🔒 Privacy Policy

1. 🌊 Introduction & Scope

Coastal Lotto Australia Pty Ltd (ABN: 12 345 678 901) ("we," "us," "our," or "Coastal Lotto") is committed to protecting your privacy and personal information in accordance with the Australian Privacy Act 1988 (Privacy Act) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and manage your personal information when you use our lottery services, website, mobile applications, or communicate with us.

Scope: This policy applies to all personal information collected by Coastal Lotto Australia through any channel, including our website (coastallotto.com.au), mobile apps, phone calls, emails, postal mail, and in-person interactions.

2. 📝 Information We Collect

2.1 Personal Information

We collect personal information necessary to provide our lottery services safely and legally:

🆔 Identity Information:
• Full name, date of birth, gender
• Government-issued ID numbers (for verification)
• Photographs (for ID verification purposes)

📍 Contact Information:
• Residential address, postal address
• Email addresses, phone numbers
• Emergency contact details

💰 Financial Information:
• Bank account details, credit card information
• Transaction history, payment preferences
• Tax file number (for prize winnings over $1,000)

🎮 Gaming Information:
• Gaming preferences and history
• Account activity and login records
• Responsible gaming settings and limits

2.2 Technical Information

🌐 Website & App Usage:
• IP addresses, browser type, operating system
• Pages visited, time spent, click patterns
• Device identifiers, mobile network information

🍪 Cookies & Tracking:
• Session cookies for functionality
• Analytics cookies for service improvement
• Preference cookies for user experience

2.3 Sensitive Information

We may collect sensitive information only when necessary and with your explicit consent:

• Health information (for responsible gaming support)
• Criminal record checks (as required by law)
• Financial hardship information (for player protection)

3. 🎯 How We Use Your Information

4. 🤝 Information Sharing & Disclosure

We never sell your personal information. We only share information in these specific circumstances:

🏛️ Government & Regulatory Bodies:
• Australian Taxation Office (for prize winnings)
• AUSTRAC (for anti-money laundering compliance)
• State gaming regulators (for licensing compliance)
• Law enforcement (when legally required)

🔧 Service Providers:
• Payment processors (for secure transactions)
• Identity verification services
• Customer support platforms
• Cloud hosting and security providers

⚖️ Legal Requirements:
• Court orders or legal proceedings
• Protection of our legal rights
• Prevention of fraud or illegal activities
• Emergency situations threatening safety

💼 Business Transfers:
In the event of a merger, acquisition, or sale of business assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. 🛡️ Data Security & Protection

We protect your information with multiple layers of security, comparable to Australia's leading banks:

🔐 Technical Safeguards:
• 256-bit SSL encryption for all data transmission
• AES-256 encryption for stored sensitive data
• Multi-factor authentication for staff access
• Regular security audits and penetration testing
• Intrusion detection and prevention systems

🏢 Physical Security:
• Secure data centers with 24/7 monitoring
• Biometric access controls
• Environmental controls and backup power
• Restricted access to sensitive areas

👥 Administrative Controls:
• Background checks for all staff
• Regular privacy and security training
• Principle of least privilege access
• Incident response and breach notification procedures

⏰ Data Retention:
We retain personal information only as long as necessary for the purposes outlined in this policy, or as required by Australian law (typically 7 years for financial records).

6. ⚖️ Your Privacy Rights

Under the Australian Privacy Act 1988, you have the following rights:

7. 🍪 Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

🔧 Essential Cookies: Required for basic website functionality, login sessions, and security
📊 Analytics Cookies: Help us understand how you use our services to improve them
⚙️ Preference Cookies: Remember your settings and preferences
📢 Marketing Cookies: Used to show relevant advertisements (with your consent)

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect website functionality.

8. 🌏 International Data Transfers

Your personal information is primarily stored and processed in Australia. However, some of our service providers may be located overseas in countries including:

• United States (cloud hosting, analytics)
• European Union (customer support platforms)
• Singapore (payment processing)

We ensure international transfers comply with Australian privacy law through:

• Contractual protections requiring equivalent privacy standards
• Transfers only to countries with adequate privacy protections
• Your explicit consent where required by law

9. 📞 Privacy Contact Information

🛡️ Chief Privacy Officer:
Dr. Emma Williams
Email: privacy@coastallotto.com.au
Phone: 1800 PRIVACY (1800 774 8229)
Post: Privacy Officer, Coastal Lotto Australia
        Level 42, Ocean Tower
        123 Harbour Bridge Road
        Sydney NSW 2000

⏱️ Response Times:
• Privacy queries: Within 3 business days
• Access requests: Within 30 days
• Correction requests: Within 30 days
• Complaints: Acknowledged within 2 business days

🏛️ External Complaints:
Office of the Australian Information Commissioner (OAIC)
Website: oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au

📅 Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make significant changes, we will:

• Email registered users about the changes
• Display a prominent notice on our website
• Update the "Last Updated" date at the top of this policy
• Provide a summary of key changes

Your continued use of our services after policy updates constitutes acceptance of the revised terms.