Privacy Policy
How DR3AMS collects, uses, shares and protects personal information.
This policy explains how DR3AMS Digital Ltd collects, uses, shares and protects personal information when you use the DR3AMS website, mobile app and related competition services.
Privacy Policy
1. Who controls your information
DR3AMS Digital Ltd trading as DR3AMS is the data controller for personal information described in this policy unless a different controller is clearly identified.
Privacy questions and rights requests can be submitted through the privacy route on the Contact & Support page.
Privacy Policy
2. Information we may collect
- Identity details such as name and date of birth.
- Contact details such as email, telephone number and postal address.
- Account and authentication information.
- Competition entries, ticket numbers, orders and prize history.
- Payment transaction references and payment-status information. Payment-card details are handled through approved payment services rather than being used as ordinary account information.
- Age, identity and eligibility verification information.
- Communications, complaints and customer-support records.
- Device, security, log, cookie and analytics data.
- Marketing choices and notification preferences.
- Player-protection settings such as spend limits, pause or suspension status.
Privacy Policy
3. Why we use your information
| Purpose | Lawful basis |
|---|---|
| Create and manage your account | Contract |
| Process entries and payments | Contract |
| Run draws and award prizes | Contract / legal obligations where applicable |
| Verify age, identity and prevent fraud | Legal obligation and/or legitimate interests, depending on process |
| Customer support and complaints | Contract / legitimate interests |
| Security, audit and abuse prevention | Legitimate interests |
| Service analytics and non-essential tracking | Consent where required |
| Email, SMS or push marketing | Consent or another lawful basis only where legally available |
| Regulatory, tax, accounting or legal claims | Legal obligation / legitimate interests |
Privacy Policy
4. Who we share information with
Information may be shared with payment providers, identity or age-verification providers, hosting and cloud suppliers, email and notification providers, analytics providers, professional advisers, prize fulfilment partners and public authorities where legally required.
Suppliers receive only the information needed for their role and must handle it under appropriate contractual, confidentiality and security requirements.
Privacy Policy
5. International transfers
If a supplier processes personal information outside the UK, DR3AMS uses an appropriate transfer mechanism and safeguards where required by data-protection law.
Privacy Policy
6. How long we keep information
DR3AMS will keep information only for as long as needed for the relevant purpose, legal duties, fraud prevention, accounting, complaints and legal claims.
Retention periods vary by record type. Account, payment, draw, prize and complaint records may need to be kept for different periods because they support contracts, accounting, fraud prevention, dispute handling and legal obligations.
Privacy Policy
7. Your rights
- Access your personal information.
- Ask for inaccurate information to be corrected.
- Ask for deletion where the right applies.
- Ask for processing to be restricted where the right applies.
- Object to processing in relevant circumstances.
- Ask for portability where the right applies.
- Withdraw consent where processing relies on consent.
- Complain to the Information Commissioner's Office.
Privacy Policy
8. Marketing
You can change marketing preferences at any time. A customer whose account is under a Mindful Play suspension will not receive promotional email, text or push marketing during the suspension.
Privacy Policy
9. Automated decisions and profiling
DR3AMS may use automated signals to support security, fraud prevention, eligibility checks, service personalisation and player protection.
If a solely automated decision has a legal or similarly significant effect, we will provide the information and safeguards required by law, including an appropriate route to challenge the outcome.
Privacy Policy
10. Security
DR3AMS will use proportionate technical and organisational measures designed to protect personal information, including access controls, logging, encryption where appropriate, secure providers and incident response.
Privacy Policy
11. Contact and complaints
Submit privacy questions and rights requests through the privacy route on the Contact & Support page. We may need to verify your identity before disclosing or changing personal information.
You can also complain to the Information Commissioner's Office if you are unhappy with how your information is handled.
