reflect the latest version. We encourage you to review this policy periodically to stay informed about how we protect your information.

If we make significant changes that affect your rights or the way we handle your personal information, we will notify you directly via email or a prominent notice on our website, where required by applicable law.

Your continued use of our services after the effective date of any revised Privacy Policy constitutes acceptance of the terms of the updated policy.