The Proprietor and Owner of POTBUX is POTBUX LTD (“POTBUX”, “we”, “our” or “us”). These privacy terms relate to your use of all websites, applications and services offered by Us, Our trading companies (“subsidiaries”) and brands.
The POTBUX LTD registered, London, England.
We want all our clients and participants in services offered (“you”) to know that we value your privacy and personal data just as much as you do. We apply the highest standards to ensure your personal data is secure, and we always comply with applicable data protection laws.
In this privacy policy (the “Policy”) we not only want to advise you of your rights, but also explain how we respect them. Any personal data you provide to us directly or by way of acquiring services from our subsidiaries, trading brands or sister companies, jointly or separately will be processed only in accordance with this Policy. This Policy and Our collection, processing, use or disclosure of personal data shall be governed by and construed in accordance with English law.
Personal data is any information relating to you from which:
Sensitive Data includes information concerning:
The only sensitive type of data we may process about you is that obtain and informed of via our subsidiaries, which for example, is Biometric data for the purpose of uniquely identifying you during registration / onboarding processes relating to our services.
Our website requires the use of files containing small amounts of data that exchange between your computer’s browser and our web server. They are known as “cookies” and are used for a number of functions such as remembering who you are and your choices, either for that session or for when you return to our website. Some cookies are required for our website to work but only last as long as your visit. As a result, you cannot opt out of those. All of the other cookies we like to use you can control, though some functionality may be limited by your choice. You can change your cookie preferences at any time.
The table below sets out the categories of data we may use, what they can include, and the period for which we retain that data (from the date of the last relevant activity). Some sections may include categories from another section, particularly your contacts details and identifiers. Any information received from our subsidiaries, sister companies or trading brands is processed strictly in accordance with the purposes as defined within this and the relevant independent Privacy Policies.
| Category | Why is this data collected or shared by our subsidiaries? | Data Included | Retention Period |
|---|---|---|---|
| Client personal and contact information | To be able to make available, communicate to you and fulfil our services requested, directly from Us. To communicate with you about your experiences with Us. To ensure best working practices are being followed by us or any of our subsidiaries by way of quality control mechanisms and or legal / regulatory auditing. | Name; date of birth; identity documentation (image); gender; nationality; biometric data; address; email contact; telephone contact; visits; interactions with us (including emails and phone calls). | 6 years. |
| Mailing List (Ad-hoc information) | To arrange or provide services tailored to your requirements. To communicate in a relevant way. | Name, postal address, email address, telephone number, age, gender, occupation, email contact; telephone contact; lifestyle and social circumstances; preferences. | 6 years. |
| Current and Historic Information | To arrange or provide services tailored to your requirements. For purposes of accounting, reporting, analysis and, as may be required, lawful or regulatory disclosures. To communicate in a relevant way. | Service data, visits, transactions, complaints and disputes, financial transactions, behaviors, and geographical locations. | 6 years. |
| Finance and Payment Information | To be able to process your payments. To meet any auditing, lawful or regulatory requirement. | Name; date of birth; identity documentation (passport / visa); gender; nationality; biometric data; residential address; concessions; invoices; applications; financial transaction history; bank account details; bank card details; debt information; payment services, winnings, applications, cheques awaiting clearance, affordability history; 3rd party affordability referencing data; 3rd party adverse media referencing data, information from 3rd party debt collection and tracing agencies, and other authorized agents, data from regulatory or government authorities, lifestyle and social circumstances, occupation, employment and educational history, payment services and other details of products and services you have purchased from us. | 7 years. |
| Marketing | To make you aware of new products, services, and promotions including those of our partners and subsidiaries from time to time which we feel would be useful to you. (All Marketing preferences are based on you opting in and may be managed at any time) | Name, residential address, date of birth, nationality, biometric data, email contact, telephone contact, travel and geographic movement information, preferences, interactions with us (including emails and phone calls), behaviors, complaints, and issues. | 2 years or deletion on request. |
| Complaints & Issues | To assist you in relation to any arrangements and to handle complaints. Complaints and evidence of unlawful activities. | Complaints and issues. | 6 years. |
| Audio Recordings | Staff Development, identifying errors and to enable the effective resolution of complaints and issues. Telephone audio recordings. | Telephone audio recordings. | 6 years. |
These are the maximum retention periods but where it is appropriate, we may apply lesser retention periods.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Type of Data: Client Personal and Contact Information, Current and Historic Information; Mailing List; Finance and Payment Information, Complaints & Issues and Audio Recordings.
When Data is Processed: We may collect and process this personal data in the following circumstances:
Your Rights: As we are under a legal duty to process this data you some of your rights (see below) may not apply.
Basis: When you become a participant of our services, you enter into a contract with us directly or via one of our subsidiaries indirectly. This contract includes either our or the subsidiaries terms and conditions and you have to agree to the respective privacy policy. We would only use your personal data to provide our services to you; including to maintain our accounts and records and to provide customer services.
Type of Data: Client Personal and Contact Information, Current and Historic Information; Mailing List; Finance and Payment Information, Complaints & Issues and Audio Recordings.
