Nagaland State Lottery - Privacy Policy

Information We Collect

Personal identification information

When you interact with nagalandstatelottery.org, we may collect information that identifies you as an individual. This includes your full name, date of birth, postal address, email address, and mobile number, typically provided when you register an account, submit a lottery inquiry, or contact our support team.

Financial and transaction data

To process ticket purchases, prize claims, or refunds, we collect payment-related details such as bank account numbers, UPI identifiers, or other instrument details required under applicable Indian financial regulations. We do not store full card numbers on our servers; payment processing is handled by PCI-DSS compliant third-party processors.

Government-issued identity documents

In accordance with the Nagaland Lotteries (Regulation) Act and applicable Know Your Customer (KYC) requirements under Indian law, we collect copies of government-issued identity proof (Aadhaar, PAN, Voter ID, or Passport) and address proof documents when you claim a prize above the threshold prescribed by law.

Technical and usage data

We automatically collect certain technical information when you visit our website, including your IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and clickstream data. This information is collected through cookies, web beacons, and server log files. Please refer to our Cookie Policy for full details.

Communications data

If you contact us by email, telephone, or our online form, we retain records of that correspondence, including the content of your messages and our responses, to maintain accurate service records and comply with our legal obligations.

How We Use Your Information

Service delivery and account management

We use your personal information primarily to operate the Nagaland State Lottery platform, processing ticket purchases, verifying winning claims, disbursing prize amounts, and maintaining your account. Without this processing, we cannot provide the core services you have requested.

Legal and regulatory compliance

We are required by law to verify the identity of prize claimants, deduct Tax Deducted at Source (TDS) as mandated under the Income Tax Act, 1961, and report certain transactions to regulatory authorities. Your identity and financial data are used to fulfil these statutory obligations. We retain such records for the periods prescribed by applicable Indian law.

Fraud prevention and security

We process technical and identity data to detect and prevent fraudulent transactions, unauthorised access, and abuse of our platform. This includes automated screening of transactions against risk models and, where legally required, reporting suspicious activity to law enforcement agencies.

Customer support

Communications data and account information are used to respond to your queries, resolve disputes, and provide after-sale support. Our support team accesses only the data necessary to address your specific issue.

Website improvement and analytics

Aggregated and anonymised usage data helps us understand how visitors navigate our website, identify technical errors, and improve the user experience. We use analytics tools that process data in a privacy-preserving manner and do not sell or rent individual-level behavioural data to third parties.

Marketing communications

Where you have given explicit consent, we may send you information about new lottery draws, promotions, and result notifications by email or SMS. You may withdraw consent at any time by clicking the unsubscribe link in any marketing message or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

Legal basis for processing

Under applicable Indian data protection law, we rely on the following lawful bases: (a) contractual necessity, to perform our agreement with you; (b) legal obligation, to comply with statutory and regulatory requirements; (c) legitimate interests, to operate a secure and efficient lottery service; and (d) consent, for marketing communications and non-essential cookies.

Data sharing and disclosure

We do not sell your personal data. We share it only with: (i) authorised government bodies and lottery regulators as required by law; (ii) payment processors and KYC verification partners acting under data processing agreements; (iii) IT service providers who host or maintain our systems under contractual confidentiality obligations; and (iv) law enforcement or courts when compelled by a valid legal order.

Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law. Prize claim records and associated KYC documents are retained for a minimum of seven years in accordance with financial record-keeping obligations. Account data is deleted within ninety days of account closure, subject to any outstanding legal holds.