1. Scope and Controller Information
This Privacy Policy applies to personal data processed through thelotteryuae.com, including account registration, identity verification, draw participation, raffle entry, customer support, marketing communications, fraud prevention, and compliance operations.
For the purposes of this policy, “personal data” means information relating to an identified or identifiable natural person. References to “we”, “our”, or “us” mean the operator of thelotteryuae.com and its affiliated service providers acting on its instructions.
This policy should be read together with our Terms & Conditions and Cookie Policy.
2. Personal Data We Collect
Account and profile information
- Full name, date of birth, nationality, residential address, email address, mobile number, username, and account credentials.
- Marketing preferences, language preferences, and account settings.
Identity and compliance information
- Government-issued identification details, verification records, age checks, sanctions screening outcomes, source-of-funds checks where required, and related compliance notes.
- Self-exclusion status, account restriction data, risk alerts, and responsible play controls applied to the account.
Transaction and gameplay information
- Ticket selections, order history, draw participation records, prize entitlement records, claim documents, refund records, and wallet or balance information where offered.
- Device, browser, IP address, log data, session information, cookie identifiers, and basic analytics data related to site use.
Communications
- Messages sent to support, dispute submissions, security reports, survey responses, and correspondence related to verification, claims, or compliance.
3. How We Use Personal Data
We process personal data only for legitimate and defined business purposes, including:
- creating and managing accounts;
- verifying age, identity, and eligibility;
- processing ticket purchases, draw entries, raffle participation, and prize claims;
- communicating transactional updates, service notices, security alerts, and changes to terms or policies;
- preventing fraud, abuse, money laundering, account misuse, multiple-account activity, and unauthorized access;
- enforcing participation rules, account controls, and responsible play measures;
- improving website stability, product performance, and customer support quality;
- maintaining legal records, responding to authorities, and defending or establishing legal claims;
- sending promotional messages where you have consented or where such contact is otherwise permitted by applicable law.
4. Legal Basis for Processing
Where required by applicable law, we process personal data on one or more of the following grounds:
| Contractual necessity | To open and administer your account, provide draw participation, manage prize claims, and deliver requested services. |
|---|---|
| Consent | For marketing communications, certain cookies, and other processing where consent is required before collection or use. |
| Legal obligation | To comply with identity verification, anti-fraud, record-keeping, disclosure, tax, law-enforcement, or regulatory obligations. |
| Legitimate interests | To secure the service, improve operations, investigate misuse, manage disputes, and maintain service continuity where those interests are not overridden by your rights. |
Where you provide consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. International and Cross-Border Transfers
Your personal data may be processed in or accessed from jurisdictions other than the one in which you are located. Where this happens, we take reasonable steps to ensure an appropriate level of protection, including contractual safeguards, access controls, data minimization, and security review of the receiving service provider.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including account administration, ticket validation, prize claims, dispute handling, fraud prevention, financial reconciliation, and compliance with record-keeping obligations.
Retention periods may vary depending on the type of data, legal requirements, the existence of a dispute, or whether the information is needed to establish, exercise, or defend legal claims. When data is no longer required, it is deleted, anonymized, or securely archived in accordance with applicable law.
8. Your Rights and Choices
Subject to applicable law and verification of your identity, you may request to:
- access the personal data we hold about you;
- correct inaccurate or incomplete information;
- delete personal data where retention is no longer required or where processing is unlawful;
- restrict or object to certain processing;
- withdraw consent for marketing or other consent-based processing;
- receive information about automated decisions where such decisions materially affect you and are subject to applicable legal rights.
We may ask for additional information to confirm your identity before completing a request. Some rights may be limited where we must retain data to comply with law, prevent fraud, protect the integrity of draws, or defend legal claims.
9. Security, Children, and Policy Updates
We maintain administrative, technical, and organizational controls designed to protect personal data against unauthorized access, alteration, disclosure, loss, and misuse. These controls may include encryption, logging, layered access management, secure hosting, monitoring, and verification procedures.
The services are intended only for persons aged 18 or over. We do not knowingly permit minors to open accounts or participate in draws. If we learn that data relating to a minor has been collected in error, we will take steps to delete the data and close or restrict the relevant account.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date. Continued use of the services after the effective date of an update constitutes acknowledgment of the revised policy to the extent permitted by law.
10. Contact and Data Requests
Privacy requests, questions, and complaints may be sent to [email protected] or through the support channels listed in your account area. Please include sufficient detail for us to identify the request and verify your identity.
If you believe that your personal data has been handled unlawfully, you may also have the right to complain to a competent authority, subject to the procedures and jurisdictional requirements applicable to you.