LottosGold Privacy Policy

Who We Are (Data Controller)

Middleton Services Limited (“LottosGold”, “we”, “us”, “our”) is the data controller responsible for your personal data.

Company:Middleton Services Limited Company Number: 06435113 Registered Office: 124 City Road, London, England, EC1V 2NX Email: [email protected]

For data protection matters, you may contact our Data Protection Officer at: [email protected]

What This Policy Covers

This Privacy Policy explains:

• Why we collect it
• How we use and share it
• How long we keep it
• Your rights under UK GDPR and the Data Protection Act 2018

This policy applies to www.LottosGold.com and all related services.

Personal Data We Collect

Information You Provide

Account Registration
• First and last name
• Email Address
• Contact Number
• Country of residence

Optional Information
• Gender
• Date of birth
• Mobile number

Payments
• Date of Birth
• Billing Address
• Payment Card Details (processed securely; only tokenised data stored)

Payment details are securely processed, and a tokenised version may be stored for future use.

Identity Verification (KYC)
To comply with gambling, AML, and fraud‑prevention laws, we may request:

• Passport, driving licence or national ID
• Proof of address
• Payment verification documents
• Enhanced due‑diligence information (where required)

Information We Collect Automatically

• IP address
• Browser type and version
• Operating system
• Referring website
• Usage logs and interaction data

Information We Receive from Third Parties

We may receive data from:
• Identity verification providers
• Fraud and AML databases
• Payment processors
• Credit reference agencies
• Responsible gambling monitoring tools
• Public records
This may include identity data, risk scores, sanctions/PEP checks, and fraud‑prevention indicators.

How We Use Your Personal Data

We process your data to:

• Create and manage your account
• Verify identity and age
• Process payments and withdrawals
• Detect and prevent fraud, AML breaches, and misuse
• Provide customer support
• Send service‑related communications
• Personalise your experience
• Comply with legal and regulatory obligations
• Monitor for responsible gambling risks

Lawful Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contractual necessity – to provide our services
• Legal obligation – gambling, AML, KYC, taxation, and regulatory requirements
• Legitimate interests – fraud prevention, service improvement, platform security
• Consent – for marketing communications and non‑essential cookies

Automated Decision-Making & Profiling

We use automated systems for:

• Fraud and AML risk scoring
• Responsible gambling behavioural monitoring
• Transaction risk analysis
Consequences: Automated decisions may result in account restrictions, delayed withdrawals, or mandatory verification checks.

Your rights: You may request human review of any automated decision affecting you.

Lottery-Specific Compliance

Age Verification

We strictly serve users aged 18+. Accounts may be suspended until age is verified.

Fraud & AML Compliance

We process and share data to:

• Detect suspicious activity
• Prevent money laundering and terrorist financing
• Meet AML regulatory obligations

Data may be shared with:

• Financial institutions
• Fraud prevention agencies
• Identity verification providers
• Law enforcement and regulators

Responsible Gambling

We may use your data to:

• Identify harmful gambling patterns
• Apply limits, cooling‑off periods, or self‑exclusion
• Comply with safer gambling requirements

Marketing Communications

We send marketing only if you opt in.

You may withdraw consent at any time without affecting prior lawful processing.

Unsubscribe links are included in every marketing email.

Sharing Your Personal Data

We do not sell your data.

We may share it with:

• Payment processors
• Identity verification providers
• Fraud and AML agencies
• Email and communication platforms
• IT hosting and security providers
• Regulatory authorities
• Affiliated operational partners

In the event of a business sale or restructuring, your data may be transferred to the acquiring entity.

International Data Transfers

Where data is transferred outside the UK, we use:

• UK adequacy regulations
• Standard Contractual Clauses (SCCs)
• Additional safeguards where required

You may request a copy of these safeguards by contacting our DPO.

Data Retention

We retain data only as long as necessary.

Data Type | Retention Period

Account information | While account is active
AML, KYC & transaction data | 5–7 years after account closure (legal requirement)
Marketing data | Until consent withdrawn
Technical logs | 12–24 months
Responsible gambling data |As required by Gambling Commission rules

Where legally required, we may retain data longer.

Your Rights Under UK GDPR

You have the right to:

• Access your data
• Correct inaccurate data
• Request deletion (where permitted)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time
• Request human review of automated decisions

To exercise your rights, contact: [email protected]

Cookies & Tracking Technologies

We use:

• Essential cookies (required for site operation)
• Analytics cookies (with consent)
• Marketing cookies (with consent)

You can manage cookies via your browser or our cookie banner.
For full details, see our Cookie Policy.

Security Measures

We use:

• SSL encryption
• Tokenised payment processing
• Multi‑layered access controls
• Regular security audits
• Secure hosting environments

No system is completely secure, but we take all reasonable steps to protect your data.

Children’s Data

We do not knowingly collect data from individuals under 18. If we discover a minor has registered, we will:

• Close the account
• Delete personal data (unless required for fraud/AML investigations)

Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices.

Complaints

You can raise any concerns or complaints in relation to Privacy matters by contacting our DPO: [email protected]

You may lodge a complaint with the UK regulator:
Information Commissioner’s Office (ICO) https://www.ico.org.uk

Contact Us

For questions or rights requests:, Email:[email protected]
Privacy Contact: [email protected]

(Effective Date: 01/04/2026 Last Updated: 01/04/2026 )