Privacy Policy – Lotto24
This privacy policy explains how Lotto24 collects, uses and protects your personal information when you visit lotto24-online.com.de. We handle data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and this notice applies only to our editorial portal — not to the operator's own site or player accounts, which we have no access to.
The short version
We are an independent information portal. The data we collect comes from two places: technical information your browser sends automatically (IP address, device type, pages viewed), and information you choose to give us through contact forms. We do not operate player accounts, process deposits or hold gambling data — those activities happen on the operator's own platform under its own privacy terms.
Who is responsible for your data
The data controller for this site is the editorial team at lotto24-online.com.de, contactable at [email protected]. Questions about your player account, deposits or withdrawals should be directed to the operator, not to us — we publish information about gambling services but do not provide them ourselves.
What data we collect
We collect two categories of personal information. Technical data arrives automatically when you visit: your IP address, browser type and version, operating system, time zone setting, screen resolution, the pages you view and the order you view them in, and the site that referred you here. Voluntary data is what you actively give us — your name and email address when you fill in a contact form, and the content of any message you send.
We set a small number of cookies to remember your consent preferences and to distinguish one visit from another for traffic analysis. You can read the full list in our Cookie Policy, and you can block or delete them through your browser settings without breaking the site.
Why we process your data
Technical data is processed to keep the site running, to understand which pages are read and which are ignored, and to detect patterns that might indicate a technical problem or a security threat. Voluntary data is processed solely to answer the question or comment you sent — we do not add you to a mailing list, and we do not share your email address with third parties for marketing.
Our lawful basis under UK GDPR is legitimate interests for technical data (we have a legitimate need to operate the site and improve it based on how it is used), and consent for any data you provide voluntarily through a form. Traffic analysis relies on aggregate, anonymised data wherever possible — we are interested in page performance, not in tracking individual users.
Who else sees your data
We share personal data with a small number of processors who help us run the site. Hosting and infrastructure providers store the site's files and serve them to your browser; they see IP addresses and technical request data as a necessary part of that service. Analytics platforms receive anonymised or pseudonymised visit data to generate traffic reports — we configure these tools to respect your privacy settings and to avoid tracking you across other sites.
We do not sell personal data to anyone. We do not pass email addresses to marketing lists. If you ask us a question about a player account or a withdrawal, we may need to refer you to the operator — but we send the referral to you, not your data to them.
Occasionally we are required by law to disclose information to a regulatory or law-enforcement body. That happens only in response to a valid legal request, and only to the extent the request requires.
Transfers outside the UK
Some of our hosting and analytics providers operate servers in the European Economic Area or in countries the UK government has recognised as providing adequate data protection. Where a processor is based elsewhere, we rely on Standard Contractual Clauses or another approved transfer mechanism to ensure your data is protected to UK standards.
How long we keep your data
Technical logs and anonymised analytics data are kept for up to 24 months, then deleted. Contact-form submissions and the replies we send are kept for 12 months after the last message in the thread, then purged — if you raise a query in January and we answer it in February, both messages are deleted the following February. Consent records (the fact that you ticked a box or accepted a banner) are kept for three years to demonstrate compliance if challenged.
Your rights under UK GDPR
You have the right to access the personal data we hold about you, to ask us to correct it if it is wrong, and to request erasure once the purpose for holding it has ended. You can ask us to restrict processing while a complaint or correction is being handled, to receive your data in a portable format (data portability), and to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time — though that will not affect processing we have already completed on the basis of consent you gave earlier.
These rights are not absolute. We may need to retain data to comply with a legal obligation, to defend ourselves in a dispute, or because deletion would make it impossible to answer a question you have already asked. Where a right does not apply, we will explain why.
How to exercise your rights
Send a request to [email protected], stating which right you wish to exercise and providing enough detail for us to locate your data — the email address you used on a contact form, or the approximate date of your visit if you are asking about technical logs. We will respond within one month, or within three months for complex requests. There is no charge unless your request is manifestly unfounded or excessive, in which case we may ask for a reasonable fee or refuse to act.
If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority. You can contact them at ico.org.uk, by phone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Protection of minors
This site is intended for persons aged 18 and over (18+). We do not knowingly collect personal data from anyone under that age. If you are a parent or guardian and you believe your child has sent us information, contact [email protected] and we will delete it. The devices in your home are your responsibility — consider installing parental-control software such as Net Nanny or Qustodio if a minor has access to equipment used for gambling-related browsing.
Changes to this policy
We may update this privacy policy to reflect changes in the law, in our data practices, or in the tools we use to run the site. The date at the foot of this page shows when it was last revised. Significant changes will be highlighted at the top of the policy for a reasonable period — we will not silently alter your rights and hope you do not notice.
For questions about how we handle your data, or to exercise any of the rights listed above, contact the editorial team at [email protected]. We aim to respond within 48 hours on working days.
Last updated: 23 October 2026
This site is for players aged 18 and over (18+) only. If data protection ever feels unclear or you need confidential guidance on privacy rights, the ICO offers free help at ico.org.uk.
Last updated:
Game Providers
