1. Information We Collect

We collect the information we need to provide you with a secure, personalised experience when using your KauriLotto account and our lottery products. This may include:

• Personal Identification: Name, email address, date of birth, and where required, residential address and verification documents (for age and identity checks, and account creation).
• Account and Preference Data: Saved number selections, game preferences, notification settings, ticket history and other choices you make within your account. We process payments for ticket purchases through trusted payment providers and do not store full payment card numbers on our systems.
• Technical Data: IP address, browser type, device information and operating system.
• Usage Data: Pages visited, time spent on site and click patterns, collected in an aggregated or pseudonymised form where possible.

2. How We Use Your Information

We use your data for the following specific purposes:

• To create, verify and manage your KauriLotto account, including your login credentials and security settings.
• To process ticket purchases, manage entries into KauriLotto draws and pay out prizes in line with our Game Rules and Terms & Conditions.
• To provide tools such as saved number lists, reminders and email updates that you have requested.
• To verify that you meet our 18+ requirement and any other eligibility criteria required by New Zealand law.
• To send you service-related messages (for example, account notifications, draw confirmations and prize updates) and, if you opt in, promotional content and jackpot or game news.
• To maintain, monitor and improve our website and systems, including performance, security and fraud prevention.

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: With trusted third parties who assist us in operating our website and services (e.g. hosting providers, payment processors, analytics and email services), under contractual obligations to keep your information confidential and secure.
• Legal and Regulatory Obligations: Where required by New Zealand law or by regulators, or to protect our rights, safety, users or the public.
• Business Transfer: In the event of a merger, reorganisation or sale of assets, where user data is a transferred asset, subject to appropriate safeguards.

4. Data Security

We implement industry-standard security measures, including SSL encryption (HTTPS), to help protect your data during transmission and storage. However, no method of transmission over the Internet is 100% secure and we cannot guarantee absolute security. You are responsible for keeping your login details safe.

5. Your Rights (Privacy Act 2020)

Under New Zealand law, you have the right to:

To exercise these rights, please contact our Privacy Officer at [email protected].

6. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, remember your preferences and analyse how our website is used. You can control your cookie preferences via our Cookie Settings page or through your browser settings.

7. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date. Where appropriate, we will also notify you by email or via an on-site notice. Your continued use of our website after any changes take effect will mean you accept the updated policy.