Privacy Policy

Digital Jackpotz Ltd (“we”, “us”, “our”) is the data controller for personal data collected through digitaljackpotz.com. Registered in England & Wales. Company number: [To be inserted]. Registered office: [To be inserted].

We are registered with the Information Commissioner's Office (ICO). ICO registration number: [To be inserted]. If you have any questions about this policy or how we handle your data, contact us at: privacy@digitaljackpotz.com

We collect the following categories of personal data:

• Account data: name, email address, date of birth (for age verification)
• Transaction data: ticket purchases, credit top-ups, payment references (we do not store card numbers — these are handled by Stripe)
• Competition entry data: which competitions you have entered, ticket numbers assigned
• Winner data (if applicable): full name, email, bank details or wallet address for prize payment
• Technical data: IP address, browser type, device type, pages visited, and session data via cookies
• Communications: any correspondence you send to us

We use your personal data to:

• Process your competition entries and ticket purchases
• Verify your age and eligibility
• Contact you if you win a prize and facilitate payment
• Manage your credit wallet and account
• Comply with our legal obligations (including the Gambling Act 2005 and UK GDPR)
• Prevent fraud and maintain the security of our platform
• Send service communications (draw results, account updates) — not marketing without your consent

We rely on the following legal bases under UK GDPR:

• Contract: processing necessary to perform our agreement with you (entering competitions, paying prizes)
• Legal obligation: age verification, fraud prevention, regulatory compliance
• Legitimate interests: fraud prevention, platform security, improving our service
• Consent: marketing communications (where applicable — you can withdraw at any time)

We share data with the following trusted third parties, all of whom process data on our behalf under appropriate data processing agreements:

• Stripe Inc. — payment processing. Stripe is PCI-DSS compliant. Card data never touches our servers.
• Supabase Inc. — database and authentication (hosted in EU — Frankfurt, Germany)
• Vercel Inc. — website hosting and deployment
• Polygon / Chainlink Labs — on-chain draw execution (draw result data is publicly visible on the blockchain by design)

We do not sell your personal data to any third party. We do not use your data for targeted advertising.

We retain personal data for as long as necessary to fulfil the purposes described in this policy, and as required by law:

• Account data: retained while your account is active, plus 7 years after closure (tax/legal obligations)
• Transaction records: 7 years from the date of transaction
• Winner payment records: 7 years
• Technical/log data: 90 days

You may request deletion of your account and data at any time (see Your Rights below). Note that some data must be retained to meet legal obligations even after account deletion.

Under UK GDPR, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data (subject to legal retention obligations)
• Restriction: request we restrict processing in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: at any time, where processing is based on consent

To exercise any right, email privacy@digitaljackpotz.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO: ico.org.uk

We use essential cookies to operate the site (authentication sessions, security). We do not use tracking or advertising cookies without your consent. A full cookie policy will be published before launch.

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), row-level security on our database, and restricted access to personal data. No system is 100% secure; in the event of a data breach we will notify you and the ICO as required by law.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The “last updated” date at the top of this page shows when the policy was last revised.

Data protection queries: privacy@digitaljackpotz.com
General queries: hello@digitaljackpotz.com