Odds Up Privacy Policy

Odds Up Ltd ("Odds Up", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Compliance

We are compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data controller

Odds Up Ltd, Suite A, 82 James Carter Road, Mildenhall, IP28 7DE

Registration

Registered in England and Wales. Company number 16971876.

ICO registration

Registered with the UK Information Commissioner's Office as a data controller. Register reference ZC186944.

Contact

hello@oddsup.co.uk

Personal information

When you register or purchase tickets, we collect:

• Contact details: Name, email address, phone number
• Account credentials: Your password, stored hashed by our authentication provider (we never see or store it in readable form)
• Payment information: Processed by Stripe (we do not store card details)
• Delivery information: Address for prize delivery (winners only)
• Identity verification: ID documents for age verification (winners only)
• Referral data: Unique referral code, referral link usage, referred users (for referral programme rewards)
• Promotional code redemptions: Which codes you applied at checkout or claimed as a free entry, and when
• Service status alerts: Email address if you subscribe to incident updates on our status page (double opt-in; unsubscribe at any time via the link in every alert)
• Profile picture: An optional photo you choose to upload to your account. It is shown publicly by default alongside your first name, and you can turn public display off at any time in your account settings (see section 8)

Automatically collected information

• Device information: IP address, browser type, operating system
• Usage data: Pages visited, time spent, click patterns
• Cookies: See our Cookie Policy for details

Service delivery

Process ticket purchases, conduct draws, verify winners, deliver prizes, provide support.

Communication

Send order confirmations, draw results, marketing emails (with consent), respond to enquiries.

Referral programme

Track referrals, issue rewards, prevent abuse of the referral system.

Promotional codes

Apply discounts at checkout, mint free-entry tickets, enforce per-user usage limits, and prevent abuse of promotional offers.

Profile pictures

Show your photo on your own account pages and, while public display is on, alongside your first name on public pages such as the live activity feed, the winners page, and draw results.

Legal & security

Comply with regulations, prevent fraud, maintain security, enforce our Terms & Conditions.

Improvement

Analyse site usage, improve services, develop new features.

What these tools may collect:

• Pages you visit and time spent on each page
• How you arrived at our site (referral source)
• Device type, browser, and screen resolution
• General location (city/country level, not precise)
• Anonymised IP address
• Advertising and conversion data such as ad clicks, audience membership, and purchase or signup events where consent has been given

Your control: You can manage these technologies through our cookie preferences and through the Google Analytics Opt-out Browser Add-on.

Where required, we rely on consent for analytics and advertising cookies or similar technologies.

Contract performance

Processing necessary to fulfill our service (ticket purchases, prize delivery).

Legal obligation

Compliance with UK laws and regulations (age verification, tax reporting).

Legitimate interest

Fraud prevention, security, service improvement, and displaying an optional profile picture you have uploaded and left set to public. You can object to this at any time by turning off public display or removing the photo.

Consent

Marketing communications and analytics cookies (you can withdraw consent anytime).

We do not sell your personal information. We share data only with:

Service providers

• Stripe: Payment processing
• Supabase: Database and authentication
• Google Analytics and Google Ads: Analytics, conversion measurement, and advertising features where enabled
• Resend and other email tooling: Transactional and marketing emails
• Courier services: Prize delivery (winners only)

Legal requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

Public information

For transparency, we may publish limited winner details such as first name, competition details, and general location if available. Our live activity feed displays limited public-facing information only. If you have uploaded a profile picture and left public display on, that picture is shown alongside your first name on these pages and is visible to anyone, including people who are not signed in. Section 8 explains this in full.

To verify age, confirm identity, prevent fraud, and protect the integrity of the platform, prize winners must submit valid identity documents.

You can upload an optional profile picture from your account settings. You never have to add one, and you can remove it at any time.

Always visible to you

Your photo appears on your own account pages, such as the navigation bar and your dashboard, whether or not public display is on.

Public pages

While public display is on, your photo appears next to your first name on the live activity feed, the winners page, draw results, and to members whose referral link you used.

Who can see it

Anyone visiting those pages, including people who are not signed in and who do not hold an account.

Turning it off

We stop showing your photo on public pages as soon as you turn the setting off.

Removing it

Profile pictures are stored at a public web address. Turning off public display stops us showing the photo, but the image file itself stays stored until you replace or remove it. Use Remove in account settings if you want the file deleted.

Separate from ID documents

Profile pictures are stored separately from identity documents. ID documents are never public and are covered in section 7.

Moderation

We may remove a profile picture that breaches our Terms and Conditions.

Our rules on what you may upload, and the permission you give us to display it, are set out in section 13 of our Terms & Conditions.

Active accounts

Data retained while your account is active.

Deleted accounts

If an account is deleted, we remove or anonymise personal data where appropriate, but may retain limited records where required for legal, tax, fraud prevention, audit, or dispute resolution purposes.

Transaction records

Kept for 7 years for tax and legal compliance.

ID documents

Automatically deleted 7 days after verification.

Profile pictures

Kept until you replace the photo, remove it, or your account is deleted. Removing a photo deletes the stored file.

Winner information

Limited winner records may be retained for transparency and dispute resolution, excluding ID documents.

Audit records

Certain compliance and audit records, including account deletion logs, may be retained separately from the live user account.

You have the following rights regarding your personal data:

Right to access

Request a copy of your personal data we hold.

Right to rectification

Request correction of inaccurate data.

Right to erasure

Request deletion of your data (subject to legal obligations).

Right to object

Object to processing based on legitimate interests.

Right to data portability

Receive your data in a machine-readable format.

Right to withdraw consent

Withdraw consent for marketing or cookies at any time.

To exercise any of these rights, contact us at hello@oddsup.co.uk

We implement appropriate technical and organisational measures:

• 256-bit SSL encryption for all data transmission
• Passwords stored hashed by our authentication provider, never in readable form
• Regular security audits and updates
• Restricted access to personal data (need-to-know basis)
• Payment data handled exclusively by PCI-compliant Stripe

Keeping your account secure

Changing your password

You can change your password at any time from account settings. We ask for your current password first, so someone who finds your device unlocked cannot lock you out of your own account.

Other devices signed out

Changing your password signs you out everywhere else. The device you make the change on stays signed in; every other session ends immediately.

Resetting a forgotten password

A reset link is sent to your registered email address. Completing a reset ends every session, including the one used to reset it, so you sign back in fresh.

Security notifications

We email your registered address whenever your password changes. If you receive one you did not expect, reset your password and contact us straight away.

Our service is not intended for anyone under 18 years old. We do not knowingly collect personal information from minors. If we discover we have collected data from someone under 18, we will delete it immediately.

Your data is primarily stored within the UK/EEA. Some service providers may process data internationally. Where data is transferred outside the UK, we ensure:

• Adequate protection through standard contractual clauses
• Compliance with UK GDPR requirements
• Service providers meet international data protection standards

What we send

New competitions, special offers, winner announcements.

Opt-in

You choose whether to receive marketing emails during registration.

Opt-out

Unsubscribe anytime via email footer link or account settings.

Transactional emails

Order confirmations, draw results, and security alerts cannot be opted out (required for service).

We use cookies to improve your experience. For detailed information about the cookies we use, similar technologies we use, and how to manage them, please see our Cookie Policy.

We may update this Privacy Policy from time to time. Material changes will be notified via email to registered users. The "Last updated" date at the top reflects the current policy version. You may be asked to review and accept updates before purchasing tickets, entering competitions, or accessing your dashboard.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

ICO website

www.ico.org.uk

ICO helpline

0303 123 1113

Our ICO reference

ZC186944