Privacy Policy

1. Introduction

This Privacy Policy outlines how ENDURING LOTTERY SYSTEMS (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you access and use our services through enduringlotterysystems.com (the “Website” or “Service”).

We are committed to protecting your privacy and complying with applicable data protection laws, including the Australian Privacy Act 1988 (Cth), the Spam Act 2003, and, where applicable, the General Data Protection Regulation (GDPR) (EU) 2016/679.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our Website.

2. Interpretation

Words with capitalized initial letters have defined meanings set out below. These definitions apply equally in both the singular and plural forms.

3. Definitions

Account: A unique user profile created by you to access certain parts of our Service.
Affiliate: Any entity that directly or indirectly controls, is controlled by, or is under common control with us. “Control” refers to ownership of at least 50% of voting securities or equivalent.
Company: Refers to ENDURING LOTTERY SYSTEMS, headquartered at 17 London Cct, Canberra ACT 2601, Commonwealth of Australia.
Cookies: Small text files placed on your device to help operate our Website and personalize your experience.
Country: Refers to the Commonwealth of Australia.
Device: Any internet-connected hardware (computer, mobile phone, tablet, etc.) used to access our Service.
Personal Data: Any information that relates to an identified or identifiable individual, either directly or indirectly.
Service: Refers to the Website, including its content, functionality, tools, and any digital services provided.
Service Provider: Any third-party entity or person engaged to process data on our behalf, including for analytics, hosting, or support purposes.
Usage Data: Information automatically collected through your interaction with the Service, including technical diagnostics and browsing behavior.
Website: Refers to enduringlotterysystems.com.
You: Refers to the individual accessing the Service, or the legal entity on whose behalf such access is made.

4. Information We Collect

We collect several types of information to operate effectively and provide you with the best possible experience when using our Service. This information is collected either directly from you or automatically through your use of the Website.

4.1 Personal Information You Provide

While using the Service, you may voluntarily provide us with personal data that can be used to identify or contact you, including:

Full name
Email address
Phone number
Mailing address or location data
Date of birth (for age verification purposes)
Account login credentials
Payment and billing information (processed via secure third parties)

You may also provide us with additional information through customer service inquiries, surveys, feedback forms, or participation in promotions.

4.2 Automatically Collected Usage Data

When you access or use our Website, we may collect certain data automatically, including but not limited to:

Device type, operating system, and browser details
IP address and geographic location (approximate)
Referring pages or search terms
Date and time of access
Pages viewed and time spent on each page
Unique device identifiers and diagnostic data

This data helps us understand how the Service is used and to improve performance, usability, and security.

4.3 Tracking Technologies

We use cookies and similar tracking technologies to monitor user behavior, maintain session continuity, and remember preferences. These may include:

Cookies: Small files stored on your device used to remember settings and activity.
Web Beacons: Tiny graphic files embedded in emails or web pages to track engagement.
Pixels: Code snippets that allow advertising or analytics providers to measure traffic and conversions.

You may manage cookie preferences through your browser settings or by visiting our Cookie Policy for more detailed controls.

5. How We Use Your Personal Data

We use the information we collect to provide, manage, improve, and personalize the Service. Specifically, we may use your personal data for the following purposes:

To create and maintain your account
To enable you to purchase and manage lottery tickets online
To verify your identity and age as required by law
To process payments securely through third-party payment providers
To send transaction receipts, ticket confirmations, and account updates
To provide customer support and respond to your inquiries
To send you service-related communications (e.g. jackpot alerts, ticket reminders)
To improve the performance, security, and usability of our Website
To detect and prevent fraud, unauthorized transactions, and abuse of the Service
To comply with legal obligations and assist law enforcement if required
To send promotional communications, offers, or surveys (only with your consent)

6. Legal Basis for Processing (GDPR Users)

If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases:

Contractual necessity: To provide you with access to the Service and fulfill our contractual obligations.
Legal obligation: To comply with laws such as anti-money laundering and age verification requirements.
Legitimate interests: To improve our Service, prevent fraud, and maintain security (where not overridden by your rights).
Consent: When required, we will obtain your explicit consent (e.g., for email marketing).

You have the right to withdraw your consent at any time where processing is based on consent.

7. Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, and to comply with legal, tax, or regulatory requirements.

Specifically, we may retain data related to lottery participation, transactions, or account activity for up to seven (7) years to comply with applicable Australian gambling, financial, and anti-fraud laws.

When data is no longer required, it will be securely deleted, anonymized, or archived in compliance with our retention policies.

8. Disclosure of Data

We do not sell or rent your personal data. However, we may disclose your personal information in the following cases:

To trusted service providers: Including IT, hosting, analytics, payment processors, and customer support partners who help us operate the Service.
To regulatory authorities: If required by law, subpoena, court order, or lawful request from a government agency.
To professional advisors: Such as auditors or legal counsel, to comply with legal obligations or enforce our rights.
In business transfers: If we undergo a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.

All third parties are contractually required to protect your personal data and use it only for specified purposes.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside of your jurisdiction, including countries that may not have the same level of data protection as your own. In such cases, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

These safeguards may include contractual clauses approved by relevant regulatory bodies, binding corporate rules, or the use of third parties certified under recognized international privacy frameworks.

10. Data Security

We take the security of your personal information seriously and implement a range of technical and organizational measures to protect it from unauthorized access, use, or disclosure. These measures include:

Encryption of sensitive data both in transit and at rest
Access controls and authentication requirements for staff and systems
Regular monitoring, audits, and vulnerability scanning
Secure infrastructure and third-party service providers
Incident response and data breach procedures in compliance with legal obligations

Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to improve our protections.

11. Your Rights and Choices

Depending on your location and applicable data protection laws, you may have the following rights in relation to your personal information:

Access: You may request access to the personal information we hold about you.
Correction: You may request that we correct inaccurate or incomplete data.
Deletion: You may request that we delete your personal data, subject to any legal or contractual retention obligations.
Objection: You may object to certain types of processing, such as marketing.
Restriction: You may request that we limit the use of your data in certain circumstances.
Portability: Where applicable, you may request a copy of your personal data in a structured, machine-readable format.
Withdraw Consent: If processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the contact details provided at the end of this policy. We may need to verify your identity before fulfilling certain requests. We will respond to valid requests within a reasonable timeframe, as required by law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, business practices, or the functionality of the Service. When we make material changes, we will revise the “Effective Date” at the top of this page and may provide additional notice where required by law.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, you may contact us using the information below:

Email (Privacy Queries): [email protected]
General Support: [email protected]
Postal Address: 17 London Cct, Canberra ACT 2601, Commonwealth of Australia

We aim to respond to all privacy-related inquiries in a timely and responsible manner, in accordance with applicable privacy regulations.

14. Children’s Privacy

Our Service is not intended for individuals under the age of 18, and we do not knowingly collect personal data from anyone under this age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such data and restrict access.

If you are a parent or legal guardian and believe that your child may have provided us with personal data, please contact us immediately at [email protected].