Privacy Statement

Last Updated: October 2026. This Privacy Statement forms a core component of Fortuna Loto's unwavering commitment to absolute operational transparency and rigorous data security protocols.

1. Data Collection Protocol

At Fortuna Loto, the collection of personal data is executed with surgical precision, ensuring we gather only what is strictly necessary to maintain a secure, compliant, and premium gaming environment. Under the Australian Privacy Act 1988 (Cth), we act as both the data controller and primary processor of the information you provide to us directly.

When you register to curate your lines on our platform, we collect Essential Personally Identifiable Information (PII). This includes, but is not limited to, your full legal name, date of birth, residential address, email address, and a verified contact number. This data is non-negotiable, as it is mandated by Australian state and federal regulators to enforce our strict 18+ age restrictions and to verify geographic eligibility before any ticket purchase is executed.

Furthermore, during the financial transaction phase, we collect Payment Processing Information. We employ tokenized encryption for all banking and credit data, meaning the raw financial data is instantly obfuscated. Fortuna Loto never stores complete credit card numbers or raw bank credentials on our operational servers; they are managed entirely by our PCI-DSS Level 1 compliant financial partners.

2. User Rights Module

Transparency is our defining pillar, and that philosophy extends to your autonomy over your personal data. Under applicable privacy frameworks, including alignment with GDPR principles for international operational standards, you retain robust, enforceable rights regarding your information stored within our ecosystem.

Right to Access: You possess the unencumbered right to request a full, structured export of the personal data we hold about you. This request can be initiated via your portfolio dashboard and will be fulfilled in a machine-readable format within 14 business days.

Right to Correction: Should any of your information change or be recorded inaccurately, you maintain the right to immediate correction. Note that certain fields, such as Legal Name or Date of Birth, require verified documentary proof (such as a scanned government ID) to alter, ensuring the integrity of our Anti-Money Laundering (AML) protocols.

Right to Erasure: Also known as the "Right to be Forgotten." You may request the deletion of your account and associated data. However, please be advised that due to strict financial tracking laws and iGaming compliance mandates, certain transaction records and verification logs must be retained for a mandatory period (typically up to seven years) before they can be permanently eradicated from our archival servers.

3. Third-Party Sharing Matrix

Fortuna Loto does not, and never will, sell your personal data to external marketing agencies or data brokers. The transfer of your data to third parties is strictly limited to partners who facilitate the core functionality of our high-end platform, or to authorities where legally compelled.

Identity Verification Services: We partner with state-approved verification gateways (e.g., Equifax, greenID) to cross-reference the PII you provide during registration against official databases. This ensures immediate age and identity verification without manual friction.
Payment Processors: Your encrypted payment tokens are shared with our financial gateway providers to authorize ticket purchases and securely route division payouts directly to your nominated Australian bank account.
Regulatory Authorities: As a licensed lottery operator, Fortuna Loto is subject to routine audits. We may share specific data sets with bodies such as the Australian Transaction Reports and Analysis Centre (AUSTRAC) to comply with AML and counter-terrorism financing laws.

4. Data Security and Retention Policies

Our infrastructure mimics institutional banking security models. All data in transit is protected by AES-256 encryption over TLS 1.3 protocols, while data at rest is secured within firewalled, geographically redundant servers located strictly within the borders of Australia. Access to this data by Fortuna Loto personnel is heavily restricted, logged, and operates on a principle of least privilege.

Regarding retention, our system automatically categorizes your data. Active account data remains live to facilitate your gameplay and payout claims. Upon account closure, standard personal data is immediately segregated from the active environment. Financial transaction histories and KYC verification documents are shifted to a highly secure, offline archive to fulfill our statutory seven-year retention obligation. Once this statutory period lapses, the data undergoes cryptographic shredding, rendering it permanently irrecoverable.

5. Protocol Modifications