Privacy

This Privacy Policy explains how Winnow Lotto ("Winnow", "we", "us") collects and processes personal information when you use the Winnow Lotto website and related services ("Service").

Contact: support@winnowlotto.com.

• Account data: name, email, phone, country/currency preferences.
• Identity & verification data (where required): date of birth, address, and documents/verification results (KYC/AML).
• Order and transaction data: purchases, products, entry details, wallet activity, payment status (we may store tokenised payment references via processors, not full card numbers).
• Communications: support requests, emails, and messages you send us.
• Device and usage data: IP address, browser type, device identifiers, logs, and diagnostic data.
• Cookies: identifiers and preferences stored on your device (see Cookies section below).

• To create and manage your Account.
• To process Orders, provide results, and administer winnings and wallet balances where applicable.
• To verify identity/age/location and comply with legal obligations (including AML/KYC where applicable).
• To prevent fraud, misuse, and unauthorised access.
• To provide customer support and send service messages (e.g., receipts, confirmations, security alerts).
• To improve the Service (analytics, debugging, performance).
• To send marketing where permitted and where you have consented or where lawful (you can opt out anytime).

• Contract: to provide the Service and fulfil Orders you request.
• Legal obligation: to comply with laws (e.g., AML/KYC, accounting, fraud prevention).
• Legitimate interests: to operate, secure, and improve the Service and to prevent abuse.
• Consent: for optional marketing communications and certain cookies (where required).

We do not sell your personal information. We may share it with:

• Service providers: hosting, analytics, email/SMS delivery, fraud prevention, customer support tooling.
• Payment providers: to take payments and process refunds/chargebacks.
• Operational partners: where needed to fulfil the service model (e.g., ticket messenger/courier operations).
• Professional advisers: auditors, lawyers, and consultants where necessary.
• Authorities: where required by law, regulation, or court order.

Your information may be processed in countries outside your own. Where GDPR/UK GDPR applies and data is transferred internationally, we use appropriate contractual, technical, and legal safeguards.

We keep personal information only as long as necessary for the purposes described above, including legal, accounting, and fraud-prevention requirements. If you close your account, we may retain a limited subset of data to meet legal obligations.

We use administrative, technical, and organisational measures designed to protect personal information (including encryption in transit and controlled access). No system is 100% secure; please use strong passwords and keep your credentials private.

Depending on your location, you may have rights including:

• Access to your personal information
• Correction of inaccurate data
• Deletion (where applicable)
• Restriction or objection to processing (where applicable)
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a supervisory authority. If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint · If you are in the EU, you may contact your national data protection authority (a list is available at edpb.europa.eu).

To exercise these rights, contact support@winnowlotto.com. We may request verification of your identity before responding.

We use cookies and similar technologies on our website. Cookies are small text files placed on your device. We use them for the following categories of purpose:

• Essential cookies — Required for the Service to function. These include session management, security (CSRF protection), cart persistence, and locale preference. These cannot be switched off without breaking core functionality.
• Analytics and performance cookies — Help us understand how visitors use the Service so we can improve it. These include tools such as Google Tag Manager / Google Analytics. These are only placed where you have given consent.
• Marketing and advertising cookies — Used to measure the effectiveness of advertising and, where permitted, to support personalised advertising. These include the Meta (Facebook) Pixel. These are only placed where you have given consent.

When you first visit the site, you will be asked for consent before any non-essential cookies are placed. You can withdraw or change your cookie preferences at any time using the cookie settings link in the footer, or by adjusting your browser settings.

Most browsers allow you to refuse or delete cookies. Doing so may affect the functionality of the Service.

The Service is not intended for children. You must be at least 18 (or the legal age in your jurisdiction) to use the Service.

We may update this Privacy Policy from time to time. The "Last updated" date below shows when it was last changed.