Privacy Policy

Last Updated: September 25, 2025

At LuckyLeaf Canada ("we," "us," or "our"), protecting your privacy and personal information is our priority. This policy explains how we collect, use, and safeguard your personal data in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and relevant provincial laws.

1. Information We Collect

We collect personal information when you create an account, place ticket orders, contact support, or interact with our platform.

Types of Information:

• Identity Information: Name, date of birth (to verify 18+ age requirement).
• Contact Information: Email address, phone number, mailing address, and province of residence.
• Transaction Information: Ticket selections, purchase history, and payment details (we do NOT store full credit card numbers; payments are handled by PCI-compliant third-party processors).
• Technical Information: IP address, browser type, device type, location, and operating system.

2. How We Use Your Information

Your information is used to provide and improve our services, including:

1. Order Processing: Completing ticket purchases and sending confirmation emails.
2. Age & Identity Verification: Ensuring users are 18+ as required by responsible gaming regulations.
3. Communication: Sending updates, security alerts, and marketing messages (if consented).
4. Security: Detecting fraud, preventing unauthorized activity, and safeguarding our platform.
5. Website Improvement: Analyzing usage to enhance functionality, content, and overall experience.

We will only use your information for its original purpose, unless an additional use is compatible with that purpose and legally permitted.

3. Sharing Your Information

We do not sell your personal data. We may share your information only with trusted third parties under strict confidentiality:

• Official Draw Providers: Share necessary details to complete official ticket orders.
• Payment Processors: Secure, PCI-compliant third parties for financial transactions.
• Analytics Providers: Services like Google Analytics to monitor site usage (anonymized data).
• Legal Obligations: Compliance with court orders, subpoenas, or requests from Canadian authorities.

4. Security & Storage

We implement strong safeguards to protect your personal information, including:

• SSL encryption for secure data transmission.
• Restricted internal access to personal data on a need-to-know basis.
• Secure servers located in Canada or jurisdictions with equivalent privacy standards.

Information is retained only as long as necessary to fulfill its purpose or as required by law.

5. Your Privacy Rights (PIPEDA)

As a user, you have the right to:

• Access: Request the personal data we hold about you.
• Correction: Request updates to inaccurate or incomplete information.
• Withdraw Consent: Revoke consent for data use or sharing, subject to legal or contractual restrictions.

To exercise these rights, contact our Privacy Officer using the details below.

6. Updates to This Policy

We may revise this policy periodically to reflect changes in practices or legal requirements. Any updates will be posted here with a new "Last Updated" date. We encourage you to review this policy regularly.