Privacy Policy

Last Updated: December 26, 2025

Welcome to Northern Draws ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you visit our website NorthernDraws.com (the "Site") and participate in our lottery games.

By accessing or using our Site, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

1. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information").

1.1 Personal Information You Provide

When you register for an account, purchase tickets, claim a prize, or contact customer support, we may collect:

• Identity Data: Full name, date of birth (for age verification), and gender.
• Contact Data: Residential address, billing address, email address, and telephone number.
• Financial Data: Bank account details and payment card details (processed securely by third-party payment processors).
• Verification Data: Government-issued identification (e.g., driver's license, passport) required to verify identity and age compliance under Canadian gaming laws.

1.2 Information Collected Automatically

As you navigate through our Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

• Usage Data: Details of your visits to our Site, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Site.
• Device Data: Information about your computer and internet connection, including your IP address, operating system, and browser type. This is crucial for Geo-location services to ensure you are physically located within an eligible jurisdiction.

2. How We Use Your Information

We use your Personal Information for the following purposes:

• To register you as a new player and verify your identity and age (19+).
• To process your lottery ticket purchases and manage your account balance.
• To determine your physical location to ensure compliance with provincial lottery regulations.
• To process and deliver prizes, including large jackpot claims which may require additional verification.
• To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
• To administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
• To detect, prevent, and address fraud, security breaches, or other potentially prohibited or illegal activities.

3. Disclosure of Your Information

We do not sell your Personal Information. However, we may share your data with the following categories of third parties for business purposes:

3.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include:

• Payment processing (e.g., credit card processors, Interac).
• Identity and age verification services (e.g., credit bureaus).
• Data analysis and email delivery services.
• Hosting services and customer service support.

3.2 Legal Requirements and Regulatory Bodies

We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).

Specifically, as a licensed operator, we report to provincial gaming authorities regarding significant wins, suspicious transactions, and responsible gaming limits.

4. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Site is at your own risk. You should only access the services within a secure environment.

We use SSL/TLS encryption for all data in transit and store sensitive financial data using banking-grade encryption standards.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service, specifically those requiring secure login and session management.

6. Retention of Data

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. Accounts that are inactive for a period of 24 months may be subject to closure and data archiving.

7. Your Rights

Under Canadian privacy laws (including PIPEDA), you have specific rights regarding your personal information:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions, provided it does not conflict with our legal retention requirements for financial and gaming records.

8. Age Restriction (19+)

Our Service is strictly intended for individuals who are at least 19 years of age. We do not knowingly collect personally identifiable information from anyone under the age of 19. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers immediately.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact our Data Protection Officer:

By email: [email protected]
By mail: 123 Northern Blvd, Suite 400, Toronto, ON, Canada