PRIVACY POLICY

AI Bits Ltd trading as Family Sweepstake.
Contact: richardc@aibits.co.uk

• Organiser account data — email address and authentication details when you sign up.
• Participant data — names, email addresses and (optionally) mobile phone numbers you (the organiser) add for other players. Players do not create accounts.
• Sweepstake data — the teams drawn, prize amounts you record, and results derived from public World Cup data.
• Communication preferences — whether each participant has opted in or out of email and SMS updates.
• Usage data — basic logs (IP address, browser, pages viewed) for security and reliability.

• To run your sweepstake (the draw, scoreboards, brackets, golden-boot tracking).
• To send transactional and round-update emails you've opted in to.
• To secure the Service and prevent abuse.
• To respond to support enquiries.

Our legal bases are contract (running the sweepstake you set up), legitimate interests (keeping the Service secure and operational) and consent (for optional email updates).

We only send transactional emails (account, draw confirmation, sweepstake link) and the optional round-update emails you've opted into.

• Opt in: participants are added by the organiser and may opt in to round updates via their private sweepstake link.
• Opt out: every notification email contains a one-click unsubscribe link. You can also unsubscribe at any time at familysweepstake.com/unsubscribe or by emailing us.
• Unsubscribing stops all notification emails. Essential service emails (e.g. password reset) may still be sent because they are required to operate your account.

We send SMS round updates and reminders from a US toll-free number only to participants who have explicitly opted in.

• Opt in: participants opt in to SMS updates via their private sweepstake link by entering their mobile number and ticking the SMS consent box. Consent is never a condition of using the Service, and is never purchased, sold, or shared with third parties for their marketing purposes.
• Message types: match-day reminders, round results, knockout updates and Golden Boot updates during the tournament.
• Frequency: message frequency varies; typically 0–5 messages per week during the tournament.
• Cost: message and data rates may apply from your mobile carrier. We do not charge for SMS.
• Opt out: reply STOP to any SMS to immediately unsubscribe from all text messages. Reply HELP for help, or contact richardc@aibits.co.uk. You can also turn SMS off any time from your private sweepstake link.
• Carriers: mobile carriers are not liable for delayed or undelivered messages.
• No sharing of mobile data: mobile phone numbers and SMS consent information are never shared with third parties or affiliates for marketing or promotional purposes. They are shared only with the SMS provider that delivers the messages on our behalf.

We do not sell personal data. We share it only with the processors that run the Service on our behalf: our hosting and database provider, our email-delivery provider, our SMS-delivery provider, and our analytics / error-reporting tools. All processors are bound by contract and process data only on our instructions. Mobile phone numbers and SMS opt-in data are never shared with third parties or affiliates for marketing or promotional purposes.

Some of our processors are based outside the UK / EEA. Where that's the case, transfers are covered by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

We keep sweepstake data for as long as your account is active and for a short period after to allow recovery. You can ask us to delete your account and the sweepstakes you've created at any time by emailing richardc@aibits.co.uk.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion ("right to be forgotten").
• Object to or restrict processing.
• Withdraw consent at any time (including unsubscribing from emails).
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

We use a small number of strictly necessary cookies for authentication and session management. We do not use advertising cookies.

The Service is intended to be set up by an adult organiser. Where a sweepstake includes children, the organiser is responsible for parental consent for any email addresses they add.

We may update this Policy from time to time. Material changes will be communicated by email or on the Service.