RaffleLink — Privacy Policy

Last updated: 2 July 2026

Glacier Park Group Pty Ltd (ABN 61 670 432 185), trading as RaffleLink (“RaffleLink”, “we”, “us”, “our”) operates the RaffleLink platform — the website, customer and organiser portals, mobile app, and embedded purchase widgets we make available at www.rafflelink.com (the “Platform”).

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and by the Notifiable Data Breaches scheme. This policy explains what personal information we collect, how we use and protect it, who we share it with, and the rights and choices you have. If you have any questions, contact us at [email protected].

1. Who this policy covers

RaffleLink connects three kinds of people, and we handle personal information for each:

• Organisers — the not-for-profit organisations, clubs, schools, community groups, and their authorised representatives who run raffles on the Platform (also referred to as clients or beneficiaries).
• Ticket buyers — people who buy raffle tickets, whether online, through an embedded widget, or in person via an organiser using our app.
• Visitors — anyone who browses the Platform without buying or registering.

2. Information we collect

Information you give us

• Account and contact details — name, email address, phone number, postal address, and (for buyers) date-of-birth or age confirmation where a raffle requires it.
• Organiser onboarding details — organisation name, ABN, not-for-profit or charity status, permit and regulatory details, nominated bank account for payouts, and identity or authority documents you upload (for example, a letter of authority or bank statement used to verify a payout account).
• Purchase details — the tickets you buy, answers to any questions an organiser adds to their raffle, and your marketing and prize-publication preferences.
• Communications — the content of enquiries, feedback, support requests, and survey responses you send us.

Information we collect automatically

• Technical and usage data — IP address, browser and device type, the pages you visit, referring website, and the date and time of access. We use this to run, secure, and improve the Platform.
• Cookies and analytics — see section 7.

Information from third parties

• Authentication — if you sign in with Google or another identity provider, we receive basic profile information (such as your name and email) from that provider.
• Payment providers — our payment processors confirm the status of your payment to us (see section 4).
• Public and verification sources — for organiser due diligence, we may collect information from publicly available sources (for example, the Australian Business Register or a regulator's public register) to confirm an organisation's legitimacy and eligibility.

Sensitive information. We do not seek to collect sensitive information such as race, ethnicity, political or religious beliefs, sexual orientation, or health information. Where a raffle asks buyers questions, organisers are instructed not to request sensitive information.

Payment card data. We do not store full card numbers. Card details are entered directly into our payment providers' secure systems. We retain only limited, non-sensitive data (such as the last few digits and a payment reference) for reconciliation.

Children. The Platform is intended for adults. Buyers must meet the minimum age for the relevant raffle (generally 18). We do not knowingly collect personal information from anyone under that age.

3. How we use your information

We use personal information to:

• create and manage your account, and verify organisers and their authority to run a raffle;
• process ticket purchases, issue receipts, and manage raffles, draws, and winner notifications;
• calculate and remit raffle proceeds to organisers and provide the sales and financial reports they need for their record-keeping and regulatory obligations;
• provide customer support and respond to your enquiries;
• operate features you use, such as buyer accounts, saved tickets, and any referral or rewards program;
• keep the Platform secure, detect and prevent fraud or misuse, and meet our legal and regulatory obligations;
• improve the Platform, understand how it is used, and develop new features; and
• send you service communications and, where permitted, marketing (see section 6).

We only collect and use personal information that is reasonably necessary for these functions.

4. Payments

We use third-party payment providers — currently Stripe and PayPal — to process card and wallet payments. When you pay, your payment information is handled by the relevant provider under its own terms and privacy policy. These providers may process or store data outside Australia (see section 8). We receive confirmation of the transaction and limited reference data, but not your full card details.

5. Who we share your information with

We share personal information only as needed to run the Platform and meet legal obligations:

• Organisers and beneficiaries. A buyer's purchase and contact details appear in the sales and financial reports we provide to the organiser (and any beneficiary organisation) for the raffle they bought into. Organisers use this to contact winners, distribute prizes, and meet their record-keeping and regulatory obligations.
• Winner publication. Gaming regulations generally require winners' names to be published (for example, on a website or newsletter). During checkout, buyers may opt to have their identity withheld from publication if they win, where the applicable rules allow.
• Service providers. We use trusted providers to run the Platform — including cloud hosting and infrastructure (Google Cloud / Firebase), payment processing (Stripe, PayPal), analytics and error monitoring, email delivery, accounting (Xero), and customer-relationship tools. They may only use the information to provide services to us.
• Regulators and authorities. We may disclose information to government bodies that oversee community gaming, or where required or authorised by law, to enforce our terms, or to protect the rights and safety of any person.

We do not sell your personal information.

6. Marketing and your choices

We may send you information about RaffleLink and about raffles that may interest you, where you have consented or where the law otherwise permits. Every marketing message includes a simple way to opt out, and you can change your preferences at any time by contacting us. Opting out of marketing does not stop essential service communications (such as receipts, or notices about a raffle you entered). On request, we will tell you the source of your personal information.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, measure usage, and improve the Platform. We use analytics and error-monitoring tools to understand how the Platform performs and to diagnose problems. You can control cookies through your browser settings, though some features may not work properly if you disable them.

Our marketing website uses PostHog, an analytics service, to understand how the site is used — for example, which pages are visited and how visitors interact with them. This involves cookies or similar identifiers, and the resulting analytics data is handled in accordance with this policy.

Some pages offer a live-chat widget provided by HubSpot. If you use it, HubSpot sets cookies to keep your conversation connected, and the details you share in chat (such as your name, email address and message) are stored in our customer relationship system and handled in accordance with this policy.

8. Cross-border disclosure

We aim to store personal information in Australia. However, some of our service providers — including our payment, cloud infrastructure, and analytics providers — may store or process data on servers located overseas, including in the United States and other countries. Where this occurs, we take reasonable steps to ensure the information is handled consistently with the APPs.

9. How we keep your information secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure, including:

• encryption of data in transit (TLS) and access controls that limit data to authorised personnel;
• organiser access scoped so an organiser can only see the data for their own raffles;
• segregation of client data and secured, access-controlled databases;
• documented data-breach response procedures, aligned with the Notifiable Data Breaches scheme, so that affected individuals and the OAIC are notified where required; and
• regular backups and monitoring.

No system is completely secure, and we cannot guarantee absolute security, but we work to protect your information and respond quickly if something goes wrong.

10. How long we keep it

We keep personal information only as long as needed for the purposes above or as required by law — including gaming record-keeping and financial and tax obligations, which may require organisers and us to retain raffle records for a period after a raffle concludes. When information is no longer needed, we take reasonable steps to destroy or de-identify it.

11. Accessing and correcting your information

You may ask us for access to the personal information we hold about you, or ask us to correct it, by contacting us at [email protected]. We may need to verify your identity first. We will respond within a reasonable time. In limited cases we may decline access as permitted by law (for example, where it would unreasonably affect another person's privacy), and if so we will explain why.

12. Complaints

If you believe we have mishandled your personal information, please contact us first at [email protected] so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The current version is always available on the Platform, and the “last updated” date shows when it last changed. Significant changes will be notified through the Platform or by email.

14. Contact us