The Kenya Lucky Draw is operated by the organiser (hereinafter referred to as "we", "us", or "our"). We are the data controller for all personal information collected through this platform.
For any privacy-related enquiries, contact us at info@kenyaluckydraw@gmail.com .
We collect only the minimum data necessary to operate the draw and deliver your ticket. Here is exactly what we collect and why:
| Data | Why we collect it | Required? |
|---|---|---|
| Full name | To identify the ticket holder and announce the winner | Yes |
| M-PESA phone number | To send your SMS ticket confirmation and draw results; to prevent duplicate purchases | Yes |
| M-PESA confirmation code | To verify that payment was made before issuing a ticket | Yes |
| Ticket number | Your unique raffle entry identifier | Auto-generated |
| 5-number combination | Your entry combination for the draw | Auto-generated or self-chosen |
| Date and time of purchase | For audit and record-keeping purposes | Auto-generated |
We do not collect: National ID numbers, email addresses, physical addresses, browsing history, cookies, device fingerprints, or any financial data beyond your M-PESA transaction reference.
We collect and process your personal data for the following specific purposes:
- Ticket issuance — to assign and record your unique ticket and combination
- Payment verification — to confirm your M-PESA payment before issuing a ticket
- SMS confirmation — to send you proof of your ticket entry
- Draw administration — to conduct a fair and auditable draw
- Winner notification — to contact the winner and all participants with results
- Dispute resolution — to verify claims in case of a dispute
We do not use your data for marketing, advertising, profiling, or any purpose beyond operating this specific draw.
We use the following third-party services to operate this platform. Each has its own privacy policy:
By purchasing a ticket you consent to receive the following SMS messages on your registered M-PESA number:
- Ticket confirmation SMS — sent immediately after your ticket is issued, containing your ticket number and 5-number combination
- Draw result SMS — sent after the draw to all participants, informing them whether their ticket won
We will not send you promotional, marketing, or unsolicited messages beyond these two draw-related communications.
Message delivery depends on Safaricom and Africa's Talking network availability. We cannot guarantee delivery times.
We do not sell, rent, or trade your personal data to any third party.
We share your data only in the following limited circumstances:
- With Africa's Talking — your phone number is shared solely to deliver your SMS messages
- With law enforcement — if required by Kenyan law or a valid court order
- With the winner publicly — the winner's first name and ticket number will be announced on the draw page and via SMS to all participants. Full contact details are never published publicly.
We retain your personal data for the following periods:
| Data type | Retention period | Reason |
|---|---|---|
| Ticket records (name, phone, ticket number, combination) | 6 months after the draw | Dispute resolution and prize claiming |
| M-PESA confirmation codes | 6 months after the draw | Payment audit trail |
| SMS delivery logs | 30 days | Technical troubleshooting |
| Winner's information | 1 year after the draw | Legal compliance and audit |
After the retention period, all personal data is permanently deleted from the database.
Under the Kenya Data Protection Act 2019, you have the following rights regarding your personal data:
- Right to access — you can request a copy of the personal data we hold about you
- Right to correction — you can request correction of inaccurate data (e.g. a misspelled name)
- Right to deletion — you can request deletion of your data, subject to legal retention requirements. Note: deleting your data before the draw voids your ticket entry with no refund.
- Right to object — you can object to processing of your data in certain circumstances
- Right to lodge a complaint — you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya
To exercise any of these rights, contact us at info@kenyaluckydraw@gmail.com or 0700 000 000. We will respond within 14 days.
For any privacy questions, data requests, or concerns, please reach us through:
| info@kenyaluckydraw@gmail.com | |
| Office of the Data Protection Commissioner | odpc.go.ke |