Healthlottery Privacy Policy
Playing the lottery online means handing over some personal details, so it’s only fair you know exactly what happens to them. This page breaks down how Healthlottery collects, uses, shares and protects your data — in plain English, no legal waffle.
What information does Healthlottery collect?
Healthlottery collects four broad types of data: the details you give at registration, your transaction and play history, technical data from your device, and records of any conversations you have with the operator’s support team. Together these let the operator run your account and meet its legal duties.
Personal data collected during registration
To open an online account you must be 18 or over, hold a GB bank account and live at a GB address. Registration via the Sign up link collects your email address — which becomes your permanent username — plus identity details needed to verify your age and eligibility, as required by the operator’s UK Gambling Commission licence.
Transaction and play history
Because play is funded by debit card, and subscriptions such as Superdraw VIP, Big Win Classic VIP and Big Win All Draw VIP are paid by monthly Direct Debit or recurring debit card payment, the operator records your payment method details, deposits, ticket purchases (£1 per lottery entry) and any withdrawals you make through My Account > My Wallet > Withdraw funds.
Technical and usage data
Like most sites, Healthlottery logs how you browse: pages visited, device type, browser, IP address and cookie identifiers. This helps the operator keep the site secure and spot anything unusual on your account.
Communication records
Contact support on 0330 390 22 89 (09:00 to 17:30 Monday to Friday) or via help@healthlottery.co.uk, and the operator keeps a record of that conversation. It’s useful if you ever need to follow up on a dispute or a withdrawal query.
How does Healthlottery use your information?
Your data is used to run the lottery service itself, pay out prizes, send marketing only where you’ve agreed to it, and satisfy the operator’s regulatory obligations. Nothing exotic — each use ties back to running your account or a legal requirement.
Operating lottery services
Your account data lets the operator enter you into draws — The Big Win draws normally run Tuesday to Saturday, with sales closing at 19.45 on draw days — credit winnings, and apply the safer gambling tools you set, such as deposit limits, time-outs or self-exclusion.
Prize fulfilment and payment
When you win, the operator uses your stored debit card details to return withdrawals to your card, asking for your password as a security check before processing. Wednesday and Saturday entries also generate a free entry into the Free Prize Draw, and that too is tracked against your account.
Marketing communications (with consent)
Promotional emails and offers — including the welcome bonus of 50% up to £1 — are only sent where you’ve opted in. You can withdraw that consent at any time through your account settings without affecting your ability to play.
Legal and regulatory compliance
The Health Lottery ELM Limited is licensed and regulated in Great Britain by the Gambling Commission under Account number 26057 (licence numbers 000-026057-R-309179 and 000-026057-N-309180). That licence obliges the operator to verify age, prevent money laundering, and keep accurate records — all of which require processing your data.
Does Healthlottery share your data with third parties?
Yes, but in limited, defined ways: payment providers that process your debit card and Direct Debit payments, regulators and law enforcement where legally required, and health cause partners who receive only anonymised data. The operator does not sell your personal data.
Payment processors and service providers
Debit card payments, monthly Direct Debit collections and recurring card payments all run through third-party payment processors. These providers handle your card details under their own strict security obligations and only for the purpose of completing your transactions.
Regulatory bodies and legal requirements
The operator may disclose information to the UK Gambling Commission, law enforcement or courts where the law demands it — for example, in fraud investigations or responsible gambling interventions coordinated with services like GAMSTOP.
Health cause partners (anonymised data)
20% of every lottery draw ticket and online scratchcard goes to good causes, with £137,774,474 raised for communities across Great Britain to date. Reporting to the health cause partners who distribute these funds uses aggregated, anonymised figures — never data that identifies you personally.
No sale of personal data
To be clear: the operator does not sell your personal information to advertisers, data brokers or anyone else. Sharing is limited to the categories above.
What privacy rights do you have?
Under UK GDPR you can access your data, correct it, request deletion, object to certain processing, and take your data elsewhere. You also have the right to complain — first to the operator, then to the Information Commissioner’s Office (ICO).
- Access: ask for a copy of the personal data held about you.
- Correction: fix anything inaccurate, such as an old address.
- Deletion: request erasure, though the operator may need to keep some records to meet Gambling Commission obligations.
- Objection: opt out of marketing or object to processing based on legitimate interests.
- Portability: receive your data in a structured, machine-readable format.
- Complaints: raise concerns with the operator first via help@healthlottery.co.uk, then escalate to the ICO if unresolved.
How does Healthlottery protect and retain your data?
The operator applies security controls such as password-protected withdrawals and encrypted payment handling, keeps data only as long as legal and regulatory rules require, and uses cookies to run the site. Transfers outside the UK, where they occur, must carry appropriate safeguards.
Security measures in place
Withdrawals require your password before funds move back to your debit card, and payment processing runs through PCI-compliant providers. Account access is tied to your registered email address, so keeping that inbox secure matters too.
How long your data is kept
Retention follows the operator’s licensing duties: identity and transaction records are typically held for a period after account closure to satisfy Gambling Commission and anti-money-laundering rules, while marketing data is dropped once you withdraw consent. Prize Tickets themselves expire 180 days after issue, but that’s a play rule rather than a data one.
International data transfers
If any service provider processes data outside the UK, UK GDPR requires equivalent protection — usually through standard contractual clauses or an adequacy decision. The operator’s published privacy notice at healthlottery.co.uk sets out the current position.
Cookie policy summary
Cookies handle essentials like keeping you logged in and remembering your preferences, alongside analytics that show how the site is used. You can manage or refuse non-essential cookies through your browser settings.
For the wider picture of how the operator works, the about Healthlottery covers the company background, and the Healthlottery terms and conditions explains the contractual side of playing. The homepage is the place for everything else.
Frequently asked questions about Healthlottery
What personal information does Healthlottery collect?
Registration details (including your email, which acts as your username), identity and age verification data, debit card and Direct Debit payment details, transaction and play history, technical browsing data such as IP address, and records of any support conversations by phone or email.
How does Healthlottery use my data?
Mainly to run your account: entering you into draws, crediting winnings, processing withdrawals to your debit card, and applying safer gambling limits you set. Marketing is sent only with your consent, and some processing — like age verification — is a legal requirement under the operator’s Gambling Commission licence.
Can I request Healthlottery delete my personal information?
Yes — UK GDPR gives you the right to request erasure by contacting help@healthlottery.co.uk. Bear in mind the operator may lawfully retain certain records, such as identity and transaction history, for a period afterwards to meet anti-money-laundering and Gambling Commission obligations.
Does Healthlottery share my data with third parties?
Only in limited cases: payment processors handling your debit card and Direct Debit payments, regulators and law enforcement where legally required, and health cause partners who receive anonymised, aggregated data only. The operator does not sell personal data to anyone.
How long does Healthlottery keep my account data?
Data is retained for as long as your account is active, plus a further period after closure to satisfy licensing and financial record-keeping rules. Marketing preferences are removed once you withdraw consent. The full retention schedule appears in the operator’s privacy notice at healthlottery.co.uk.
Now you know how your data is handled, you can play with confidence. Fancy giving it a go?