PRIVACY POLICY
Last updated: 25 February 2026
This Privacy Policy explains how Hot Comps LTD collects, uses, stores, shares and protects personal data when you use our website and services.
Please read this Privacy Policy together with our Terms and Conditions and Website Terms of Use.
1. Who we are
Hot Comps LTD is the data controller for the purposes of UK data protection law.
Company number: 11230229
Registered office: 15 Palace Street, Norwich, Norfolk, England, NR3 1RT
Correspondence address: Suite 14, St. Mary’s Court, Carleton Forehoe, NR9 4AL
Email: admin@hotcomps.com
2. Scope
This Privacy Policy applies to personal data collected through:
– https://hotcomps.com and related pages
– account registration and account management
– competition entry and prize administration
– customer support, complaints and related communications
– marketing communications where permitted
This Privacy Policy does not apply to third-party websites linked from our Website.
3. Personal data we collect
We may collect and process the following categories of personal data:
– Identity data: name, title, date of birth, and information used for eligibility checks.
– Contact data: billing address, postal address, email address and telephone number.
– Account data: username, password hash, account settings, spend limit settings, exclusion status and account history.
– Competition data: entries, ticket allocations, draw results, Instant Win outcomes, claim status and payout records.
– Verification data: identity verification documents and related verification outputs where required.
– Transaction data: payment records, refunds, and order history (card details are processed by payment providers and are not stored in full by us).
– Communications data: messages, complaints, support requests, and responses.
– Marketing data: your marketing preferences, consent status and suppression status.
– Technical and usage data: IP address, device/browser information, operating system, cookies, session data, and Website interaction logs.
Where reasonably practicable and consistent with legal and regulatory obligations, we retain verification outcome data rather than full identity documents.
We do not intentionally collect special category data unless it is provided by you and required for a specific legal or regulatory purpose.
We collect and process only the personal data that is necessary for the purposes described in this Privacy Policy.
4. How we collect personal data
We collect personal data:
– directly from you when you create an account, enter competitions, contact us, update your settings, or submit documents;
– automatically when you use the Website (including via cookies and similar technologies);
– from service providers involved in payments, identity verification, communications, analytics, fraud prevention and technical infrastructure;
– from public authorities or law enforcement where required by law.
5. How we use personal data and our lawful bases
We process personal data only where we have a lawful basis under UK GDPR. This may include:
– Performance of a contract:
– creating and managing your account;
– processing entries and administering competitions;
– notifying winners and delivering prizes or cash alternatives;
– providing customer support.
– Legal obligation:
– carrying out legal and regulatory compliance checks;
– responding to lawful requests from regulators, courts or law enforcement;
– maintaining records required for tax, accounting and compliance purposes.
– Legitimate interests:
– operating, securing and improving the Website and services;
– detecting, preventing and investigating fraud, financial crime and misuse of the Website;
– applying responsible play monitoring and proportionate interventions;
– handling complaints and disputes;
– defending legal claims.
– Consent (where required):
– sending direct electronic marketing where consent is required;
– placing non-essential cookies and similar technologies.
Where we rely on legitimate interests, we balance those interests against your rights and freedoms.
We consider responsible play monitoring to be necessary to protect entrants and maintain the integrity of competitions.
6. Marketing communications
We may send service communications that are necessary for your account, entries or prizes.
Where permitted by law, we may send marketing communications by email or SMS based on your consent or, where applicable, soft opt-in rules. You can opt out at any time by:
– clicking unsubscribe in a marketing email;
– following SMS stop instructions;
– contacting admin@hotcomps.com.
If you are self-excluded, we will suppress direct marketing communications for the duration of the exclusion period.
7. Responsible play and account intervention processing
We process account activity data to support responsible play measures, including spend limit controls, self-exclusion controls and account interventions where reasonably necessary to reduce risk of harm or protect competition integrity.
Where automated indicators are used to flag risk, significant account actions are subject to appropriate review.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects without appropriate human review.
We carry out data protection impact assessments where required for higher-risk processing activities.
8. Who we share personal data with
We may share personal data with:
– employees, contractors and group entities on a need-to-know basis;
– payment processors and banking partners;
– identity verification and fraud prevention providers;
– hosting, infrastructure, security, communications and analytics providers;
– professional advisers (legal, accounting, compliance and insurance);
– regulators, courts, law enforcement or other authorities where required;
– prospective buyers or investors in connection with a corporate transaction, subject to appropriate safeguards.
We require third parties processing data on our behalf to act only on our instructions and to implement appropriate security measures.
9. International data transfers
Some service providers may process personal data outside the UK. Where this occurs, we use appropriate safeguards, such as:
– adequacy regulations; or
– approved transfer mechanisms (for example, standard contractual clauses with UK addendum),
to protect personal data.
10. Data retention
We retain personal data only for as long as necessary for the purposes set out in this Privacy Policy, including to meet legal, accounting, tax and regulatory obligations.
Indicative retention periods include:
– Account data: while the account remains active and for 6 years after account closure.
– Transaction and financial records: for at least 6 years for tax, accounting and related compliance purposes.
– Identity verification records: for 6 years following prize award or account closure (whichever is later).
– Self-exclusion records: for at least the exclusion period and for a reasonable period thereafter to prevent circumvention.
– Marketing suppression records: retained indefinitely (or for as long as needed) to maintain suppression compliance.
Retention periods may vary by data type and purpose. We may keep certain records for longer where required to:
– comply with legal or regulatory obligations;
– resolve disputes;
– enforce agreements;
– prevent fraud or abuse.
Where data is no longer required, we delete it or anonymise it where reasonably practicable.
11. Data security
We use appropriate technical and organisational security measures designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.
These measures include access controls, encryption in transit where appropriate, logging, and security monitoring. No online service can be guaranteed to be fully secure, but we maintain and regularly review our controls.
If you suspect unauthorised access to your account or personal data, contact us immediately at admin@hotcomps.com.
12. Your rights
Subject to applicable law, you have rights in relation to your personal data, including:
– right of access;
– right to rectification;
– right to erasure;
– right to restrict processing;
– right to data portability;
– right to object to processing based on legitimate interests;
– right to withdraw consent at any time where processing is based on consent.
To exercise your rights, contact admin@hotcomps.com.
We may need to verify your identity before completing a request. We will respond in accordance with applicable law, and will normally respond within one month.
13. Complaints
If you have a privacy concern, please contact us first at admin@hotcomps.com or by post to our correspondence address. We aim to acknowledge complaints within 5 working days.
You also have the right to complain to the Information Commissioner’s Office (ICO):
– Website: https://ico.org.uk/
– ICO registration number: ZA804815
14. Children
Our competitions are intended for UK residents aged 18 or over. We do not knowingly market to or intentionally collect personal data from children.
If you believe a child has provided personal data to us, contact us and we will take appropriate steps.
15. Cookies and similar technologies
We use cookies and similar technologies for:
– strictly necessary functionality;
– analytics and performance measurement;
– functionality and preferences;
– advertising and marketing (where consented).
Where required by law, we request consent before using non-essential cookies. You can manage cookie choices through our cookie controls and browser settings.
For details of current cookie categories and controls, refer to the cookie information available on the Website.
16. Third-party links
Our Website may contain links to third-party websites. We are not responsible for their privacy practices. Please review third-party privacy notices before sharing personal data.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory or operational changes. Updates will be posted on the Website with a revised “Last updated” date.