Data retention

We keep only what we need, for only as long as we need it.

UK GDPR requires us to justify every retention period. This page lists them in plain English, category by category, so you can see exactly what we hold and when it goes.

Last reviewed: 14 August 2026

1

The principle we work to

We retain personal data only while there is a live purpose for it: running your account, paying a prize, meeting a legal obligation, or defending a claim. When that purpose ends, the data is deleted or irreversibly anonymised so it can no longer identify you.

Where a retention period is set by law — tax, anti-fraud or accounting rules — that period overrides your deletion request for the affected records, and we will tell you when that applies.

2

Account and profile data

Your name, username, email address, postcode, address, phone number, avatar, bio and account preferences are kept for as long as your account is open.

After you close your account, or after 24 months of dormancy following our warning notices, we delete or anonymise your profile within 30 days — except for the records listed in the sections below.

3

Draw entries and winner records

Draw entries and winning postcodes are retained for 6 years after the draw. This lets us evidence that draws were fair, resolve disputes, and answer questions from a regulator or the courts.

Published winner listings are anonymised where you have chosen to hide your name; only the postcode district and the prize amount remain visible.

4

Financial, payout and verification data

Prize payments, withdrawal requests, wallet and point transactions, bank or payout references and referral commission records are kept for 7 years from the end of the tax year in which they occur, to meet HMRC and accounting requirements.

Identity verification documents are reviewed and then deleted within 90 days of a decision. We retain only the outcome — verified or rejected — the document type and the date, not the document itself.

5

Support, complaints and moderation

Support tickets, private messages with our team, and complaint records are retained for 6 years from closure so we can evidence what was decided and why.

Forum posts stay visible while your account is open. On closure your posts are detached from your identity and shown as from a removed member, preserving the readability of threads for other members.

6

Security, technical and analytics data

These are the shortest periods we operate:

  • Login history and IP addresses used for sign-in: 12 months.
  • Admin audit logs of staff actions: 6 years (they evidence decisions about members and money).
  • Visitor session and page-view analytics: 14 months, then aggregated with all identifiers removed.
  • Push notification subscriptions: deleted when you disable notifications or the browser token expires.
  • Consent and cookie preference records: 12 months from the date given.
  • Newsletter subscriptions: until you unsubscribe, plus a suppression record kept indefinitely so we never email you again by mistake.
7

Your rights

You can request access to your data, correction of anything inaccurate, erasure, restriction of processing, portability of the data you gave us, or object to processing based on our legitimate interests. Use the Privacy tab in your account settings or contact us through the Support page; we respond within one month.

Where we must keep a record for a legal period, we will restrict it — locking it away from ordinary use — rather than continue to process it.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put it right first through our Complaints Procedure.

Read this alongside our Privacy Notice and Cookie Policy, which explain what we collect and on what legal basis.