PRIVACY POLICY
We protect your personal information.
This policy has links to third-party sites the Lottery believes may be useful to you and which may provide different services. When you link to another site, you are no longer using the Lottery’s Website and Services and are subject to the privacy policy of the new site.
Collection and Use Practices:
The Lottery collects personal information from individuals only as allowed by law and with their explicit consent where required. The Lottery limits the collection of personal information to what is relevant and necessary to accomplish its lawful purpose, as defined in the California State Lottery Act. For example:
- The Lottery may need an individual’s home address, email address or telephone number in order to answer that person’s questions, process a claim form or provide some other requested assistance.
- The Lottery may request demographic information which may include: ZIP code, age, gender, preferences, interests and favorites in order to personalize and improve its services.
- The Lottery may request information about an individual’s personal preferences and interests to better understand and anticipate their needs.
Information Collected Automatically
The Lottery will not distribute or sell any electronically collected personal information, as defined in Government Code section 11015.5(d), without your permission. The Lottery does not collect home, business or email addresses or account information from people who simply browse the Lottery’s Services, but it does automatically collect certain information from visitors using the Services including the domain name or Internet Protocol (IP) address that relates to the device used to access the Services, the type of browser and operating system used, and the date and time when the Services are used.
The Lottery may also automatically collect information about your interaction with the Services. For example, it may use analytics tools on its Services to retrieve information from your browser, including the website you came from, the search engine(s) and the keywords you used to find the Services, the pages you view within the Services, your browser add-ons and your browser’s width and height. This automatically collected information is not subject to disclosure under the California Public Records Act.
The Lottery may use encrypted “identifiers” to help personalize your online experience and to collect usage statistics. These identifiers store your site usage, preferences and user information, which will facilitate the future implementation of personalized services. These identifiers are:
Session Cookies – These cookies are temporary and expire once you close your browser (or once your session ends). The Lottery uses session cookies when you visit and search for informational content. Session cookies do not contain user information, will not transmit any personal information to the Lottery and are deleted automatically when the browser window closes or within 24 hours, whichever occurs first.
Persistent Cookies – This category encompasses all cookies that remain on your hard drive until you erase them, or your browser does, depending on the cookie’s expiration date, which is typically not longer than 12 months. For example, the Lottery may use persistent cookies to collect language setting information or cease displaying a notification that the user has acknowledged.
Access Tokens – To access certain Lottery Services, such as your Lottery 2nd Chance account, you will need to provide your email address and password (credentials) for authentication (sign in) purposes. Access tokens will then be assigned for valid sign in credentials and are deleted from your device when you sign out or your session expires. Access tokens allow you to access services on either the website or mobile application without having to sign in again when you move between pages or screens.
Mobile Device ID – This is a unique customer identifier used to distinguish between a mobile device and a bot. It could be an IDFA (Identifier for Advertisers) or an Android Ad Id to perform Rate Limiting, but it is not saved or stored by the Lottery and cannot be used to identify a user.
Rate Limiting – Frequently used tool to defend against network and application-level distributed denial-of-service (DDoS) attacks. When the rate of incoming requests becomes too great for the network or application to handle, rate limiting is applied to restrict the amount of incoming traffic.
Bot – An Internet bot, web robot, robot or simply bot, is a software application that runs automated tasks over the Internet that may be used by malicious actors.
Beacons also known as Pixels – These are tiny graphics with a unique identifier used to track the online movements of a web user. Unlike cookies, web beacons are embedded invisibly on web pages.
Third Party Analytics
The Lottery permits third-party analytics providers, such as Google or Facebook Analytics, to use cookies and anonymous identifiers to collect and process certain non-personally identifiable information. For example, Google Analytics may collect and process information such as how often users visit a website or the mobile application and, what pages/screens are visited, while Facebook analytics may be used to ensure advertising is targeted to users that are age 18 and over. This tracking data helps us better understand and meet the needs of our Services visitors. If you prefer to avoid third party tracking, you can opt out of Google’s advertising tracking cookie by visiting URL: https://policies.google.com/technologies/ads and/or use a browser plugin to opt out of all Google Analytics tracking software by visiting URL: https://tools.google.com/dlpage/gaoptout?hl=en.
Facebook’s Data Policy can be found at https://www.facebook.com/about/privacy/. Additionally, for more information regarding Facebook Business Tools you may also visit https://www.facebook.com/legal/terms/businesstools.
The Lottery may use third-party Software Development Kits (SDKs) in conjunction with the mobile application that combine data collected from the mobile application with data from other sources to provide personalized advertisements or to measure advertising efficiency. Data collected in this way is anonymous to us, which means we cannot see the personal data of individual users; however, this data is saved and processed by third parties. They can connect this data with your third-party account and use it for their own advertising purposes.
The Lottery’s Website collects anonymous cross-site data that is linked to the user’s device via a persistent identifier. Third parties may also use a persistent identifier to collect anonymous cross-site data that is linked to a user’s device. The Lottery does not respond to “do not track” signals or other requests to terminate the collection of this data.
Categories of Information Collected
The Lottery may also collect and store some or all of the information set forth below which enables you to use the Services and receive information, products and services, and enables the Lottery to respond to your inquiries or requests for products and services:
- Device Information: The Services or third party analytical tools may collect certain information about your device automatically when you download, connect to or use the Services. Such information may include the type of device you use and information about the way you use the Services. The Lottery may use such information to operate and improve the Services.
