Ledger strip with foil security stripe

Privacy Policy

Last Updated: January 15, 2024

Effective Date: January 15, 2024

Your privacy is paramount. This policy explains how we collect, use, protect, and manage your personal information in accordance with Australian privacy laws and lottery industry regulations.

Introduction

SouthernStarTrails.com ("we," "us," or "our") operates an Australian lottery services platform. We are committed to protecting your personal information and respecting your privacy rights. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our lottery services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our services.

Your Rights Matter

Under Australian privacy law, you have specific rights regarding your personal information, including the right to access, correct, and delete your data. We are committed to facilitating these rights.

1. Information We Collect

We collect several types of information from and about users of our lottery services. The specific information we collect depends on how you interact with our platform.

Personal Identification Information

When you create an account or participate in lottery activities, we collect:

  • Full legal name as it appears on government-issued identification
  • Date of birth for age verification purposes (18+ requirement)
  • Email address for account communications and notifications
  • Phone number for account verification and security
  • Residential address for compliance and winner verification
  • Government-issued identification documents for age and identity verification

Payment and Financial Information

For processing lottery ticket purchases and prize payments, we collect:

  • Payment card details (processed securely through PCI-DSS compliant payment processors)
  • Bank account information for prize disbursements and refunds
  • Transaction history including ticket purchases and prize winnings
  • Billing address associated with payment methods
  • Tax identification numbers where required by law for prize reporting

We do not store complete payment card details on our servers. All payment information is encrypted and processed through secure, certified payment gateways.

Lottery Participation Information

As part of providing lottery services, we collect:

  • Lottery ticket numbers, game selections, and draw entries
  • Ticket purchase dates, times, and amounts
  • Prize claims and winner information when applicable
  • Account preferences and notification settings
  • Responsible gaming limit settings and self-exclusion requests

Technical and Usage Information

We automatically collect certain technical information when you use our services:

  • IP address and approximate geographic location
  • Device type, operating system, and browser information
  • Pages visited, time spent on pages, and navigation paths
  • Referring URLs and search terms used to find our site
  • Login timestamps and session duration
  • Error logs and system diagnostics for troubleshooting

Winner Information

If you win a lottery prize, we may collect additional information:

  • Enhanced identity verification documentation
  • Tax file number or Australian Business Number for tax reporting
  • Proof of address and additional verification documents
  • Prize claim forms and supporting documentation
  • Consent for publicity where legally permitted and requested

Winner information is subject to additional regulatory requirements and may be shared with lottery regulators as mandated by law.

Communications and Support

When you contact us or interact with our support services:

  • Email correspondence and support ticket content
  • Live chat transcripts and phone call recordings (with consent)
  • Feedback, survey responses, and testimonials
  • Account inquiries and resolution history

2. How We Use Your Information

We use the information we collect for various purposes related to providing, maintaining, and improving our lottery services. Your information enables us to deliver secure, compliant, and personalized lottery experiences.

Service Provision and Account Management

  • Create and maintain your lottery account with secure authentication
  • Process lottery ticket purchases and manage your game entries
  • Verify your age and identity to ensure legal compliance (18+ requirement)
  • Manage payment processing and financial transactions securely
  • Process prize claims and disburse winnings to verified winners
  • Provide customer support and respond to your inquiries
  • Implement responsible gaming tools including deposit limits and self-exclusion

Legal and Regulatory Compliance

  • Comply with Australian lottery regulations and gaming laws
  • Report winnings to tax authorities as required by law
  • Prevent money laundering and fraud through transaction monitoring
  • Maintain audit trails for draw integrity and prize verification
  • Respond to legal requests from regulators and law enforcement
  • Enforce our terms of service and protect against violations

Regulatory compliance is mandatory. We share required information with lottery authorities to maintain our operating license.

Security and Fraud Prevention

  • Detect and prevent fraudulent activities and unauthorized access
  • Monitor accounts for suspicious behavior or security breaches
  • Verify the legitimacy of prize claims and prevent ticket fraud
  • Implement multi-factor authentication and security measures
  • Conduct risk assessments and security audits
  • Protect against technical security threats and vulnerabilities

Communications and Marketing

With your consent where required, we use your information to:

  • Send transactional notifications about your account, tickets, and prizes
  • Provide draw results and winner announcements
  • Share lottery promotions, jackpot updates, and special offers
  • Send responsible gaming reminders and resource information
  • Deliver newsletters and educational content about lottery services
  • Communicate important service updates and policy changes

You can opt out of marketing communications at any time through your account settings or by using the unsubscribe link in our emails.

Analytics and Service Improvement

  • Analyze usage patterns to improve service functionality and user experience
  • Conduct research and testing to enhance platform performance
  • Generate statistical reports and business intelligence (anonymized where possible)
  • Troubleshoot technical issues and optimize system operations
  • Develop new features and lottery game offerings based on player preferences

3. Information Sharing and Disclosure

We understand the sensitive nature of your personal information. We do not sell your personal data to third parties. We only share your information in specific circumstances as described below.

