Lottery account deletion and data retention

Closing a lottery-service account does not necessarily delete the information associated with it. If your goal concerns privacy, send a separate request identifying the data and uses you want reviewed. Ask what can be erased, what must remain, why it remains and which event starts the relevant retention period.

Short answer

Closing a lottery-service account does not necessarily delete the information associated with it. If your goal concerns privacy, send a separate request identifying the data and uses you want reviewed. Ask what can be erased, what must remain, why it remains and which event starts the relevant retention period.

The practical outcome may be a mixture of deletion, restricted retention and changed marketing preferences. A reply saying “your account is closed” does not answer those privacy questions.

Identify the organisation handling your data

Start with the privacy policy for the domain, app and product you used. Record the named controller, policy date and official privacy contact. A brand name or payment description alone may not identify the organisation responsible for a particular record.

For example, LottoMart's privacy policy, effective 30 April 2026, identifies Maple International Ventures Limited in Gibraltar as its controller. Its UK-facing website is a specific operator example, not a statement about every lottery account or every country's law.

If the policy mentions a verification provider or payment company, ask whether it handles the information on the operator's instructions or under its own responsibilities. Your request should identify the service you used without assuming that one company can decide every other organisation's obligations.

Name the privacy outcome you need

Use a clear instruction rather than the ambiguous phrase “delete my account”. These are different questions:

Your intended outcomeWhat to ask for
Understand the records heldA copy or description of the relevant personal information
Remove information no longer neededReview and erasure of the specified categories
Correct an inaccurate detailCorrection of that detail and confirmation of the change
Stop promotional contactThe applicable marketing preference or objection
Understand information that remainsPurpose, basis, access limits and retention period

These are request options, not a promise that every right applies in every jurisdiction. The UK's ICO consumer guidance on deletion explains that erasure has conditions and exceptions, including necessary legal retention. Its guidance is currently marked as under review following changes to UK law; check the current page for a UK request.

For stopping subscriptions or account use, follow cancellation versus account closure. State any operational instruction separately from your data request.

Understand the retention clock

A retention period needs a record category and a starting event. “Five years” is incomplete if you do not know whether it begins at account closure, a completed transaction, a closed complaint or the end of a restriction.

LottoPark's privacy policy, effective 22 September 2026, covers its lottery and casino domains under a Costa Rica-based controller. It states that core account and identity-verification records normally remain for the account's life and five years after closure, subject to the policy's legal and case-specific exceptions. It separately describes minimum records retained while self-exclusion remains effective. Those are this operator's published categories and conditions, not a universal document-retention rule or evidence that we tested deletion.

LottoMart's policy, by comparison, describes general personal-data retention of seven years after account closure. That broad wording does not establish the precise deletion date for every uploaded identity image. Ask the operator which category your actual document belongs to and whether a verification result, an image and a transaction record have different schedules.

Do not request removal of protective restrictions as a way to resume gambling. A privacy request should preserve any self-exclusion or other protective instruction you still need.

Send a limited, traceable request

Use the verified privacy route and include enough information to locate the account. An account reference and registered contact details may be enough to start; do not attach an identity document before the recipient explains the necessary verification process.

You can adapt this wording:

Please review the personal information associated with my account [reference]. I request deletion of information no longer required, and confirmation of the categories retained, their purposes, the applicable basis, the retention start event and the period or review criteria. Please confirm separately how my marketing preferences and existing protective restrictions will be handled.

If you need transaction records for an unresolved claim, identify that need before asking for erasure. Keep the reference for a data-copy request separate from the reference for deletion so you can tell which response resolves which instruction.

Read the response by category

Compare the reply with your request. Look for a decision about each category, rather than an unexplained statement that gambling businesses keep records. If something remains, ask whether ordinary use has stopped, who still receives it and what event ends the remaining purpose.

Backups deserve a separate answer. The ICO's UK erasure guidance explains that information may remain in backups pending scheduled replacement, with requirements concerning its use and a clear explanation to the individual. Ask about that arrangement; do not infer instantaneous removal from every system from a confirmation about the live account.

Keep your request, acknowledgement, verification instructions and final response privately. If the response is unclear, ask one focused follow-up naming the missing category or decision. For a dispute, use the complaint evidence guide and identify the relevant privacy authority from the applicable policy and jurisdiction. Account closure, a valid prize claim and a privacy complaint can require separate records and separate resolutions.