Privacy Policy

Privacy Policy Content

Policy Statement

This Privacy Policy ("Policy") sets out how personal information is collected, used, stored, and disclosed by GAINEROO PTY LTD (ABN: 36 638 202 114, ACN: 638 202 114), a licensed lottery facilitator operating under the laws of the Northern Territory, Australia. The platform is accessible at https://aussieluckynumbers.com and is governed by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and all other applicable State and Territory privacy and gambling legislation.

This Policy applies to all individuals who access or use the platform operated by GAINEROO PTY LTD ("we", "us", "our") through https://aussieluckynumbers.com ("Website"), or who engage with any services, features, functions, tools, or promotions made available via the Website.

By accessing or using the Website or our services, you acknowledge and expressly consent to the collection, handling, and disclosure of your personal information in accordance with this Policy.

All enquiries, complaints, or requests relating to this Policy — including privacy complaints or requests for access or correction — must be directed to:
Email: support@aussieluckynumbers.com

Table of Contents

1. What Information Do We Collect

We collect and process personal information directly provided by you, as well as data automatically collected through your use of the Website. The categories of information collected include:

Personal Information Provided by You

You may provide personal information when you: register an account; submit lottery entries; complete identity verification; subscribe to promotional communications; or engage with customer support.

This may include your full legal name, date of birth, residential address, contact details, hashed account credentials, verification documents, payment reference identifiers, purchase history, communication records, and expressed preferences.

You are responsible for ensuring that all personal information provided is accurate, complete, and up to date. Any changes must be promptly notified to support@aussieluckynumbers.com.

We do not collect sensitive personal information (as defined in the Privacy Act 1988) unless required for identity verification, legal compliance, or licence enforcement purposes.

Information Collected Automatically

We automatically collect technical and behavioural data associated with your session, including IP address, browser and device attributes, operating system, page navigation, interaction behaviour, session duration, and crash/error reports.

This information may be linked to your user profile when required for fraud prevention, security investigation, compliance auditing, or operational analysis.

Cookies and Tracking Technologies

We use cookies and equivalent technologies to enable secure login, measure usage, manage performance, and deliver advertising in accordance with platform compliance obligations.

Tracking includes authentication tokens, Google Analytics, Meta Pixel, Microsoft UET, affiliate tags, and consent management tools. Further details are provided in Section 5 and the standalone Cookie Policy.

2. How We Process Your Information

Your personal information is processed solely for lawful purposes, including:

• To establish, manage, and secure your user account;
• To facilitate the lawful purchase of matched overseas lottery tickets;
• To verify your identity and confirm eligibility under licence conditions;
• To investigate and prevent fraudulent, abusive, or unlawful conduct;
• To respond to enquiries, support requests, and complaints;
• To generate aggregated reporting for platform governance and oversight;
• To issue notifications, confirmations, and legally required disclosures;
• To deliver promotional content or platform updates where legally permitted;
• To comply with Northern Territory gambling licence obligations, Australian law, or regulatory directives.

All processing is carried out under internal controls aligned with the Australian Privacy Principles and industry-standard data protection practices. Personal data will not be used for purposes unrelated to its original collection, except with your informed consent or where required by law.

3. Legal Bases for Processing

We rely on the following lawful bases for processing your personal information in accordance with the Privacy Act 1988 (Cth) and associated legal and regulatory requirements:

Legal Basis	Description
Consent	You have explicitly consented to the processing of your information for specified purposes, including receiving marketing communications or enabling tracking. Consent may be withdrawn by emailing support@aussieluckynumbers.com.
Contractual Necessity	Processing is required to provide the services you request, including account management, entry validation, and prize fulfilment.
Legal Obligation	Processing is required to comply with obligations under Australian law, such as anti-money laundering legislation, tax laws, or regulatory compliance under NT licence conditions.
Legitimate Interests	Processing is necessary to protect our legitimate business interests in maintaining platform integrity, optimising user experience, and securing our digital infrastructure, provided these interests are not overridden by your rights.

We will not process your personal information without a valid legal basis. When required by law, we will make reasonable efforts to notify you of the applicable basis prior to processing.

4. Sharing and Disclosure of Personal Information

We disclose personal information only where necessary for lawful operation of the Website, fulfilment of services, or to comply with legal obligations imposed under Australian law, including Northern Territory gambling and licensing regulations.