- Ticket Information: To ensure the integrity of Lottery games and promotions, the Lottery may collect and store information about the 2nd Chance and Check-A-Ticket codes scanned or manually entered by you. 2nd Chance information is linked to an access token that is associated with your 2nd Chance account.
- Physical Location: By using the Services, the Lottery automatically collects information about your approximate location through your Internet Protocol address and/or using location services. If you consent to use a location service, you may opt-out and withdraw your consent to the collection of your location information at any time by disabling or changing the related functionality or setting as provided in the settings of the operating system used by your device. The Lottery may use and store this information to provide requested location services (e.g., identification of nearby Retailers) and to deliver enhanced location-based services and other content.
- Contact Information: The Lottery may also provide you with an opportunity to opt in to receive special offers on your wireless telephone by providing your wireless telephone number. The Lottery allows a user to access features within the Services by providing their email.
Your Access Rights
The Lottery allows individuals who provide personal information to review that information and contest its accuracy or completeness. Individual users who have registered to use Lottery services may request to have their personal information deleted without reuse or distribution. Individual users may delete their data and personal information by signing in on the Lottery's Mobile App and going to "Settings" in the menu or by signing into the Lottery's website and going to the "Edit My Profile" page. Those using these methods will have their data and personal information removed within 48 hours. For users who cannot delete their information via the app or website, contact the Lottery's Customer Service at https://www.calottery.com/contact-us. The Lottery may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your request to delete. Requests to delete submitted to Customer Service may take 45 business days or more to process.
Security
The Lottery uses information security safeguards and takes reasonable precautions to protect the personal information collected and/or maintained by the Lottery against loss, unauthorized access, and illegal use or disclosure. The Lottery uses encryption software to protect the security of individuals’ personal information during transmission of such information through the Lottery’s Services. The Lottery also takes reasonable security measures to protect your personal information in storage. The Lottery’s staff is trained on procedures for the management of personal information, including limitations on the release of information. Access to personal information is limited to those members of the Lottery’s staff and contractors whose work requires such access. The Lottery conducts periodic reviews to ensure that proper information management policies and procedures are understood and followed. In order to access some Lottery services, you will be asked to sign in using your credentials or, in some added security cases, you may be asked to create an additional security key.
For more information regarding online privacy settings, targeted advertising, online tracking, opting-out, or simply to review updated guidance and resources on how to change privacy and security settings on different web browsers, you may want to review the consumer privacy resources provided by the California Office of the Attorney General at URL: https://oag.ca.gov/privacy/consumer-privacy-resources and the Federal Trade Commission at URL: https://www.consumer.ftc.gov/articles/how-protect-your-privacy-online.
In general, the Lottery encourages all individuals to use appropriate safeguards to secure their devices and the information they contain.
Sharing Practices
The Lottery may access, preserve and disclose your account information and content, including messages, data, text and other types of works (collectively, “Content”):
- In response to a request for information if disclosure is required by any applicable law, legal process, regulation or based on a good faith belief that such access, preservation, or disclosure is reasonably necessary,
- To enforce the Terms of Service for the Services,
- To provide and improve our Services,
- To our contractors, subcontractors, affiliates, and other third parties for marketing purposes including measurement services and targeted advertisements,
- In response to claims that Content violates the rights of third parties,
- In response to your questions, comments and requests for customer service, or
- To protect the rights, property or personal safety of the Lottery, its users and the public.
Changes to this Policy
The Lottery reserves the right, at its discretion, to change this privacy policy at any time without notice. All changes are effective upon posting. In the event that a change to this privacy policy materially modifies your rights or obligations, the Lottery may make reasonable efforts to notify you of such change. The Lottery may provide notice through a pop-up or banner within all Lottery-related websites and applications, by sending an email to any address you may have used to register for an account, or through other mechanisms. Your continued use of the Services after changes are posted constitutes your acceptance of those changes. Please check back periodically for changes.
Privacy Preferences
You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you will not be able to sign in or use other interactive features and services offered in the players’ area of the Lottery’s website.
If you choose to accept cookies, you also can later delete cookies that you have accepted. Check your browser for the most up to date instructions.
The online advertising industry also provides websites from which you may opt out of receiving targeted ads from companies that participate in industry self-regulation. You can access these websites, and learn more about interest-based advertising at www.aboutads.info/choices and at www.networkadvertising.org/choices. Note: you must separately opt out on each device you use. Opting-out will only prevent interest-based or targeted advertisements. You will continue to see generic advertisements after you opt-out.
Services may request to have their personal information deleted without reuse or distribution.
How to Contact Us
If you need to check the status of your lottery claim, have general Lottery inquiries, have questions regarding or technical issues related to your Second Chance account, please contact us at https://www.calottery.com/contact-us.
If you need to submit a California Public Records Act request, please email PRACoordinator@calottery.com.
The Lottery will provide additional information about this privacy policy if requested. If any individual has further questions about the Lottery’s privacy policy, they are encouraged to contact the Lottery’s Privacy Officer via:
privacy@calottery.com
Mail:
California State Lottery
Attention: Information Security and Privacy Officer
700 North 10th Street
Sacramento, CA 95811
Please Note: Please do not include any text, attachments, or photos of sensitive information such as a state or federal issued identification number or driver license number; passport; social security number; account password; date of birth; bank account number; or credit card number in your email or letters being sent to the California State Lottery Information Security and Privacy Office.
Effective Date: November 21, 2023