Privacy Policy
Last updated: 27 January 2026
1. Introduction
Odds Up Ltd ("Odds Up", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
We are compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
Personal Information
When you register or purchase tickets, we collect:
- Contact details: Name, email address, phone number
- Account information: Username, password (encrypted)
- Payment information: Processed by Stripe (we do not store card details)
- Delivery information: Address for prize delivery (winners only)
- Identity verification: ID documents for age verification (winners only)
- Referral data: Unique referral code, referral link usage, referred users (for referral programme rewards)
Automatically Collected Information
- Device information: IP address, browser type, operating system
- Usage data: Pages visited, time spent, click patterns
- Cookies: See our Cookie Policy for details
3. How We Use Your Information
Service Delivery: Process ticket purchases, conduct draws, verify winners, deliver prizes, provide support
Communication: Send order confirmations, draw results, marketing emails (with consent), respond to enquiries
Referral Programme: Track referrals, issue rewards, prevent abuse of the referral system
Legal & Security: Comply with regulations, prevent fraud, maintain security, enforce Terms & Conditions
Improvement: Analyse site usage, improve services, develop new features
4. Google Analytics
We use Google Analytics to understand how visitors use our website.
What Google Analytics Collects:
- Pages you visit and time spent on each page
- How you arrived at our site (referral source)
- Device type, browser, and screen resolution
- General location (city/country level, not precise)
- Anonymised IP address
Your Control: You can opt out through our cookie consent banner or the Google Analytics Opt-out Browser Add-on.
5. Legal Basis for Processing (UK GDPR)
Contract Performance: Processing necessary to fulfill our service (ticket purchases, prize delivery)
Legal Obligation: Compliance with UK laws and regulations (age verification, tax reporting)
Legitimate Interest: Fraud prevention, security, service improvement
Consent: Marketing communications and analytics cookies (you can withdraw consent anytime)
6. How We Share Your Information
We do not sell your personal information. We share data only with:
Service Providers
- Stripe: Payment processing
- Supabase: Database and authentication
- Google Analytics: Analytics (anonymised data)
- Email service: Transactional and marketing emails
- Courier services: Prize delivery (winners only)
Legal Requirements: We may disclose information when required by law, court order, or to protect our rights and safety.
Public Information: Winner names and locations (city level) may be published for transparency. Our live activity feed displays first names only.
7. ID Verification for Winners
To comply with UK age verification laws and prevent fraud, prize winners must submit valid identity documents.
Accepted Documents: UK Passport or UK Driving Licence (photo card)
Purpose: Verify you are 18+ and confirm identity matches the account holder
Storage: Documents stored in private, encrypted storage (not publicly accessible)
Auto-Deletion: ID documents are automatically deleted 7 days after verification (GDPR compliance)
Security: Only authorised admin staff can access during the review period
8. Data Retention
Active accounts: Data retained while your account is active
Closed accounts: Personal data deleted within 90 days (except legal requirements)
Transaction records: Kept for 7 years for tax and legal compliance
ID documents: Automatically deleted 7 days after verification
Winner information: Retained for transparency and dispute resolution (excluding ID documents)
9. Your Rights (UK GDPR)
You have the following rights regarding your personal data:
Right to Access: Request a copy of your personal data we hold
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data (subject to legal obligations)
Right to Object: Object to processing based on legitimate interests
Right to Data Portability: Receive your data in a machine-readable format
Right to Withdraw Consent: Withdraw consent for marketing or cookies at any time
To exercise any of these rights, contact us at hello@oddsup.co.uk
10. Data Security
We implement appropriate technical and organizational measures:
- 256-bit SSL encryption for all data transmission
- Secure, encrypted password storage
- Regular security audits and updates
- Restricted access to personal data (need-to-know basis)
- Payment data handled exclusively by PCI-compliant Stripe
11. Children's Privacy
Our service is not intended for anyone under 18 years old. We do not knowingly collect personal information from minors. If we discover we have collected data from someone under 18, we will delete it immediately.
12. International Data Transfers
Your data is primarily stored within the UK/EEA. Some service providers may process data internationally. Where data is transferred outside the UK, we ensure:
- Adequate protection through standard contractual clauses
- Compliance with UK GDPR requirements
- Service providers meet international data protection standards
13. Marketing Communications
What we send: New competitions, special offers, winner announcements
Opt-in: You choose whether to receive marketing emails during registration
Opt-out: Unsubscribe anytime via email footer link or account settings
Transactional emails: Order confirmations, draw results, and security alerts cannot be opted out (required for service)
14. Cookies
We use cookies to improve your experience. For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email to registered users. The "Last updated" date at the top reflects the current policy version. You may be asked to review and accept updates before purchasing tickets, entering competitions, or accessing your dashboard.
16. Complaints
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
ICO Website: www.ico.org.uk
ICO Helpline: 0303 123 1113
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us: