Privacy Policy & Data Protection • DrukYul Lucky Lottery

🏛️ 1. Governance & Regulatory Scope

This Privacy Policy outlines how the Directorate of Lotteries, Ministry of Finance, Royal Government of Bhutan collects, validates, protects, and handles personal data obtained via this official web portal and through in-person prize claim submissions at the Phuentsholing Head Office.

Our practices comply with the statutory directives of the Royal Government of Bhutan, the Royal Monetary Authority (RMA) Anti-Money Laundering and Countering Financing of Terrorism regulations, and government cybersecurity standards.

📋 2. Categories of Information Collected

2.1 Public Portal Visitors: When you access this results portal, our servers automatically log anonymous connection data including IP address, browser type, operating system, and timestamp solely for firewall security, anti-bot protection, and system performance monitoring. No personal profiling cookies are deployed.

2.2 Prize Claimants & KYC Verification: For ticket holders claiming prizes above Nu. 10,000/-, the Directorate is legally required to collect and verify official Know Your Customer (KYC) documentation:

Full Legal Name and contact address.
Copy of Bhutan Citizen Identity Card (CID) or valid Passport.
Original physical winning ticket and selling agent endorsement stamp.
Authorized bank account details for direct electronic wire transfer.
Signed affidavit of lawful ticket possession.

⚙️ 3. Purpose of Processing Personal Data

• Authentication & Payout: To verify ticket validity, confirm claimant identity, and execute accurate prize disbursement.

• Anti-Fraud & AML Compliance: To prevent multiple claims, counterfeit presentations, money laundering, or illegal diversion of funds.

• Royal Audit Authority Oversight: To maintain mandatory public fiscal records as audited annually by the Royal Audit Authority (RAA) of Bhutan.

🛡️ 4. Winner Confidentiality & Zero Commercialization

4.1 Zero Commercial Sale: The Directorate does not sell, rent, lease, or monetize participant personal data under any circumstances.

4.2 Winner Privacy Discretion: While summary draw announcements (ticket number, prize tier, winning series) are published publicly as part of official gazette transparency, personal claimant identifiers (names, home addresses, bank accounts) are treated with strict confidentiality. Winners may request non-disclosure of their identities in promotional media.

🔐 5. Security Safeguards & Data Retention

All claimant files, physical claim slips, and digital records are preserved in access-restricted archives monitored under 24/7 surveillance at the Phuentsholing Directorate IT Division. Digital transmissions employ end-to-end SSL/TLS encryption.

Physical and electronic claim records are retained for a statutory audit period in accordance with the Royal Government Financial Rules and Regulations, after which they are securely archived or expunged.

📞 6. Data Inquiries & Officer Contacts

Participants wishing to inspect, verify, or update their submitted claim records may contact the Directorate Data Protection & IT Division: