Privacy Policy

DrawBid.com ("we," "us," "our," or "Company") is operated by DrawBid PNG Limited, a company registered in Papua New Guinea. We operate the drawbid.com website, mobile applications, and all related services (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you access our website, create an account, participate in prize draws, make financial transactions, or otherwise interact with our Service.

By using DrawBid.com, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service immediately. This policy applies to all users including participants, sponsors, beneficiaries, organisation administrators, and visitors.

2.1 Information You Provide Directly

• Account registration details: full name, email address, date of birth, phone number
• Identity verification (KYC) documents: government-issued ID, proof of address, selfie verification
• Financial information: bank account details, payment card information (processed securely via third-party providers)
• Profile information: profile photo, preferences, communication settings
• Transaction details: deposit amounts, withdrawal requests, campaign entries, contributions
• Communications: messages, support tickets, feedback, and dispute submissions

2.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, features used, time spent, click patterns, referral URLs
• Cookies and similar tracking technologies (see Section 8 for details)
• Transaction logs: timestamps, amounts, campaign IDs, wallet activity
• Location data: general geographic region based on IP address

2.3 Information from Third Parties

• Social login providers (e.g. Google): name, email, profile picture
• Payment processors: transaction confirmation, fraud signals
• KYC/AML verification partners: identity verification results

We use your personal information for the following purposes:

Service Delivery

• Creating and managing your account
• Processing deposits, withdrawals, and campaign entries
• Executing prize draws and distributing winnings
• Facilitating fundraiser contributions and SME innovation backing
• Providing customer support and resolving disputes

Legal & Compliance

• KYC/AML verification as required by our policies
• Age verification (18+ requirement for gaming activities)
• Fraud detection, prevention, and investigation
• Compliance with Papua New Guinea laws and court orders

Platform Improvement

• Analytics and service optimization
• Security monitoring and incident response
• A/B testing and feature development
• Marketing and promotional communications (with your consent)

We process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the Service you have signed up for
• Legal obligation: compliance with AML/KYC regulations and PNG law
• Legitimate interests: fraud prevention, platform security, and improving the Service
• Consent: marketing communications, optional analytics, and third-party integrations

We do not sell your personal information. We may share it in the following circumstances:

5.1 Service Providers

We share data with trusted third parties who assist in operating the Service, including payment processors, KYC verification providers, email delivery services, and cloud infrastructure providers. These parties are contractually bound to protect your data.

5.2 Regulatory Authorities

We may share information with PNG regulatory bodies as required by applicable law. This includes compliance documentation and records where mandated.

5.3 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or to protect the rights, property, or safety of DrawBid.com, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5.5 Winner Announcements

Prize draw winners may be publicly announced (first name and last initial only) and for platform transparency. Full identity is never disclosed publicly without explicit consent.

We retain your personal information for as long as necessary to provide the Service and comply with our legal obligations:

• Active account data: retained for the life of your account plus 7 years after closure
• KYC/AML documentation: retained for a minimum of 7 years as required by PNG AML regulations
• Financial transaction records: retained for 7 years for audit and compliance purposes
• Marketing consent records: retained until consent is withdrawn plus 3 years
• Support and dispute records: retained for 5 years after resolution
• Analytics and log data: anonymised after 90 days; raw logs deleted after 1 year

We implement industry-standard technical and organisational security measures to protect your personal information, including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Multi-factor authentication for administrative access
• Regular penetration testing and security audits
• Cryptographically verifiable draw execution logs
• Role-based access control (RBAC) for internal staff
• Incident response procedures and breach notification protocols

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password and to report any suspected security issues to security@drawbid.com.

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential cookies: required for the platform to function (authentication sessions, security tokens)
• Functional cookies: remember your preferences and settings
• Analytics cookies: help us understand usage patterns (e.g. page views, feature adoption)
• Marketing cookies: used to deliver relevant promotions (only with your consent)

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

As a user of DrawBid.com, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your data (subject to legal retention obligations)
• Data portability: receive your data in a structured, machine-readable format
• Restriction: request that we limit processing of your data in certain circumstances
• Objection: object to processing based on legitimate interests or for direct marketing
• Withdraw consent: withdraw any consent previously given at any time

To exercise any of these rights, please contact us at privacy@drawbid.com. We will respond within 30 days. Note that some rights may be limited where we have overriding legal obligations (e.g. AML record-keeping requirements).

DrawBid.com is strictly for users aged 18 years and over. We do not knowingly collect personal information from individuals under 18. If we discover that a user is under 18, we will immediately suspend the account and delete all associated data. If you believe a minor has registered, please notify us immediately at support@drawbid.com.

DrawBid.com is based in Papua New Guinea. Some of our service providers may be located in other countries (e.g. cloud infrastructure in Australia or Asia-Pacific regions). When we transfer data internationally, we ensure appropriate safeguards are in place, including contractual data protection clauses and adherence to applicable data protection standards.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer: