Healthlottery privacy policy
Know exactly what happens to your data before you hand it over. This independent review breaks down how Healthlottery collects, uses and protects your personal information, so you can play with your eyes open. The Health Lottery ELM Limited operates the service under UK Gambling Commission licences 000-026057-R-309179 and 000-026057-N-309180 (Account number 26057), which brings strict data-handling obligations under UK GDPR.
Table of contents
What information does Healthlottery collect?
Healthlottery collects identity, contact, payment, play and technical data. You cannot open an account without proving you are 18 or over with a GB address and a GB bank account, so identity verification data sits at the core of everything the operator holds on you.
Personal data collected during registration
Registration via the Sign up link at healthlottery.co.uk captures your full name, date of birth, GB address and email address. Your username is always the email address you register with, which means that email becomes the primary identifier across every record the operator keeps. Age and address checks are mandatory — the operator cannot lawfully let you play without them.
Transaction and play history
Every debit card payment, Direct Debit mandate and recurring debit card payment leaves a record. So does every £1 lottery entry, every subscription payment (£6.75 a month for Superdraw VIP, £17.00 for Big Win Classic VIP, £23.75 for Big Win All Draw VIP) and every withdrawal you request through My Account > My Wallet > Withdraw funds. The operator also logs which draws you enter, including free entries into the Free Prize Draw attached to Wednesday and Saturday lines.
Technical and usage data
Expect the standard technical footprint: IP address, device type, browser, pages visited and session behaviour. This data supports fraud detection, age-verification controls and the responsible-gambling tools the operator must enforce, such as deposit limits and time-outs.
Communication records
Calls to 0330 390 22 89 (09:00 to 17:30, Monday to Friday) and emails to help@healthlottery.co.uk are logged. Keep your own copies of anything you send — it strengthens your position if you later dispute a withdrawal or a closed account.
How does Healthlottery use your information?
The operator uses your data to run the lottery service, pay prizes, verify your identity and meet its Gambling Commission obligations. Marketing only applies where you have given consent, and you can withdraw that consent at any time through your account settings.
Operating lottery services
Your data keeps your account running: processing debit card deposits, managing Direct Debit subscriptions, entering your lines into The Big Win draws held Tuesday to Saturday, and closing sales at 19.45 on draw days. Without this processing, the service simply cannot function.
Prize fulfilment and payment
When you win, the operator uses your payment and identity records to credit your wallet and process withdrawals back to your debit card. Withdrawals require your password — treat that as a security feature, not an inconvenience. Remember that 34% of spend across all games goes on prizes, and 20% of every lottery draw ticket and online scratchcard goes to good causes.
Marketing communications (with consent)
Marketing emails and promotional offers, including the welcome bonus of 50% up to £1, only reach you if you have opted in. Prize Tickets won through the lottery must be used within 180 days or they expire, so expect reminders tied to your account activity. Opt out in one click if you do not want them.
Legal and regulatory compliance
As a GB society lottery, the operator promotes and manages draws on behalf of The Health Lottery Foundation (PO Box 8109, Daventry, NN11 1JA; Promoter: Delva Patman). That status demands anti-money-laundering checks, age verification and responsible-gambling monitoring, including enforcement of self-exclusion periods from 6 months to 5 years and cooperation with GAMSTOP.
Who does Healthlottery share your data with?
Your data goes to payment processors, regulators and service providers that need it to run the lottery. The operator does not sell personal data. Anonymised figures — such as the £137,774,474 raised for communities across Great Britain — are shared with health cause partners without identifying you.
- Payment processors and service providers: debit card transactions and monthly Direct Debit collections run through third-party payment infrastructure, which receives only the data needed to process your payment.
- Regulatory bodies: the UK Gambling Commission, law enforcement and courts can compel disclosure where the law requires it.
- Health cause partners: distribution of the 20% good-causes share involves reporting, but on an anonymised, aggregated basis.
- No sale of personal data: there is no commercial trade in your identity or play history.
What privacy rights do you have?
Under UK GDPR you can access, correct, delete, restrict and port your personal data, and object to certain processing. Email help@healthlottery.co.uk or call 0330 390 22 89 to exercise any of these rights — put your request in writing so you have a dated record.
- Access: request a copy of the personal data the operator holds on you.
- Correction and deletion: fix inaccurate records or ask for erasure. Note that gambling transaction records tied to regulatory duties may be retained even after a deletion request.
- Objection: stop direct marketing instantly and object to processing based on legitimate interests.
- Portability: ask for your data in a structured, machine-readable format.
- Complaints: escalate unresolved issues to the Information Commissioner’s Office (ICO), the UK’s data protection authority.
One caveat: if you have self-excluded, the operator must keep enough data to enforce that exclusion. Deletion rights do not override your own protection.
How does Healthlottery secure and retain your data?
The operator applies encryption and access controls, keeps data only as long as legal and regulatory duties require, and uses cookies to run the site. Password-protected withdrawals add a second layer of account security on top of the platform’s own safeguards.
Security measures in place
Licensed operators under the Gambling Commission regime must protect player funds and data as a licence condition. Expect encrypted connections, restricted internal access and monitoring for unauthorised account activity.
How long your data is kept
Retention follows legal necessity: identity and transaction records stay on file for the period required by gambling, tax and anti-money-laundering rules, even after you close your account. Marketing data drops away once you withdraw consent. For wider context on how the operator frames its obligations, see: Healthlottery terms and conditions.
International data transfers
The Health Lottery is a Great Britain society lottery, and account eligibility requires a GB address and GB bank account. Any transfer of your data outside the UK must be covered by UK GDPR adequacy or contractual safeguards — ask the operator directly if you want the specifics of where your records are stored.
Cookie policy summary
The site uses essential cookies for login and basket functions, plus optional analytics cookies you can refuse. Reject non-essential cookies on your first visit if you want the minimum footprint — it takes seconds and changes nothing about how the draws work. More background on the operator sits on our about Healthlottery, and the home page covers the core Healthlottery product.
Frequently asked questions about Healthlottery
What personal information does Healthlottery collect?
Healthlottery collects your name, date of birth, GB address, email (which becomes your username), debit card and Direct Debit payment details, full play and transaction history, technical data such as IP address and device type, and records of your contact with support via phone or email.
How does Healthlottery use my data?
The operator uses your data to verify you are 18 or over, run your account, process lottery entries and withdrawals back to your debit card, fulfil prizes and meet Gambling Commission compliance duties. Marketing messages, including the welcome bonus of 50% up to £1, are sent only with your consent.
Can I request Healthlottery delete my personal information?
Yes. Email help@healthlottery.co.uk with an erasure request under UK GDPR. The operator must comply where no legal obligation requires retention, but gambling transaction records, self-exclusion data and anti-money-laundering records may be kept for the periods the law demands.
Does Healthlottery share my data with third parties?
Your data is shared with payment processors handling debit card and Direct Debit payments, with regulators such as the UK Gambling Commission where required, and with health cause partners only in anonymised, aggregated form. The operator does not sell personal data to anyone.
How long does Healthlottery keep my account data?
Data is retained for as long as gambling, tax and anti-money-laundering regulations require, which can extend beyond account closure. Marketing data is removed once you withdraw consent. For an exact retention schedule tied to your account, contact support on 0330 390 22 89 during weekday hours.
Now you know where your data goes. Head to Healthlottery and play with confidence.