Legal

Privacy Policy

Your privacy matters. This page explains how LottoBestNZ handles your information to keep it secure, transparent, and in line with New Zealand privacy laws.

Last updated: 27 November 2025

1. Information Collection

LottoBestNZ is an informational website. We do not sell tickets directly. We collect only the data necessary to provide a quality, secure experience, which may include:

  • Usage data: pages visited, time on page, referring URLs, device and browser type, approximate location (country/region).
  • Technical data: IP address (stored transiently for security), error logs, and diagnostics.
  • Communication data: details you submit via forms (e.g., name, email address, and message content) when you contact us.
  • Preference data: cookie choices, notification preferences, and saved settings.

We do not intentionally collect sensitive personal information. The site is intended for audiences aged 18+ due to the lottery topic; if you are a parent or guardian and believe a minor has provided personal information, please contact us so we can delete it.

2. Data Usage

We use collected data to:

  • Operate, maintain, and improve the website’s performance and accessibility.
  • Personalise content presentation (e.g., remembering preferences) and support responsive, mobile-friendly layouts.
  • Monitor site security, prevent fraud and misuse, and diagnose technical issues.
  • Respond to your enquiries and provide support.

Storage and protection: Data is stored using reputable hosting and cloud providers with strong access controls, encryption in transit (HTTPS), and least-privilege administrative access. We apply logging and monitoring to detect suspicious activity.

4. Third-Party Disclosure

We may share limited data with trusted service providers who help us operate and improve LottoBestNZ, for example:

  • Analytics providers to understand website usage and performance trends.
  • Security and hosting providers to deliver the site and protect against threats.
  • Communication tools used to process contact requests.

These providers are bound by contractual obligations to process data only on our instructions and to apply appropriate security. We do not sell personal information.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy or to comply with legal, regulatory, or security obligations. Typical retention periods:

  • Analytics/usage data: aggregated and/or anonymised as soon as practicable.
  • Contact enquiries: retained for up to 24 months for follow-up and audit, then deleted or anonymised.
  • Security logs: retained for a limited time based on threat monitoring needs.

You may request deletion of your personal information (subject to legal exceptions). See “Privacy Rights” below.

7. Security Measures

We implement administrative, technical, and organisational safeguards aligned with industry best practices, including:

  • HTTPS/TLS encryption in transit and hardened server configurations.
  • Access controls, least-privilege permissions, and multi-factor authentication for administrative accounts.
  • Regular updates, vulnerability patching, and monitoring for suspicious activity.
  • Backups and continuity planning proportionate to the nature of the site.

No method of transmission or storage is 100% secure; we continuously improve our controls to reduce risk.

8. Updates to Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, technologies, or legal requirements. When we post changes, we update the “Last updated” date at the top of this page. Substantive changes will be highlighted on-site or via other appropriate notices.

9. Compliance with Regulations

LottoBestNZ is operated with consideration for the New Zealand Privacy Act 2020 and its Information Privacy Principles. Depending on your location, we also consider applicable international frameworks such as the EU/UK GDPR regarding transparency, purpose limitation, data minimisation, security, and your rights.

If you believe your rights have been infringed, you may contact us first. You may also lodge a complaint with the Office of the Privacy Commissioner (New Zealand).

10. Contact Information

For privacy questions, requests, or complaints, please contact us:

11. Privacy Rights

Subject to applicable law, you may have the right to:

  • Access: request a copy of the personal information we hold about you.
  • Correction: ask us to correct inaccurate or incomplete personal information.
  • Deletion: request deletion of your personal information, where applicable.
  • Restriction/Objection: restrict or object to certain processing activities.
  • Portability: receive your data in a portable format, where technically feasible.
  • Withdraw consent: where processing relies on consent (e.g., non-essential cookies), withdraw at any time.

To exercise these rights, contact us using the details above. We will verify your identity and respond within applicable timeframes. We will not discriminate against you for exercising your privacy rights.