Regulatory Authorities and Government Agencies

We share information with regulatory bodies as required by law:

  • Australian lottery regulators for licensing compliance and oversight
  • Tax authorities for reporting large prize winnings
  • Law enforcement agencies in response to legal requests or investigations
  • Financial intelligence units for anti-money laundering compliance

These disclosures are mandatory under Australian law and lottery regulations. We only share the minimum information required.

Service Providers and Business Partners

We engage trusted third-party service providers who assist in operating our lottery services:

  • Payment processors for secure transaction handling (PCI-DSS compliant)
  • Identity verification services for age and identity authentication
  • Cloud hosting providers for secure data storage and processing
  • Email and SMS providers for communications delivery
  • Customer support platforms for help desk operations
  • Analytics providers for usage statistics and performance monitoring
  • Security and fraud detection services for platform protection

All service providers are contractually bound to protect your information and use it only for specified purposes. They cannot use your data for their own marketing.

Business Transfers

In the event of corporate changes, your information may be transferred:

  • Merger, acquisition, or sale of all or part of our business assets
  • Corporate restructuring or bankruptcy proceedings

In such cases, we will notify you and ensure the receiving party commits to protecting your information under terms at least as protective as this Privacy Policy.

Legal Obligations and Protection

We may disclose your information when we believe it is necessary to:

  • Comply with applicable laws, regulations, or legal processes
  • Enforce our terms of service and investigate violations
  • Protect the rights, property, or safety of SouthernStarTrails.com, users, or the public
  • Detect, prevent, or investigate fraud, security issues, or technical problems

With Your Consent

We may share your information for other purposes with your explicit consent:

  • Publicizing your name and winnings if you win a major prize (only with your permission)
  • Sharing testimonials or success stories you provide to us
  • Other specific disclosures you explicitly approve

Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot identify you personally for industry analysis, demographic profiling, marketing, and other business purposes. This data does not contain personal identifiers and cannot be used to identify individual users.

4. Data Security

Protecting your personal information is our highest priority. We implement comprehensive security measures aligned with industry best practices and lottery industry requirements to safeguard your data.

Technical Security Measures

Encryption

All data transmissions use TLS 1.3 encryption. Sensitive data is encrypted at rest using AES-256 encryption standards.

Firewalls

Multi-layer firewall systems protect our infrastructure from unauthorized access and cyber threats.

Authentication

Multi-factor authentication options and strong password requirements protect account access.

Monitoring

24/7 security monitoring and intrusion detection systems identify and respond to threats in real-time.

Access Controls

  • Role-based access control limits employee access to only necessary data
  • Regular access reviews ensure appropriate permission levels
  • Background checks for all employees with data access
  • Comprehensive audit trails track all data access and modifications
  • Immediate access revocation upon employment termination

Employee Training and Policies

  • Mandatory privacy and security training for all staff members
  • Regular security awareness updates and phishing simulations
  • Strict confidentiality agreements and non-disclosure policies
  • Clear incident response protocols and reporting procedures

Compliance and Auditing

  • Regular third-party security audits and penetration testing
  • Compliance with Australian Privacy Principles (APPs)
  • PCI-DSS compliance for payment card data handling
  • Regular vulnerability assessments and security updates
  • Annual security certifications and compliance reviews

Data Breach Response

Despite our best efforts, no security system is impenetrable. In the unlikely event of a data breach:

  • We will promptly investigate and contain the breach
  • Affected users will be notified without undue delay
  • We will report to relevant authorities as required by law
  • We will take steps to prevent similar incidents in the future
  • We will provide support and guidance to affected individuals

Your Role in Security

Your security practices are equally important. Please help protect your account by:

  • Using strong, unique passwords and changing them regularly
  • Enabling multi-factor authentication on your account
  • Never sharing your login credentials with others
  • Logging out after using shared or public devices
  • Reporting suspicious activity immediately to support@SouthernStarTrails.com

5. Your Privacy Rights

Under Australian privacy law, you have specific rights regarding your personal information. We are committed to facilitating these rights and responding to your requests promptly.

Right to Access

You have the right to request access to the personal information we hold about you, including:

  • Confirmation of whether we process your personal data
  • A copy of your personal information in a commonly used format
  • Details about how we use and share your information
  • Information about data retention periods

We will respond to access requests within 30 days. Some information may be withheld if legally required or to protect others' rights.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can:

  • Update your account information directly through your profile settings
  • Contact us to correct information you cannot update yourself
  • Request addition of supplementary information if data is incomplete

If we disagree with your correction request, we will provide reasons and note your request in our records.

Right to Deletion

You have the right to request deletion of your personal information in certain circumstances:

  • The information is no longer necessary for the purposes collected
  • You withdraw consent (where consent was the basis for processing)
  • The information was processed unlawfully
  • Legal requirements mandate deletion

We may retain certain information if required by law (e.g., for tax purposes, regulatory compliance, or ongoing dispute resolution). Winner records must be retained for legal audit periods.

