This policy explains what personal data TopLotteryOnline ("we", "us") collects when you use www.toplotteryonline.com (the "Site"), why we collect it, who we share it with, how long we keep it and the rights you have over it. We keep collection to a minimum: the Site has no user accounts, we do not sell lottery tickets and we never ask for payment details.
1. Who is responsible for your data
TopLotteryOnline is the controller of the personal data described in this policy. For any privacy question or request, contact us through our contact form and start your message with "Privacy request".
2. What we collect and why
When you contact us
If you use the contact form we receive your name, e-mail address, your message and the browser type reported by your device (user agent, used to filter spam). We use this only to read and answer your message and to keep a record of the conversation. Legal basis: taking steps at your request and our legitimate interest in answering enquiries.
Analytics cookies (only with your consent)
If you accept analytics cookies, Google Analytics 4 records which pages you view, how you arrived, the type of device and browser you use and your approximate location (country/city derived from your IP address; Google Analytics does not store the IP address itself). We use this to understand which content is useful. Legal basis: your consent. Google Analytics and the Meta Pixel are delivered through Google Tag Manager, which we do not load at all until you opt in.
Marketing cookies (only with your consent)
If you accept marketing cookies, the Meta Pixel (Facebook) records page views and certain actions on the Site so we can measure and improve our advertising on Meta platforms. Meta may combine this with information it already holds about you under its own privacy policy. Legal basis: your consent.
Cookieless statistics and security
Our host, Vercel, provides Web Analytics and Speed Insights. These do not use cookies or identify you across sites: they produce aggregated counts of page views, page performance and clicks to our partner sites (the page you were on and the link you clicked). Like every web server, our hosting also processes your IP address and request details to deliver pages, prevent abuse and keep the Site secure. Legal basis: our legitimate interests in running a secure, working website.
When you click a link to a lottery operator
Links to partner sites such as theLotter carry our affiliate identifier so the operator can tell that you came from us. We do not pass your name, e-mail or any other personal data to the operator, and the operator does not share your identity with us; we only receive aggregated commission reports. Anything you do on the operator's site is governed by that operator's own terms and privacy policy. See our affiliate disclosure.
3. Who we share data with
We use the following service providers. Each processes data on our behalf under a data processing agreement, except Meta, which acts as a joint controller for data collected by the Meta Pixel.
| Provider | Purpose | Data |
|---|---|---|
| Vercel Inc. (USA) | Website hosting, cookieless analytics and performance monitoring | IP address, request data, aggregated usage |
| Supabase Inc. (USA) | Database storing contact-form messages | Name, e-mail, message, user agent |
| Resend (Plus Five Five, Inc., USA) | Delivering contact-form messages to our inbox | Name, e-mail, message |
| Google LLC / Google Ireland Ltd. | Tag Manager and Google Analytics 4 (with consent) | Usage data, device data, online identifiers |
| Meta Platforms Ireland Ltd. | Meta Pixel advertising measurement (with consent) | Usage data, device data, online identifiers |
We may also disclose data where required by law, to establish or defend legal claims, or to a buyer of the Site as part of a sale of the business. We do not sell personal data for money and we do not share it for cross-context behavioural advertising unless you have accepted marketing cookies.
4. International transfers
Our providers are based in, or store data in, the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred there, it is protected by the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or by the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Contact-form messages: deleted automatically 24 months after they are received.
- Google Analytics data: no longer than 14 months.
- Your cookie choice: stored in your browser for 6 months, after which we ask again.
- Hosting and security logs: kept for a short period by Vercel, then deleted.
Cookie lifetimes are listed in our Cookie Policy.
6. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing before the withdrawal;
- opt out of the "sale" or "sharing" of personal information and of targeted advertising;
- lodge a complaint with your local data protection authority.
Residents of the EEA, UK and Switzerland have these rights under the GDPR and UK GDPR. California and other US state residents have rights to know, delete, correct and opt out under the CCPA/CPRA and similar state laws; we will not discriminate against you for exercising them. Residents of Brazil have equivalent rights under the LGPD, including the right to information about the entities we share data with.
To exercise a right, send a request through our contact form. We may need to confirm your identity (for example, by replying from the e-mail address concerned) and will respond within one month, or within the period your local law requires. You may use an authorised agent where your law allows it.
7. Your cookie choices and Global Privacy Control
Analytics and marketing cookies stay off until you accept them in our cookie banner. You can change or withdraw your choice at any time: . If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of advertising cookies, even if you accepted them.
8. Children
The Site is intended for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us personal data, contact us and we will delete it.
9. Security
The Site is served only over encrypted HTTPS connections, contact messages are stored in an access-restricted database, and access to our systems is limited to the people who run the Site. No method of transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect your data.
10. Changes to this policy
We will update this policy when our practices change and show the revision date at the top of the page. If a change materially affects how we use data you have already given us, we will ask for your consent again where the law requires it.
Disclaimer
TopLotteryOnline is an independent information website. We are not a lottery operator, we do not sell tickets or accept bets, and we are not affiliated with or endorsed by any official lottery. Results, jackpots and other information are provided for general information only and may contain errors or be out of date: always confirm results with the official lottery operator before acting on them. Lottery play is gambling, is only for adults aged 18 or over (or the higher minimum age where you live) and may not be legal in every country; it is your responsibility to check the law that applies to you. Full terms, including the limits of our liability, are in our Terms of Use.