Personal information may be disclosed to the following categories of recipients:

• Identity verification providers engaged to assess eligibility and compliance;
• Payment processing providers responsible for transaction authorisation and reconciliation;
• Cloud service operators and hosting providers offering secure infrastructure for data storage and application availability;
• Marketing and analytics providers engaged for permitted advertising, campaign attribution, and performance tracking in compliance with Google Ads and Microsoft Ads policies;
• Affiliate platforms and campaign managers supporting referral-based participation;
• Legal and compliance consultants, auditors, or regulatory assessors;
• Government agencies, law enforcement, or regulatory authorities where required by subpoena, warrant, or statutory reporting duty;
• Entities involved in any actual or proposed acquisition, restructuring, or transfer of assets, where necessary to ensure business continuity and legal succession.

We do not sell, lease, or exchange your personal information for unrelated third-party marketing purposes.

All third-party service providers are subject to contractual confidentiality obligations and must only process personal information in accordance with applicable data protection laws and our express instructions.

We take reasonable steps to ensure that all disclosures are proportionate, legally authorised, and subject to adequate safeguards, particularly when cross-border transfer is involved. Where data is transferred outside of Australia, we ensure that the receiving entity is either subject to substantially similar privacy obligations or that express consent has been obtained.

5. Cookies and Tracking Technologies

The Website uses cookies and related technologies to facilitate secure access, monitor technical performance, analyse visitor engagement, and manage digital marketing activities in accordance with advertising platform rules.

Cookies are small text files placed on your device which perform essential and optional functions, such as remembering your login, identifying your session, and allowing the delivery of personalised content and remarketing.

We implement all tracking technologies in compliance with the Australian Privacy Principles, the Spam Act 2003 (Cth), and the platform-specific data usage requirements of Google, Microsoft, and Meta. Only non-essential cookies are deployed after you provide affirmative consent through our Consent Management Platform (CMP), such as CookieYes.

The table below lists the core tracking technologies used on the Website:

Tool	Purpose	Privacy Policy Link
Google Analytics	Visitor behaviour analysis, page performance, engagement stats	https://policies.google.com/privacy
Meta Pixel (Facebook)	Conversion tracking, ad campaign attribution, remarketing	https://www.facebook.com/policies/cookies/
Microsoft UET Tag	Advertising attribution and segmentation via Microsoft Ads	https://privacy.microsoft.com/privacystatement
Microsoft Clarity	Heatmaps, session replays, user interaction monitoring	https://clarity.microsoft.com/terms
Affiliate Tracking Cookies	Referral campaign attribution and affiliate payout logic	As provided by the referring affiliate network
CookieYes Consent Manager	Capturing and enforcing consent preferences under Google Consent Mode	https://www.cookieyes.com/privacy-policy/

Users may control their cookie preferences by:

• Adjusting settings via the cookie consent banner presented upon first access;
• Using browser-level controls to delete, block, or restrict cookies;
• Employing vendor-specific opt-out tools provided by advertising networks.

If you decline non-essential cookies, your access to the Website will not be restricted, although some personalised features may not function as intended.

6. Data Retention

We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required under applicable legislation, contractual terms, or regulatory obligations.

Retention periods are determined with reference to:

• Operational necessity to maintain an active account;
• Mandatory retention periods under financial, tax, and AML/CTF laws;
• NT licensing conditions requiring preservation of transaction logs and customer verification records;
• Statutory limitation periods applicable to disputes or claims;
• Requirements imposed by law enforcement, regulators, or court orders.

Upon account closure, personal data will be retained for a period consistent with statutory requirements, audit readiness, or compliance certification, and will then be securely deleted or irreversibly anonymised.

Archived data may be stored in secure, encrypted backup environments for disaster recovery and evidentiary integrity.

Requests for deletion or data access will be assessed in accordance with the criteria set out in Section 12.

7. Data Security

We implement and maintain physical, administrative, and technical safeguards to protect personal information against unauthorised access, misuse, loss, alteration, or disclosure. These measures are designed to ensure the integrity, confidentiality, and availability of all data processed through the Website.

Security protocols include:

• Encryption of all data in transit using Transport Layer Security (TLS);
• Hosting on secure, firewalled infrastructure with multi-zone failover;
• Multi-factor authentication (MFA) and access logging for administrative interfaces;
• Role-based access controls enforcing least-privilege principles;
• Regular patching, vulnerability scanning, and external penetration testing;
• Monitoring and alerting for unauthorised or anomalous activity;
• Segregation of customer data from internal operations and third-party systems.

Despite our best efforts, no data storage or transmission system is completely secure. Users are responsible for maintaining the confidentiality of their login credentials and must immediately notify support@aussieluckynumbers.com of any suspected unauthorised access or security compromise.

In the event of a data breach involving personal information, we will take all legally required steps under the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988, including notification to affected individuals and to the Office of the Australian Information Commissioner (OAIC), where applicable.

