Privacy Policy
This Privacy Policy explains how personal data is collected, used and protected in connection with your use of LottoGo. Protecting your data is a priority, and processing is carried out in line with applicable data-protection practice and the UK GDPR. Below we explain what data is collected, the purposes of processing and the rights available to you. By using the platform, you acknowledge the practices described here. For related rules, see the Terms & Conditions and Responsible Gambling pages.
1. Data we collect
We may process several categories of personal data, including identity and age data, contact information, payment and transaction data, location data used to confirm your country, and technical usage data such as device information and activity logs. Identity data is required in particular to meet verification and anti-money-laundering obligations under UKGC licence conditions before processing a withdrawal.
2. Cookies and tracking technologies
Cookies and similar technologies are used to operate and improve the service. Some cookies are strictly necessary for the platform to function, while analytics and marketing cookies are only used with your consent. You can manage cookie settings from your browser at any time.
| Cookie type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Login, session, security and cashier functions | Not required |
| Analytics | Measure traffic and improve the site | Required |
| Marketing | Personalised offers and advertising | Required |
| Functional | Remember preferences such as language | Required |
3. Purposes and legal bases
Data is processed to provide the contracted service (performance of a contract), to meet legal obligations such as anti-money-laundering and licensing duties, to prevent fraud, and to pursue legitimate interests such as platform security. Where consent is the legal basis, processing is carried out on that basis and consent can be withdrawn at any time with future effect.
4. Data retention
Personal data is kept only as long as necessary for the stated purposes or as required by applicable retention obligations, including regulatory record-keeping requirements. Account and transaction records are typically kept for up to five years after account closure to comply with anti-money-laundering law. Once the purpose no longer applies and the retention period ends, data is deleted or anonymised.
5. Data sharing
Personal data is shared only where necessary to provide the service, to meet legal obligations or where consent has been given. Service providers acting on the operator's behalf are bound by contractual data-protection obligations. Data is not sold or shared with unauthorised third parties for advertising purposes.
6. Your rights
You have rights including access, correction, erasure and restriction of processing, as well as the right to object and to data portability. You can also opt out of direct marketing at any time.
6.1 Using your rights
To use your rights, contact the operator through the support channels shown on the platform. You also have the right to lodge a complaint about the processing of your personal data with the Information Commissioner's Office (ICO), the UK data protection authority.
7. Data security
Technical and organisational measures, including SSL encryption of data in transit, are applied to protect personal data from unauthorised access, loss or misuse. These measures are reviewed and updated in line with current standards.
8. Contact and complaints
For any questions about the processing of your personal data or to use your rights, contact the operator through the help and contact section on the platform. If you are not satisfied with the response, you can escalate a complaint to the Information Commissioner's Office (ICO) at ico.org.uk.