Last updated: July 21, 2026
1. Who We Are
This website, ontario-lotto.org, is operated to support the charitable fundraising activities of Bluewater Gymnastics Club Sarnia, located at 1540 Lottie Neely Park Rd, Sarnia, ON N7T 7H4, Canada. The marketing campaigns and advertising infrastructure for this platform are managed by our advertiser, Instituto de Marketing y Comunicación S.L, with offices at P.º de la Castellana, 259, 28046 Madrid, España.
For any queries regarding your personal data, data collection, or to exercise your rights under applicable privacy legislation, please contact our Data Protection Office directly via email at support@ontario-lotto.org.
2. Information We Collect
To facilitate raffle entries, comply with AGCO license regulations, and process transactions securely, we collect several categories of personal data:
- Ticket Purchase and Registration Data: Full name, email address, physical billing address, telephone number, age confirmation, and geographic location details. This information is required to establish eligibility and delivery of ticket numbers.
- Transaction and Payment Data: Credit card numbers, billing names, and security codes. All transaction data is processed directly by our PCI-DSS Level 1 compliant payment gateway. Our servers do not store or transmit full credit card details.
- Technical and Analytical Data: IP address, device operating system, browser configuration, page interactions, referring URL, and session duration. This is collected through necessary and analytical cookies.
- Communication Records: Text transcripts, query records, and email addresses provided when submitting contact forms or emailing support.
3. How We Use Data
Personal data collected on this platform is processed for specific, documented purposes:
- To process and record raffle ticket transactions, generate unique entry numbers, and deliver transactional receipts to your inbox.
- To verify your eligibility, including confirming that you are at least 18 years of age and physically located in the Province of Ontario at the point of checkout, in accordance with AGCO raffle regulations.
- To contact winners and manage secure payment of prize winnings.
- To satisfy strict financial audit, anti-fraud, and regulatory reporting requirements of the Alcohol and Gaming Commission of Ontario.
- To run general troubleshooting, platform optimization, and analytics (subject to user consent for analytical tracking).
4. Data Sharing and Transfers
We do not sell, rent, or lease player databases to commercial third parties. Your personal information is disclosed to external partners only under the following conditions:
- Regulatory Bodies: Data will be shared with the Alcohol and Gaming Commission of Ontario (AGCO) for regulatory auditing and compliance reviews.
- Service Providers: Information is transferred to trusted payment gateways, transactional email services, and server hosting providers under strict data processing agreements.
- Legal Obligations: We may disclose information if required by law, court order, or governmental audit.
As the advertiser, Instituto de Marketing y Comunicación S.L is located in Spain, technical data and support tickets may be processed by entities outside Canada. In all such cases, we ensure that appropriate transfer mechanisms (such as Standard Contractual Clauses) are in place to preserve a level of data protection equivalent to Canadian standards.
5. Cookies and Tracking
We utilize cookies to maintain session states, protect security, and evaluate web traffic. Strictly necessary cookies do not track personal profiles and are enabled automatically. We only activate analytical tracking, including Google Analytics services, if you choose "Accept all" on our cookie consent banner. You may change your choice or withdraw consent at any time via the cookie settings on our website.
6. Data Retention
We retain player and transaction records for a period of seven (7) years to comply with Canadian tax laws, corporate records policies, and AGCO regulatory requirements. Personal information used exclusively for promotional alerts and email newsletters is retained until you submit an unsubscribe request. Unsubscribe links are provided at the footer of every email communication.
7. Security Measures
We implement comprehensive technical and organizational safeguards to protect player information:
- All communications and purchase pathways are encrypted using Transport Layer Security (TLS/HTTPS).
- Database storage utilizes standard encryption-at-rest protocols.
- Access to backend administration systems is restricted to authorized personnel who require access to verify winnings.
- Regular security testing is conducted to identify potential platform vulnerabilities.
8. Your Legal Rights
Under the Personal Information Protection and Electronic Documents Act (PIPEDA), Canadian residents have clear rights regarding their data. You have the right to request access to your records, ask for corrections to erroneous details, request restriction of processing, or lodge complaints. If you wish to exercise these rights, please write to our support desk. We will respond to valid requests within thirty (30) business days.
9. Policy Changes
We reserve the right to modify this Privacy Policy to align with new legal requirements or system changes. Any updates will be published on this page, and the "Last updated" date at the top will be updated accordingly. We encourage players to review this page periodically to remain informed about how we safeguard their data.