Privacy Policy

Data we collect

• Account: email, chosen username, full name (private, used only for prize fulfilment).
• Age confirmation: timestamp proving you confirmed you are 18+.
• Activity: purchase history, ticket allocations, Arena pulls, and reward history.
• Phone number (free entry only): if you choose the free entry route on a paid prize draw, we collect one UK mobile number and verify it via a 6-digit SMS code. The number is stored against your account to enforce one-verified-number-per-account and is never used for marketing. Paid entrants are not asked for a phone number.
• Referrals: the relationship recorded when someone signs up via your referral link.
• Technical logs: IP address, user agent, and error reports used for security and debugging.

How we use it

To run prize draws, deliver prizes, prevent fraud, and comply with UK legal obligations. We do not sell your personal data.

Who else sees it

• Our hosting and database provider processes your data on our behalf so the app can function. They are bound by a data-processing agreement and cannot use your data for their own purposes.
• Our payment provider (Nochex) receives payment details when you purchase tickets and processes the transaction. We do not store full card numbers.
• Our SMS verification provider (Twilio) receives phone numbers submitted for the free entry route so it can send the one-time SMS code and confirm the number is a UK mobile line.
• Google reCAPTCHA v3 receives the signals needed to score the free-entry request as human vs. bot. Its use is governed by Google's privacy policy and terms.
• We may share data with authorities where legally required (e.g. fraud investigations, court orders).

How long we keep it

Account and transaction data are retained for as long as the account is active and for a reasonable period afterwards to satisfy audit and legal requirements.

Your rights (UK GDPR)

You can request:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your account and associated data
• A portable copy of your data
• To object to certain kinds of processing

Contact us via the Contact page. We aim to respond within one month.

Cookies

We use strictly necessary cookies for authentication and session management. We do not currently use tracking or advertising cookies.

Contact

See the Contact page for how to reach us about your data.