1. Purpose

The Board and management of Heco Lotto Limited are committed to the protection of the personal information of individuals that it collects in the course of conducting its various businesses. This privacy policy describes how we manage any information that we have about you.

Personal information of individuals which is collected can be used in connection with the conduct of the businesses of Heco Group.

2. Scope

This privacy policy is applicable to Heco Lotto Limited and all of its subsidiaries that conduct business within Australia. In this policy, a reference to Heco Group is a reference to Heco Lotto Limited (ACN 108 686 040) and all of its subsidiaries.

3. Compliance with Privacy Legislation

Heco Group is bound by, and will comply with, the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Act).

4. Collection of Personal Information

4.1 Definition of personal information

Personal information is generally defined as information or an opinion that can identify or reasonably identify a person. This usually includes information such as your name, date of birth, address, telephone number and possibly your email address. The type of personal information that Heco Group may collect about you will depend upon the nature of your relationship with Heco Group. For example, we may need more information about you to become a Heco Card and Winners Circle card member or an account holder than we would if you wished only to enter a promotion conducted by Heco Group. Where reasonable and practical to do so, we will collect information directly from you and also from your use of our various products and services.

4.2 Privacy Statement/Notice

At or before the time that Heco Group collects personal information from you (or, if that is not practicable, as soon as practicable after) it will take reasonable steps to ensure that you are given a privacy statement/notice where you will be made aware of the purpose for collecting that information and how that information will be used.

5. Use and Disclosure of Personal Information

In general, Heco Group policy is that we will use or disclose personal information for the purpose which was either specified or reasonably apparent at the time of collection. For example to provide our products and services to you and enable you to participate in any loyalty programs that we may be involved in or promotions conducted by Heco Group. We may also use or disclose it for any other related purpose for which you would reasonably expect it to be used. Heco Group may also use your personal information to send marketing or promotional material to you, unless you indicate that you do not wish to receive it.

Heco Group does not generally disclose personal information to third parties except:

  • information relevant to the management of Heco Group businesses which is otherwise available in the public domain;
  • where third party contractors appointed by Heco Group require access to personal information held by us to perform services for us or on your behalf; or
  • where Heco Group reasonably believes it is necessary to protect any person and/or Heco Group rights or property;
  • where Heco Group is required or authorised by law to do so
  • to recognised governing bodies responsible for the administration of events on which Heco Group businesses conduct wagering where there are reasonable grounds to suspect that there has been a breach of the rules of the event, rules of the governing body or a threat to the probity of the event on which Heco Group businesses conduct wagering with your consent.

6. Heco Group Websites

Specific Heco Group websites may collect "click stream" information (such as areas of our websites you have accessed and the time and date of access) from your use of our websites. Heco Group may also collect Doubleclick Adserving information (such as whether a marketing campaign has been effective) from your use of our websites.

We may also store "cookie" information, such as user preferences relating to the use of our websites. A cookie is a small data file that may be placed on the computer of a web user (usually in the browser software folder). The information collected may be used to offer our products and services directly to you and customise and improve websites. If you do not want us to store cookie information on your computer, you can set your browser to disable this feature. This may mean you will not be able to take full advantage of Heco Group services offered on our websites.

7. Security of Personal Information

Heco Group will take reasonable steps to (a) protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure; and (b) to ensure that the personal information that it collects, uses or discloses is accurate, complete and up to date.

8. Seeking Access to Personal Information

You are welcome to request access to personal information Heco Group holds about you. There are certain situations where Heco Group may decline to give you access to your personal information, and these are set out in the Act. We will give you written reasons if we deny access and advise you of the mechanism available to complain about the refusal.

In specific cases, please write directly to the relevant Heco Group company and include your name, address, date of birth and signature. We will send you the appropriate access form. In all cases we will inform you if a cost applies to finding and supplying the information before we perform this task.

9. Changing Information

If you have reason to believe personal information which we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading please write to the relevant Heco Group company and include your full name, address, date of birth, membership or account number (if any), signature and specify the information you wish to change.

10. Anonymous Dealings

Where it is lawful and practicable to do so, you may deal with Heco Group without providing personal information or by using a pseudonym.

If your dealing with us is about an account or membership, you will be requested to provide account information or personal information or verify your identity in order to be provided with a service or to answer an inquiry.

11. Sending Information Overseas

Heco Group will only disclose personal information to overseas recipients in circumstances where it is permitted by the Act.

If information is disclosed to overseas recipients, you will be advised at or before the time that Heco Group collects personal information from you (or, if that is not practicable, as soon as practicable after) that information may be disclosed to overseas recipients and, where it is practicable to do so, the countries in which such recipients are likely to be located.

12. Changes to the Privacy Policy

Heco Group reserves the right to change this Privacy Policy at any time and to notify you by posting an updated version of the policy on our website,www.hecolott.com.

13. Additional Information on Privacy

For further information about privacy issues and the protection of privacy, visit the Office of the Australian Information Commissioner's website atwww.oaic.gov.au.

14. Resolving your privacy concerns

If you have any issues that you wish to raise with Heco Group or you wish to make a complaint regarding Heco Group's management of your personal information please contact us. We take complaints about privacy concerns seriously and we will work to resolve your complaint and correct any errors on our part.