Privacy Policy

1. Introduction

OnePick Draw Lottery Corporation ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our website and services.

We operate in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. By using our platform, you consent to the practices described in this policy.

2. Information We Collect

Personal Information You Provide

When you create an account, purchase tickets, or contact us, we may collect:

  • Full name and date of birth (for age verification)
  • Email address and phone number
  • Mailing address (for prize delivery, if applicable)
  • Payment information (processed securely through our payment provider)
  • Government-issued identification (for high-value prize claims)

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address and approximate geographic location
  • Browser type, device type, and operating system
  • Pages visited, time spent on site, and referral sources
  • Cookies and local storage data (see our Cookies Policy)

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Process lottery ticket purchases and validate entries
  • Notify you of draw results and prize winnings
  • Verify your identity and age in compliance with provincial regulations
  • Communicate with you about your account, transactions, and promotions
  • Improve our platform, services, and user experience
  • Comply with legal and regulatory obligations, including anti-money laundering (AML) requirements
  • Detect and prevent fraud, unauthorized access, and other security threats

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information with:

  • Service Providers: Trusted third parties that assist us with payment processing, data analytics, email delivery, and customer support. These providers are contractually obligated to protect your data.
  • Regulatory Authorities: Provincial gaming commissions and law enforcement agencies, where required by law or to comply with regulatory obligations.
  • Legal Proceedings: In response to court orders, subpoenas, or legal processes where we are required to comply.

5. Data Security

We implement robust security measures to protect your personal information, including:

  • 256-bit SSL/TLS encryption for all data transmissions
  • Encrypted storage of sensitive personal and financial data
  • Multi-factor authentication for account access
  • Regular security audits and vulnerability assessments
  • Strict access controls limiting employee access to personal data
Important: While we take every reasonable precaution to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

6. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act, you have the right to:

  • Access your personal information held by us
  • Correct any inaccurate or incomplete information
  • Withdraw consent for certain data processing activities
  • Request deletion of your personal data, subject to legal retention requirements
  • File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, please contact our Privacy Officer at privacy@onepickdrawlottery.ca or write to us at:

Privacy Officer
OnePick Draw Lottery Corporation
123 King Street West
Toronto, Ontario M5X 1A9, Canada

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable laws and regulations. Account data is retained for the duration of your active account plus a minimum of 7 years after closure, in accordance with provincial gaming and tax regulations.

8. Children's Privacy

Our services are not intended for individuals under the age of 19. We do not knowingly collect personal information from minors. If we discover that a minor has provided us with personal data, we will promptly delete it and terminate the associated account.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on this page and, where appropriate, by email notification.

Last updated: