Privacy Policy
Privacy Policy
This page explains in a clear and detailed way how personal information may be collected, used, protected, disclosed and retained when a person interacts with NZLotteryOnline.
This Privacy Policy applies to visitors, account applicants, registered users, customer support contacts and any person who accesses the platform through desktop or mobile devices. It is designed to present privacy information in plain language, while still covering the practical, technical and compliance matters that are relevant to an online lottery platform with age restrictions, account verification requirements and responsible gambling tools.
We may collect information directly from you when you create an account, contact support, set limits, review results, subscribe to updates or otherwise interact with the website. We may also collect limited technical data automatically to keep the site secure, prevent fraud, ensure lawful access and improve the usability of the service. In all cases, the platform aims to handle personal information in a way that is proportionate to the purpose for which that information is needed.
1. Categories of information we may collect
The platform may collect identity information such as your full name, date of birth, contact details and other information needed to confirm that you are eligible to participate. It may also collect account information such as username, password credentials, account preferences, login history and settings related to communication or responsible gambling controls.
Transactional information may include entries purchased, payment confirmation references, digital records linked to your account, draw history, prize-related status information and customer service records. Technical information may include browser type, device information, IP address, language preference, session activity, page interaction data and security signals used to identify suspicious activity or attempted misuse of the service.
Where required by law or platform policy, additional information may be requested for identity verification, anti-fraud review, dispute handling, restricted access checks or account recovery. The amount of information requested will depend on the relevant purpose, the level of risk involved and the regulatory context in which the request is made.
2. Why we use personal information
Personal information may be used to create and manage your account, confirm eligibility, process authorised entries, maintain a digital record of your activity, communicate service notices, respond to enquiries and administer platform features. We may also use information to enforce the age restriction, monitor for unauthorised access, support responsible gambling settings and maintain the integrity of official draw participation.
Information may also be used to improve site navigation, fix technical issues, detect repeated errors, understand how users interact with content and evaluate whether specific pages or notices are clear. These operational purposes help ensure that the service remains functional, secure and understandable. In addition, records may be needed to resolve complaints, answer questions about account history or demonstrate that a transaction or notification took place.
We do not present the service as anonymous entertainment. Because participation is restricted and regulated, some information processing is necessary to operate the platform responsibly and lawfully. We therefore use data only where we have a defined operational, contractual, safety or compliance reason to do so.
3. Communications and notices
We may send you account-related communications such as verification notices, transaction confirmations, result notifications, security alerts, password reset messages and important policy updates. These communications are considered service-related and may be necessary for the operation of your account. Marketing communications, newsletters or promotional notices, if offered, should be clearly distinguishable from operational messages and may be subject to your stated preferences.
Support communications may include email messages, contact form correspondence and follow-up notes related to account issues or help requests. These records may be retained for quality assurance, dispute resolution and service continuity. We may also send reminders linked to responsible gambling tools, such as spending limit prompts or activity summaries, where those tools are enabled on your account.
4. Security and fraud prevention
Protecting personal information is a core operational objective of the platform. We may use technical and organisational safeguards such as access controls, secure transmission protocols, limited staff access, environment monitoring, authentication checks and activity logging. Security measures are designed to reduce the risk of unauthorised access, misuse, data loss or fraudulent account activity.
Fraud prevention processes may include review of unusual transaction patterns, multiple account checks, abnormal login attempts, device or location mismatch indicators and verification flags that suggest the need for additional review. Where appropriate, accounts may be paused or restricted while checks are completed to protect both the user and the integrity of the service.
5. Cookies, analytics and technical logs
The platform may use cookies and similar technologies to remember preferences, keep sessions functional, improve performance and understand aggregate site usage. Technical logs may be used to troubleshoot system errors, analyse failed page loads, measure platform reliability and identify suspicious traffic. Some cookies are necessary for the basic operation of the site, while others may help improve the user experience or evaluate which content is most useful.
For more detail about cookie categories, consent behaviour and browser controls, please review the Cookie Policy. That page explains how the platform distinguishes between essential functionality cookies and preference or measurement cookies, and how visitors may manage their settings.
6. Disclosure of information
We may disclose information where necessary to service providers that support hosting, technical maintenance, communications delivery, identity verification, payment support, security monitoring or lawful compliance processes. Where providers process information on our behalf, they should do so only for the agreed service purpose and with appropriate safeguards.
We may also disclose information where required to respond to legal requests, regulatory obligations, fraud investigations, court processes or the protection of users, staff or the public. Where disclosure is not legally prohibited, the platform aims to ensure that any disclosure is limited to the information reasonably necessary for the stated purpose.
7. Data retention
We keep personal information only for as long as it is reasonably required for account administration, transaction history, legal compliance, security review, dispute management, audit purposes or responsible gambling records. Different categories of information may be retained for different periods depending on the operational need. For example, transactional records may be retained longer than temporary technical logs because they support account history, audits and user enquiries.
When information is no longer needed, we aim to delete, anonymise or otherwise de-identify it in accordance with our retention approach. Some information may remain in backups or restricted archival systems for a limited period while routine deletion cycles complete.
8. Your choices and rights
You may have the ability to review certain profile information, update contact details, change communication preferences and manage responsible gambling settings from within your account. You may also contact the platform to request access to information held about you, ask for corrections where data is inaccurate, or seek clarification about how a category of information is used.
Where a request cannot be completed in full, for example because information must be retained for compliance or security reasons, we aim to explain the reason in a clear and practical way. Identity may need to be verified before a privacy request is actioned to ensure that information is not disclosed to an unauthorised person.
9. Children and restricted persons
The platform is strictly for adults aged 18 and over residing in New Zealand who meet participation requirements. It is not intended for minors and should not knowingly collect personal information from persons under the legal age threshold. If we become aware that information has been submitted in connection with underage access, we may take steps to remove the account, restrict access and delete or isolate the relevant information where appropriate.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect operational changes, legal developments, security improvements, product changes or clearer explanations of existing practices. When significant changes are made, the platform may display a notice on the site or within the account area. Continued use of the service after an update may indicate acceptance of the revised policy to the extent permitted by applicable requirements.
11. Contact about privacy
If you have a question about this Privacy Policy, wish to request access to your information, or need to report a privacy concern, you may contact the platform using the Contact page. Please provide enough detail for your enquiry to be understood clearly, including the account email or reference number if relevant.