play649 (play649.com) is run by [operator's legal name and address — to be confirmed]. This policy explains what we keep about you and why. play649 only keeps records: it never takes or holds money, sells lottery tickets or places bets.
What we keep
Account: your email address, the name you choose to show (optional), your language and whether you want results emails.
Your records: the tickets you save (games, numbers, draws) and, if you use group play, the groups you create or join, the contribution amounts you or the organiser record, whether the organiser marked them received, and your picked numbers.
Sign-in: to sign in we email you a 6-digit code. We keep only a scrambled (hashed) copy of the code for 10 minutes. We do not use passwords.
Emails: a copy of each email we send you (for example results emails), so we can avoid duplicates and answer questions about them. Sign-in codes are never stored in readable form.
Members of the original play649: if you had an account on the original site, we kept your email address, first name, your results-email preference, your saved tickets and their history, and your group-play history, so you can find them when you sign in with the same email. Old passwords and any payment details from the original site are not kept.
We do not use advertising or analytics cookies and we do not sell or share your data for marketing.
Cookies and storage on your device
One cookie, p649_session, keeps you signed in for up to 30 days. It is strictly necessary and is removed when you sign out.
If you close the “install the app” hint, your browser remembers that choice (local storage). The site also keeps an offline copy of public pages in your browser; private pages are never stored.
Why we use it
To provide the service you ask for: your account, your saved tickets and history, group records and results emails (performance of our agreement with you).
To keep the service secure and working, for example limiting sign-in attempts (legitimate interest).
Results emails are only sent if you leave that option on; every email has an unsubscribe link. [Lawyer to confirm the legal basis for contacting original-site members about the relaunch (CASL in Canada, GDPR in Portugal).]
Who processes it for us
Vercel Inc. (website hosting, United States). [Database provider, e.g. Neon Inc., United States — once chosen.] [Email provider, e.g. Resend, United States — once chosen.] They process data only on our instructions. Data may be processed outside Canada and the European Union, under the providers' data processing terms and standard contractual clauses. [Lawyer to confirm.]
We read lottery results from the official operators' public websites; we never send them your data.
How long we keep it
Account data and your records: until you delete your account.
Sign-in codes: 10 minutes. Email copies: [12 months — to be confirmed].
Group records you took part in stay visible to the rest of that group after you leave or delete your account, but with your name removed.
Original-site members who never sign in: [period to be decided, e.g. deleted 12 months after the relaunch email].
Your choices and rights
Delete your account at any time under My account: your account and saved tickets are deleted straight away and your name is removed from group records.
Turn results emails off under My account, or use the unsubscribe link in any email.
You can ask for a copy of your data, a correction or deletion, object to processing, or complain to a data protection authority (in Portugal the CNPD, in Canada the Office of the Privacy Commissioner). Write to [privacy@play649.com — address to be confirmed].
Age
play649 is for adults of legal lottery age (18 or over in Ontario and Portugal). We do not knowingly keep data about minors.
Changes
If this policy changes in a way that matters, we will say so on the site and, for account holders, by email.
Last updated: Monday, September 28, 2026 · Terms of use