Right to Object and Restrict Processing

You have the right to object to or request restriction of certain data processing:

  • Object to direct marketing communications (opt-out anytime)
  • Request restriction while we verify accuracy of disputed data
  • Object to processing based on legitimate interests

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller where technically feasible. This applies to information you provided to us and where processing is based on consent or contract performance.

Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. This includes:

  • Marketing communications preferences
  • Optional data collection activities
  • Cookie and tracking preferences

Right to Complain

If you believe we have not handled your personal information appropriately, you have the right to lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)

Website: www.oaic.gov.au

Phone: 1300 363 992

Email: enquiries@oaic.gov.au

We encourage you to contact us first so we can address your concerns directly.

Exercising Your Rights

To exercise any of your privacy rights, please contact us at:

Privacy Team

Email: privacy@SouthernStarTrails.com

Subject Line: Privacy Rights Request

Please include your full name, account email, and specific details of your request. We may need to verify your identity before processing requests.

We will respond to your request within 30 days. If we need additional time, we will notify you and provide an explanation.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our services. For detailed information, please review our Cookie Policy.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and provide personalized experiences.

Types of Cookies We Use

Essential Cookies

Required for core functionality including authentication, security, and service operation. These cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our site through aggregate statistics and usage patterns.

Preference Cookies

Remember your settings and preferences to provide personalized experiences across sessions.

Managing Cookie Preferences

You can control cookie usage through:

  • Browser settings to block or delete cookies
  • Our cookie consent banner when you first visit
  • Account settings to manage preferences

Note: Disabling certain cookies may impact site functionality and your user experience.


For comprehensive information about our cookie practices, please visit our Cookie Policy page.

7. Age Verification and Underage Protection

Australian law strictly prohibits lottery participation by individuals under 18 years of age. We take this requirement seriously and implement comprehensive age verification measures.

18+ Age Requirement

All users must be at least 18 years of age to create an account or participate in lottery services.

We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a minor, we will take immediate steps to delete that information.

Age Verification Process

During account registration, we verify age through:

  • Government-issued identification document verification
  • Third-party identity verification services
  • Date of birth validation against official records
  • Enhanced verification for high-value transactions or prize claims

Parental Responsibility

Parents and guardians should:

  • Keep account credentials secure and private
  • Monitor children's internet usage and device access
  • Educate children about gambling risks and age restrictions
  • Use parental control software to restrict gambling sites

Reporting Underage Activity

If you suspect or become aware of underage lottery participation, please report it immediately:

Email: compliance@SouthernStarTrails.com

We will investigate all reports promptly and take appropriate action, including account suspension and notification to relevant authorities.

8. International Data Transfers

While we primarily operate within Australia, some of our service providers and data processing activities may involve international data transfers.

Data Storage and Processing Locations

Your personal information may be stored and processed in:

  • Australia (primary data storage location)
  • Countries where our cloud service providers maintain data centers
  • Jurisdictions where our payment processors operate

Safeguards for International Transfers

When transferring data internationally, we ensure adequate protection through:

  • Contractual clauses requiring equivalent privacy protection
  • Verification that recipient countries have adequate privacy laws
  • Encryption of data in transit and at rest
  • Regular audits of international service providers

9. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

Retention Periods

Account Information

Retained for the duration of your account plus 7 years after closure for legal and audit purposes.

Transaction Records

Retained for 7 years from transaction date to comply with financial and tax regulations.

Winner Information

Retained for 7 years minimum as required by lottery regulations and tax authorities.

Marketing Data

Retained until you opt out or for 2 years of inactivity, whichever comes first.

Support Communications

Retained for 3 years to maintain service quality and resolve ongoing issues.

Data Deletion

After retention periods expire, we securely delete or anonymize your information. Deletion methods include:

  • Secure erasure of electronic data using industry-standard protocols
  • Physical destruction of paper records
  • Anonymization where aggregate data is needed for analysis

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to review this policy periodically.

How We Notify You of Changes

  • Prominent notice on our website for material changes
  • Email notification to registered users for significant updates
  • Updated "Last Updated" date at the top of this policy
  • In-app notifications when you next log in

Your Continued Use Constitutes Acceptance

Continued use of our services after policy updates take effect constitutes acceptance of the revised policy. If you do not agree with changes, please discontinue use and contact us to close your account.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries

Email: privacy@SouthernStarTrails.com

For questions about this policy or privacy rights

General Support

Email: support@SouthernStarTrails.com

For account assistance and technical issues

Data Protection Officer

Email: dpo@SouthernStarTrails.com

Address: SouthernStarTrails.com, Victoria, Australia

For formal data protection inquiries and complaints

Response Times

  • Privacy rights requests: Within 30 days
  • General inquiries: Within 5 business days
  • Urgent security matters: Within 24 hours

Your Privacy Matters

We are committed to protecting your personal information and maintaining your trust. This Privacy Policy reflects our dedication to transparency and your privacy rights.