Privacy Policy

Black Card Lottery Privacy Notice

At Black Card Lottery we take the protection of Personal Data seriously. In this Privacy Notice we’ll explain what Personal Data we collect from you, how we use and share that data, how we keep your Personal Data safe, and how long we keep it for. We’ll also explain how we Process your data (and the Legal Basis for doing so) and help you to understand your Personal Data Rights.

What do we mean by Personal Data?

Personal Data is any information that could be used to identify you. That could be anything from your name and address, your bank details, your email address, an image or recording of you, your IP address or any other data that could be used to identify you. Occasionally we collect and process another type of Personal Data called Special Category Personal Data.

What do we mean by Special Category Personal Data?

Special Category Data is Personal Data of a sensitive nature. We only collect Special Category Data in specific circumstances. Normally this would be if you ask to self-exclude from gambling and where you choose to share information with us about your gambling habits. As a responsible lottery we use data about your exclusion status and play behaviour to make decisions about whether participating in the Lottery is in your best interests. If we have concerns, you will be unable to play.

The Personal Data we collect

We collect your Personal Data when you register to play, when you contact us online through the “Sign up form” on the website, through live webchat and where you interact with us on social media like Facebook.

The Personal Data we collect when you join

We collect the following Personal Data when you join the lottery

Your name
Your age
Your email address
Your full address
Details of your chosen payment method and how many tickets you’d like to play with
We may ask you how you heard about us.

If you tried to join online but didn’t complete the process we may try and contact you by phone for up to one month to see if we can help you sign up. We do not collect or store customer credit card details. We will keep your data for analytical purposes for twelve months, after which your Personal Data will be erased if you have not joined.

Social media

We operate pages on Facebook, Instagram and Twitter. If you are a user of those services you can contact us publicly or in a direct message and share information with us on those pages if you wish to. We won’t ask you for any Personal Data on the open forums of any social media account or discuss details of your account but our team will be more than happy to call you back, send you a private message or email you. We use posts on social media to analyse customer service issues that may be affecting our customers and to ensure that we are dealing efficiently with such issues. We will keep a record of that information for 12 months .

Where you interact with us on social media, Personal Data may be collected by the platform provider with whom you have an account who may use it independently from us. We have no control over, and accept no liability for, how they use your Personal Data. You can access more information about how they use data gathered from their websites here:

Facebook
Instagram
Twitter

General Data Protection Regulation

What is a Legal Basis to collect and Process Personal Data?

Under GDPR (the General Data Protection Regulation) there are a number of Legal Bases that a Data Controller can use to Process or share Personal Data.

The Legal Bases Black Card Lottery rely on to Process Your Personal Data Consent

Consent means you've given us clear and informed permission to Process your Personal Data. Consent is a Legal Basis to Process Personal Data. An example might be where you have asked us to send you promotional materials. Remember, you can withdraw your Consent at any time.

Our Contract with you

When you play the lottery you enter into a contract with us. A contract is a Legal Basis to Process Personal Data. As a player/Member we have several contractual obligations to you. These include (but aren't limited to) processing your monthly payments, paying out or delivering prizes, and informing you of important news about our service and your account.

Legal and Regulatory

Sometimes we have a Legal or Regulatory obligation to Process your Personal Data. These are Legal Bases to Process Personal Data. That might include conditions relating to our operating licence (issued by the Gambling Commission) and to other relevant laws.

Legitimate Interest

Sometimes we have a Legitimate Interest to Process your Personal Data. Where we use Legitimate Interest to Process your Personal Data we'll ensure that our Legitimate Interests are proportional and do not compromise your Personal Data rights. You can object to us Processing your data for Legitimate Interests at any time.

Playing and Payment

While you play

We will retain records of all correspondence we've had with you. This might include telephone calls, emails, letters, web-chats, and chats via our social media channels. This helps us manage your account, improve our services, and deal with any queries or complaints that may arise. We do not store customer credit card details.

If you’re a lucky winner

If you win a non-cash prize, we use your name and address and postcode to deliver your prize. We have a Contractual obligation to do this. We use a third-party Data Processor to deliver the non-cash prizes.

We may contact you to invite you to an event to celebrate your win.

If you no longer play

We may contact you for up to 24 months after you cancelled to ask if you’d like to start playing again. We use Legitimate Interest to Process your Personal Data in this way. You can get in touch if you'd prefer not to be contacted about re-joining and we’ll remove your details from our re-joining list.