Website Privacy Policy
Aligned with the Data Protection Act No. 1 of 2023 and international data protection best practice
The National Lotteries Authority (“NLA”, “we”, “us”, “our”) respects your privacy and is committed to protecting the personal data of everyone who visits our website. This Privacy Policy explains what personal data we collect through our website, why we collect it, how we use and protect it, and the rights available to you. Please read it together with any specific notice provided at the point where your data is collected.
The NLA is the data controller responsible for the personal data collected through this website. Our registered office is at Carenage, St. George’s, Grenada, W.I. If you have any question about this policy or wish to exercise your rights, you may contact us by email at info@nla.gd, by telephone on +1 (473) 440-7050, or by writing to us at the address above.
This policy is aligned with the Grenada Data Protection Act, No. 1 of 2023 (the “GDPA”), and with international data protection best practice. The NLA is committed to observing the data protection principles reflected in the GDPA, including that personal data is processed lawfully and fairly, collected for specified purposes, kept accurate and secure, retained no longer than necessary, and not disclosed except as permitted. The supervisory authority for data protection in Grenada is the Information Commission.
This policy applies to personal data collected through the NLA corporate website. Personal data collected when you register and play through our web-sales and gaming platform, including your player account, transactions and Virtual Wallet, is governed by the separate NLA Data Collection Consent & Disclaimer notice, which applies at the point of registration. Where the two documents overlap, the notice provided at the point of collection takes precedence for that specific activity.
When you contact us through a form on the website, subscribe to our newsletter, or otherwise correspond with us, we collect the information you choose to provide. This may include your name, email address, telephone number, parish or location, and the content of your message or enquiry.
When you visit the website, we and our service providers automatically collect certain technical information, including your IP address, browser type and user-agent string, device information, the pages you view, the date and time of your visit, and referring pages. This information is collected through cookies and similar technologies and through our server access logs, and is used mainly to operate the site securely, to prevent abuse, and to understand how the site is used.
If commenting is enabled and you leave a comment on the site, we collect the information shown in the comment form, together with your IP address and browser user-agent string, to assist with spam detection. An anonymised string created from your email address (a hash) may be sent to the Gravatar service to check whether you use it; the Gravatar service is operated by Automattic, and its privacy policy is available at https://automattic.com/privacy/. Once your comment is approved, your profile picture, if any, is visible to the public alongside your comment.
If you are permitted to upload images to the website, please avoid uploading images that contain embedded location data (EXIF GPS), as visitors may be able to download those images and extract the location data.
Pages on this site may include embedded content, such as videos, images or articles from other websites. Embedded content from another website behaves as though you had visited that other website directly. These third-party websites may collect information about you, set their own cookies, embed additional tracking, and monitor your interaction with that content, particularly if you have an account and are logged in to that website. We do not control the privacy practices of these third parties, and we encourage you to review their privacy policies.
We collect and use your personal data for the following purposes, relying on the lawful bases indicated:
A cookie is a small text file placed on your device when you visit a website. We use cookies to make the site work, to remember your preferences, and to measure how the site is used. The main categories are:
You can control non-essential cookies through the cookie settings provided on the website, and you can manage or delete cookies through your browser settings. Restricting cookies may affect how parts of the site function.
We do not sell, rent or trade your personal data. We share it only in the following circumstances:
Some of our service providers, such as our analytics and comment-service providers, process data on servers located outside Grenada. Where personal data is transferred outside Grenada, we take reasonable steps to ensure it continues to be protected to a standard consistent with this policy and with international best practice.
We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Enquiry and correspondence data is kept for as long as needed to deal with your matter and for a reasonable period afterwards. Where commenting is enabled, a comment and its metadata are kept for as long as the comment remains published, so that follow-up comments can be recognised and approved, and may be removed on request. Where account registration is enabled, profile information is kept for the life of the account. When data is no longer required, it is securely deleted or irreversibly anonymised.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. However, no transmission of data over the internet can be guaranteed to be entirely secure, and any transmission is at your own risk.
Subject to applicable law, you have the following rights in relation to your personal data, which you may exercise by contacting us using the details in Section 2:
We will respond to any request within a reasonable period and in accordance with applicable law. We may need to verify your identity before acting on a request.
Our games and services are intended for persons aged eighteen (18) years and over. It is a criminal offence under the Gambling, Lotteries and Betting Act, Cap. 120 for the NLA to engage in betting or lottery dealings with any person under the age of eighteen. We do not knowingly collect personal data from persons under 18 for these purposes, and any such registration will be disqualified.
The website may contain links to other websites operated by third parties. This policy does not apply to those websites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any website you visit.
We may update this policy from time to time to reflect changes in law or in our practices. The current version will always be published on this website, with the version number and effective date shown above. Material changes will be brought to your attention where appropriate.
To exercise any of your rights, ask a question, or raise a concern about how we handle your personal data, please contact:
National Lotteries Authority
Carenage, St. George’s, Grenada, W.I.
Telephone: +1 (473) 440-7050
Email: info@nla.gd