8. Children and Age Restriction

This Website and all associated services are strictly limited to individuals aged 18 years or older.

GAINEROO PTY LTD is a licensed lottery operator governed by age-based eligibility rules and responsible gambling obligations. We do not knowingly solicit or collect personal information from persons under the age of 18.

Age verification procedures are conducted during account registration. Where it is identified or reasonably suspected that a user is a minor:

• The account will be immediately suspended or deleted;
• All associated personal data will be permanently removed;
• Authorities may be notified in accordance with our legal obligations.

If you become aware that a person under 18 has accessed the Website or submitted personal information, please report the matter immediately to support@aussieluckynumbers.com.

9. Your Privacy Rights

As an Australian resident, or where applicable under cross-border privacy regulations, you may exercise the following rights in relation to the personal information we hold about you:

Categories of Personal Information We May Hold

Category	Examples
Identity Information	Full name, date of birth, government-issued ID (e.g. driver's licence, passport)
Contact Information	Email address, phone number, postal address
Account Information	Username, password (encrypted), transaction history
Financial Information	Payment method details, withdrawal records, account verification documents
Device and Usage Data	IP address, browser type, operating system, access times, usage logs
Marketing Preferences	Communication opt-ins, promotional tracking data
Gambling Activity Data	Ticket purchases, draw entries, responsible gambling limits and exclusions

Your Legal Rights Under the Privacy Act

Right	Description
Access	Request confirmation of whether we hold your personal information and obtain a copy of it.
Correction	Request correction of inaccurate, incomplete, or outdated personal information.
Erasure	Request deletion of personal information no longer required, unless we are legally required to retain it.
Objection	Object to processing for direct marketing or analytical profiling.
Restriction	Request limited use of your personal information in certain circumstances.
Withdrawal of Consent	Withdraw previously given consent, including for promotional communications or tracking technologies.
Portability	Request a copy of your personal information in a structured, machine-readable format.

We may require verification of your identity before processing any rights-based request. To exercise your rights, submit a written request to support@aussieluckynumbers.com. We will respond within thirty (30) calendar days, in accordance with our obligations under the Privacy Act 1988 (Cth).

If you are not satisfied with our response, you may lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

10. Do-Not-Track Controls

Some web browsers and mobile operating systems include a "Do Not Track" (DNT) setting. This feature allows users to indicate a preference not to have their online browsing activity tracked.

Currently, there is no universally accepted standard for recognising or responding to DNT signals. Accordingly, the Website does not respond to DNT settings at this time.

We will continue to monitor legal developments and may implement DNT recognition if it becomes an enforceable standard under Australian law or is mandated by platform policy.

Users may control cookie-based tracking through the following alternatives:

• Use of our cookie consent platform on first visit to the Website;
• Adjusting browser settings to block or delete cookies;
• Opting out via tools provided by analytics and ad vendors.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, internal practices, platform functionality, or data processing activities.

Any changes will be published on the Website and indicated by a revised "Last Updated" date at the top of the Policy. Material changes affecting your rights or our obligations will be communicated via:

• Notices displayed on the Website;
• Direct email communication (if you have an active user account); or
• Any other method required by law or appropriate under the circumstances.

You are responsible for reviewing the Privacy Policy periodically to ensure that you remain informed about how we handle your personal information.

Continued use of the Website after any update constitutes your acceptance of the revised Policy.

12. Contacting Us & Data Requests

All enquiries, complaints, or requests relating to this Privacy Policy — including access, correction, or deletion of personal information — must be directed to:

Email: support@aussieluckynumbers.com

Postal Address:
GAINEROO PTY LTD
Tower One Barangaroo
Level 35, 100 Barangaroo Avenue
Sydney NSW 2000
Australia

To request access to, correction of, or deletion of your personal information, you must submit a written request to the email address provided above. We may require you to verify your identity before processing any such request, in order to protect the security and integrity of your information.

All valid requests will be assessed and responded to within thirty (30) calendar days, in accordance with our obligations under the Privacy Act 1988 (Cth). Please note that we may decline a request in circumstances where:

• The information must be retained to comply with a legal obligation, including financial or gambling regulations;
• There is an active dispute, investigation, or unresolved transaction;
• The request is manifestly unfounded, excessive, or would unreasonably impact the privacy of others;
• Deletion would breach obligations under anti-money laundering (AML), counter-terrorism financing (CTF), or gambling licence conditions.

Where access or deletion is granted, we will provide confirmation in writing once the request has been fulfilled or the relevant data has been permanently deleted or anonymised.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) by visiting https://www.oaic.gov.au.