Legal
Privacy Policy
Last updated 23 August 2026
Who we are
NkosiDraw analyses published South African lottery draw history for patterns and turns those statistics into AI-generated candidate boards. This policy explains what personal information we handle when you use nkosidraw.com, why we handle it, and what control you have over it.
What we collect
- Account data — your email address and authentication credentials, created when you sign up or sign in with Google.
- Preferences — saved game types, prediction alert settings, and history filters you choose.
- Prediction history — the boards generated for your account, their rationales, and how they scored against later published draws.
- Payment records — the USDT invoice amount issued to you, the wallet address it was sent to, and the matched on-chain transaction hash and timestamp.
- Technical and usage data — IP address, browser and device type, pages viewed, and error diagnostics. Analytics-level usage data is only processed if you accept analytics cookies.
What we never collect
We do not collect bank account details, card numbers, ID documents or proof of address. Subscription payments are made in USDT on the TRC20 network and matched by their unique amount on the public blockchain. We never ask for, hold, or have access to your wallet private keys or seed phrase, and we cannot move funds from your wallet.
Why we process your information
- To create and secure your account and keep you signed in.
- To generate, store and display your AI boards and their rationales.
- To score your past boards against published draw results and show accuracy trends.
- To match an incoming USDT transfer to your invoice and activate or renew access automatically.
- To send account, payment and subscription emails, and — if enabled — alerts when new predictions are published for your chosen games.
- To detect abuse, debug faults and improve the service.
Our lawful bases are performance of our contract with you (running your account and subscription), your consent (marketing-style alerts and analytics cookies), and our legitimate interest in keeping the service secure and working.
Emails we send
Account, payment and subscription emails are operational and are sent for as long as you have an account — these include sign-up confirmation, password reset, payment received, renewal reminders, failed or unmatched payments, and cancellation notices. Prediction alerts are optional and can be switched off at any time from your dashboard. Our mail is sent from notify.nkosidraw.com.
Cookies and local storage
We use three categories, described in full in the cookie banner:
- Strictly necessary — your authentication session, security tokens, and the record of your cookie choice. These cannot be switched off because the site will not work without them.
- Preferences — saved games, alert settings and history filters, so the terminal looks the same each time you return.
- Analytics — anonymous, aggregated usage statistics about which pages are used. Only set if you accept.
You can change your mind at any time by clearing site data in your browser, which brings the consent banner back.
Who we share it with
We do not sell your personal information. We share the minimum necessary with service providers who process it on our behalf:
- Our hosting, database and authentication platform.
- An AI model provider, which receives draw statistics to write board rationales — not your identity.
- Our transactional email delivery provider.
- A public blockchain data provider, used only to confirm that a USDT transfer arrived.
Lottery results themselves are read from publicly published sources; nothing about you is sent to them. We may disclose information where the law requires it.
How long we keep it
Account data, prediction history and payment records are kept for as long as your account exists, and for a limited period afterwards where we need it for accounting, dispute or legal reasons. Diagnostic logs are kept for a short rolling window. When you ask us to delete your account, we delete or irreversibly anonymise your personal data except where retention is legally required. Blockchain transactions are public and permanent — we cannot erase them.
Security
Access to your data is enforced at the database level with row-level security, so one account cannot read another's predictions, preferences or payments. Traffic is encrypted in transit. No system is perfectly secure, so please use a strong, unique password.
Your rights
Under the Protection of Personal Information Act (POPIA) — and equivalent laws where they apply to you — you can ask us to give you a copy of your personal information, correct it, delete it, restrict or object to how we use it, and withdraw consent for optional emails or analytics. Contact our information officer at privacy@nkosidraw.com and we will respond within a reasonable time. You also have the right to complain to the Information Regulator of South Africa.
Children
NkosiDraw is strictly for adults aged 18 and over. We do not knowingly collect information from anyone under 18, and we will delete such an account if we discover one.
Changes to this policy
We may update this policy as the service changes. Material changes will be reflected in the date above and, where the change affects cookies, by re-showing the consent banner.
Contact
Questions about this policy or your data: privacy@nkosidraw.com. See also our Terms & Conditions.