Healthlottery Privacy Policy
Every ticket bought on Healthlottery, every £1 entry into The Big Win, leaves a trail of personal data behind it — and players deserve to know exactly where that trail leads. This independent review breaks down how the operator collects, uses, shares and protects player information under UK GDPR, in plain English.
Information We Collect
Healthlottery collects the personal details you hand over when opening an account: full name, date of birth (to confirm you are 18 or over), email address, GB home address and debit card details. Your username is always the email address used at registration, which makes that address the central key to your entire account profile.
Beyond registration, the operator records your transaction and play history. That includes every £1 lottery entry purchased, subscription payments (Superdraw VIP at £6.75 a month, Big Win Classic VIP at £17.00 a month, or Big Win All Draw VIP at £23.75 a month) taken by monthly Direct Debit or recurring debit card payment, and any withdrawals requested via My Account > My Wallet > Withdraw funds.
Technical and usage data rounds out the picture. Like most licensed gambling sites, the platform logs device information, IP addresses, login times and how you move through healthlottery.co.uk — the pages you visit, the games you open, the time you spend on draws versus online scratchcards.
- Identity data: name, date of birth, GB address, email (used as your username)
- Financial data: debit card details, Direct Debit mandates, transaction records
- Behavioural data: draws entered, scratchcards played, deposit and play limits you set
- Communication records: emails to help@healthlottery.co.uk and calls to 0330 390 22 89
How We Use Your Information
Healthlottery uses your data to run the lottery services you signed up for: processing ticket purchases for The Big Win draws (normally held Tuesday to Saturday, sales closing at 19.45 on draw days), managing subscriptions, and crediting winnings to your account wallet.
Prize fulfilment and payment sit at the heart of the processing. When you win — whether a draw prize or a Free Prize Draw award of at least £100,000 — the operator needs your verified identity and debit card details to return funds securely, which is why withdrawals require your password.
Marketing communications only flow with your consent. The operator documents that promotional messages about new draws, scratchcards and offers go to players who have opted in, and that consent can be withdrawn at any time through account settings or the unsubscribe link in any email.
Finally, there is legal and regulatory compliance. As a Great Britain society lottery licensed by the UK Gambling Commission — licence numbers 000-026057-R-309179 and 000-026057-N-309180, Account number 26057 — the operator must verify age, prevent money laundering, and honour responsible-gambling tools such as time-outs and self-exclusion from 6 months to 5 years. Processing for those purposes is a legal obligation, not a choice.
Data Sharing and Third Parties
Healthlottery shares personal data with a narrow circle of recipients, and the operator is clear that personal data is never sold.
- Payment processors and service providers — debit card transactions, Direct Debit collections and withdrawal payouts run through third-party payment partners who handle card data under their own strict security obligations.
- Regulatory bodies — the UK Gambling Commission can require disclosure of player and transaction records as part of licence compliance, and law enforcement requests are honoured where legally binding.
- Health cause partners — 20% of every lottery draw ticket and online scratchcard goes to good causes, with £137,774,474 raised for communities across Great Britain to date. Reporting to these partners uses anonymised, aggregated figures — your individual play is never attached to your name in that reporting.
- Player-protection organisations — where self-exclusion is activated, data flows to GAMSTOP so the exclusion applies across participating operators.
The important line in the operator’s approach: no personal data is sold to advertisers, data brokers or unrelated marketers. The commercial model is ticket sales, not data resale.
Your Privacy Rights
Under UK GDPR, every Healthlottery player holds a full set of data rights, and exercising them costs nothing. Contact the operator via help@healthlottery.co.uk or on 0330 390 22 89 (09:00 to 17:30, Monday to Friday) to raise any request.
Access. You can request a copy of all personal data the operator holds on you — registration details, play history, communication records.
Correction and deletion. Inaccurate details can be corrected, and you can ask for your data to be erased. One honest caveat: deletion is not absolute. Gambling Commission licence conditions and financial-record laws oblige the operator to retain certain transaction data for defined periods, so an erasure request closes your account and removes marketing data but cannot wipe records the law requires the operator to keep.
Objection and portability. You may object to processing based on legitimate interests — marketing profiling being the classic example — and you can request your data in a portable, machine-readable format.
Complaints. If a response from the operator leaves you unsatisfied, you can escalate to the Information Commissioner’s Office (ICO), the UK’s independent data protection authority. That right exists regardless of any dispute you may also have about the account itself.
Data Security and Retention
Security measures described by the operator include password-protected account actions (withdrawals explicitly require your password), encrypted payment handling for debit card and Direct Debit data, and age-verification checks at registration. Winning numbers themselves are produced by an approved random number generator, and account access is tied to the email address registered at sign-up.
On retention, the operator keeps account data for as long as the account remains active, and afterwards for the periods UK gambling and financial law demand. Marketing consent records are retained until withdrawn. The practical takeaway: closing your account stops active processing, but licensed-operator records do not vanish overnight.
International transfers, where they occur through payment or hosting providers, must be covered by UK GDPR safeguards such as adequacy decisions or standard contractual clauses. The operator’s own correspondence address is the Northern & Shell Building, 10 Lower Thames Street, London EC3R 6EN, and the operation is fundamentally GB-based — accounts require a GB bank account and GB address.
Cookies power the essentials: keeping you signed in, remembering your preferences, and analysing site usage. Non-essential cookies can be declined through the consent controls on the site.
For the wider picture of how this platform operates beyond privacy, the Healthlottery review covers games, draws and player tools, while Healthlottery terms and conditions explains the contractual rules and about Healthlottery sets out who publishes this independent review.
Frequently Asked Questions about Healthlottery
What personal information does Healthlottery collect?
Healthlottery collects your name, date of birth, GB address, email address (which doubles as your username), debit card details, full transaction and play history, technical data such as IP address and device information, and records of any contact with its support team.
How does Healthlottery use my data?
The operator uses your data to process ticket purchases and subscription payments, verify you are 18 or over, pay out winnings to your debit card, send marketing only with your consent, and meet its UK Gambling Commission licence obligations, including responsible-gambling safeguards.
Can I request Healthlottery delete my personal information?
Yes — you can submit an erasure request by emailing help@healthlottery.co.uk or calling 0330 390 22 89. Your account will be closed and marketing data removed, though transaction records the operator must legally retain under its gambling licence cannot be deleted early.
Does Healthlottery share my data with third parties?
Healthlottery shares data with payment processors, the UK Gambling Commission when required, and GAMSTOP for self-exclusion. Reporting to health cause partners uses anonymised figures only. The operator states that personal data is never sold to advertisers or data brokers.
How long does Healthlottery keep my account data?
Data is kept while your account stays active and afterwards for the retention periods required by UK gambling and financial law. Marketing consent records are held until you withdraw consent. Closing the account stops active processing but does not immediately erase licensed-operator records.
Privacy understood, appetite for the draws intact? Now is a great moment to see what Healthlottery offers new players — a welcome bonus of 50% up to £1, with £1 tickets and The Big Win draws running Tuesday to Saturday.