When Data is Processed: We may collect and process this data:
Your Rights: While you may request that your personal data be removed from our live systems (which will also suspend or terminate your account) we may nonetheless retain a separate secure copy in order to deal with any complaints or contractual issues.
Basis: Where you have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent to us using your personal data at any time, and to request that we delete it. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have a basis for doing so in law. You also have the right to object to our using your personal data for specific purposes. In each case, please contact us (see section 14).
Type of Data: Marketing.
When Data is Processed: We may collect and process this data:
Your Rights: You are entitled to qualify, vary or withdraw your consent in relation to marketing whenever you want to. You can do so either via your online account details or by contacting us directly.
Basis: "Legitimate interest" means our interest in conducting and managing our businesses to enhance our services and experiences for our clients, users and contacts. We consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Type of Data: Client Personal and Contact Information, Current and Historic Information; Mailing List; Finance and Payment Information, Complaints & Issues and Audio Recordings.
The legitimate interests that we pursue include:
We may also use your personal information in the following situations, which are likely to be rare:
Your Rights: Whilst you are entitled to correct incorrect personal data, if you do not agree to this processing then this may result in your services being terminated.
The information that you provide to us will be held in our systems, which are located on our or our subsidiaries registered premises or those of an appointed third party. We are based in the United Kingdom and your information will be accessed and used here and elsewhere in the European Economic Area (EEA) where we enable the provision of the contracted services.
While countries within the EEA all ensure a high standard of data protection law, some parts of the world may not provide the same level of legal protection of your personal data. In each case, your data may, for purposes described in this notice or otherwise approved by you, be transferred to, processed by and stored by persons operating outside of the EEA and the third party may require access to all or some of your data. For example:
When we send personal data outside of the EEA we take steps to put in place appropriate safeguards to protect the information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed in accordance with applicable data protection laws. We protect your personal data, for example, by:
We may also from time to time rely on one or more of the 'derogations' available in applicable data protection laws, for example:
We may also be compelled by law to disclose your personal data to a third party and will have limited control over how it is protected by that party in such circumstances.
When you ask to see a copy of your personal data as permitted under data protection laws we will supply you with all the personal data to which you are entitled, promptly and normally no later than one month after the receipt of your data subject access request. In rare cases, where the requests are complex or contain multiple requests, the period of compliance may be extended by a further two months, but we will write to you and explain why any extension is required within one month of your request.
We will want to ensure that we have properly identified anyone making a data subject access request and may therefore ask to see additional identification. Any access request is normally free, although in some cases we may charge a reasonable fee based purely on our administrative costs when a request is clearly unfounded, is made excessively, or is made repetitively.
You may also have the right to Data Portability which allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. If you wish to exercise this right, we will transmit such data to you in a machine-readable code where it is technically feasible to do so.
Generally, we comply with the retention periods specified above although there may be exceptions, such as where there is an ongoing legal enquiry. Your personal data may also be subject to increasing internal restrictions on accessing. For example, personal data may be removed from front office functions and only accessible by senior management with specific reasons.
In accordance with this Privacy Policy and for specific purposes, we may share some of your information with the following categories of third parties:
We may compile statistics about the use of our websites including data on traffic, usage patterns, user numbers, and other information. All such data will be anonymised and will not include any data which can be used to identify you either by itself or when combined with other data. We may share non-personally identifiable information about the use of our website, applications, products, or services publicly or with third parties, but this will not include information that can be used to identify you.
We do not sell personal data to third parties for marketing purposes.
Your Rights: You have the right to object to this and to correct any incorrect data. Services may be conditional on allowing us to share this personal data.
From time to time we will need to update, change or supplement this Policy, including by altering the types of personal data that may be collected, processed or shared. If this happens, we will update this Policy on our website, in our literature, and we will make contact (normally by email) to inform you of any updates to this Policy before such changes come into effect. If you do not agree to these changes then you will have to inform us.
You have the following rights:
You may also have the right to lodge a complaint with the Information Commissioner’s Office if you believe we are in breach of our legal obligations under data protection laws.
Welcome to POTBUX, the premier raffle platform offering both paid and free entry options for the chance to win incredible prizes. Our platform is designed to provide a fun and social experience for all users, while maintaining a strong culture of care and social responsibility.
Although raffle sites are not regulated by the UK Gambling Commission, we take customer safety seriously. That's why we have implemented various measures to ensure a secure and enjoyable environment. To protect our customers, we have a full know your customer (KYC) process in place during registration. Additionally, we have set a mandatory annual spending limit of £1,500 on real money. If a customer wishes to increase their spending limit, we require additional information to reduce any financial harm risk and provide a comfortable customer experience.
By registering and entering our draws, you have the opportunity to win brilliant prizes every day. POTBUX launched in July 2023 with a desire to be the safest prize draw platform in the world. Our platform is easy to join, exciting to play, safe and secure, and donates to wonderful, good causes.”
Do you think that you have a problem with your financial activities on our site? Questions to ask yourself:
We are here to help and we do not want your play to get out of control or cause you harm.