Privacy Policy for PictureTheWinCompetitions Ltd

Last Updated: October 2026

PictureTheWinCompetitions Ltd (referred to as "the Company", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal data in strict compliance with the UK GDPR and the Data Protection Act 2018.

1. The Data Controller

The data controller responsible for your personal data is:

Company Name: PictureTheWinCompetitions Ltd
Company Registration Number: 17513885
Email Address: PictureTheWinCompetitions@gmail.com
Registered Office Address: 27 Southway, Camberley, Surrey, GU15 3EA

2. Data We Collect About You

To operate our prize draws legally and manage your user account, wallet, and payouts, we must collect the following mandatory information during registration:

Identity Data: Full Name, Date of Birth, and a photograph of your Government-issued ID (Driving Licence or Passport) for mandatory age verification.
Contact Data: Full Street Address, City, Postcode, Email Address, and Phone Number.
Financial & Payout Data: Bank Account Holder Name, Sort Code, and Account Number.
Transaction Data: Details of ticket coordinate purchases, bundle selections, promo codes applied, site credit balances, and payout history.
Technical Data: IP address, login timestamps, device type, and app usage data gathered during your Daily Wheel spins.

3. How and Why We Use Your Personal Data

We legally process your data under the following lawful bases:

Performance of a Contract: To manage your account, track your purchased ticket numbers, credit your wallet, process secure shopping cart transactions, and execute bank payouts.
Legal Obligation: To strictly enforce our 18+ age restriction gate under Section 339 of the UK Gambling Act 2005 and verify your physical address against your uploaded ID.
Legitimate Interests: To prevent fraud, protect our platform from cyber exploits, send you automated email ticket receipts, and alert you regarding winning draws.

4. Data Retention & Security

4.1. Security Measures: Your personal information and bank details are heavily encrypted and stored behind secure server firewalls. Passwords are fully hashed and invisible to Company staff. Uploaded copies of your identity documents are strictly masked and visible only to the verified administrator via the secure /admin panel for age verification.

4.2. Retention Period: We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including any legal, accounting, or regulatory reporting requirements.

5. Sharing Your Personal Data

We do not sell your personal data to any third-party marketing companies. We only share data with essential, compliant service providers to run the application:

High-Risk Payment Gateways: To securely process your shopping cart checkouts.
Transactional Email Gateways (e.g., Resend): To automatically dispatch your ticket numbers and payout summaries directly to your inbox.
Regulatory & Legal Bodies: We may share verification records if legally requested by HMRC, the Gambling Commission, or the Advertising Standards Authority (ASA).

6. Public Transparency & Winner Marketing

6.1. To prove our draws are completely genuine and compliant with UK lottery regulations, we are legally required to publish the Full Name and Town of all main draw and instant win winners publicly on our website and social media handles.

6.2. Winners agree to participate in reasonable post-draw marketing publicity (such as providing a photograph holding their prize note or voucher).

7. Your Legal Rights

Under the UK GDPR, you hold full legal rights regarding your data, including the right to:

Request access to the personal data we hold about you.
Request correction of any inaccurate or incomplete profile data.
Request erasure of your personal account, provided no active legal or financial accounting hold requires us to preserve it.
Withdraw consent for optional marketing emails at any point.

To exercise any of these rights, please contact our support desk at our registered business email address.