Privacy Policy

Deserved Competitions ("we", "us", "our") is the data controller for the personal data we process about you when you use our website and enter our prize competitions. Our details are set out above. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Depending on how you use the site, we collect:

• Account data, your name, email address, date of birth, postal address and phone number.
• Identity and verification data, information and documents we use to confirm your age, identity, address and (where relevant) source of funds, and the results of those checks.
• Entry and competition data, the competitions you enter, your ticket numbers, your answers to skill questions, your wins, and your name-publication preference.
• Payment and wallet data, records of your orders, payments and withdrawals, and limited payment details. Card and cryptocurrency payments are processed by our payment providers; we do not store your full card number.
• Communications, messages you send us (for example support requests) and our replies, and your marketing preferences.
• Technical data, your IP address, device and browser information, and activity logs, collected through cookies and our systems to keep the site secure and working.

We use your personal data, and rely on the following lawful bases, to:

• run the competitions, allocate tickets, conduct draws, contact winners and pay prizes, to perform our contract with you;
• take payment and process withdrawals, and keep the wallet and financial records, to perform our contract and to meet our legal obligations;
• verify your age and identity and prevent fraud, money laundering and abuse, to meet our legal obligations and for our legitimate interest in running fair, lawful competitions;
• publish results, including winners' names where you have not opted out, to perform our contract and for our legitimate interest in transparent, provably-fair competitions;
• provide support, keep the site secure, and improve our service, for our legitimate interests; and
• send you marketing about competitions and offers, with your consent, which you can withdraw at any time.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object as described in section 8.

We only send marketing emails if you have opted in. You can opt out at any time using the unsubscribe link in our emails or in your account settings. We will still send you service messages about your entries, wins, payments and account, as these are necessary to provide the service.

We use cookies and similar technologies that are strictly necessary to run the site, for example to keep you logged in and to keep the site secure. These do not require consent.

Our website analytics are cookieless: we set no cookie and store nothing on your device for analytics, so no consent is needed. To measure visits we generate a pseudonymised, non-reversible hash from your IP address and browser that rotates every day and cannot be used to identify you or track you across days, and we keep only aggregate counts. We rely on our legitimate interests in understanding and improving how the site is used. If we ever introduce non-essential cookies, we will ask for your consent first.

We share personal data only where necessary, with:

• payment providers who process card and cryptocurrency payments and withdrawals;
• our hosting and database provider, which stores the site's data securely on our behalf;
• our email delivery provider, which sends our service and (where opted in) marketing emails;
• identity and fraud-prevention providers who help us verify users and protect the competitions;
• professional advisers (such as auditors and lawyers) and, where required, prize-fulfilment partners; and
• regulators, law enforcement and other authorities where we are legally required or permitted to do so.

Some of these providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, so your data stays protected. We do not sell your personal data.

We keep your personal data for as long as you have an account and for as long afterwards as we need it, for example to handle queries or disputes, and to meet legal, accounting and anti-fraud obligations. Financial and transaction records are typically kept for at least six years. When we no longer need data, we securely delete or anonymise it.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing in certain circumstances;
• receive certain data in a portable format; and
• withdraw any consent you have given, at any time, without affecting earlier processing.

To exercise any of these rights, contact us using the details above. We will respond within the time limits set by law. Some rights are qualified, for example we may need to keep certain data to meet legal obligations, so we cannot always erase everything on request.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.

Our service is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it and close any associated account.

We may update this policy from time to time. We will publish the updated version here with a new "last updated" date, and where changes are significant we will take reasonable steps to bring them to your attention.