PRIVACY POLICY

Last Updated: August 2026

Website: www.raffles.co.za

INTRODUCTION

Welcome to www.raffles.co.za.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform to purchase tickets for events, shows, concerts, and online experiences.

As www.raffles.co.za is strictly an intermediary platform that facilitates ticket sales and bookings on behalf of third-party Event Organizers, this policy also outlines how your data is handled in relation to those events.

This policy complies fully with the Protection of Personal Information Act No. 4 of 2013 (POPIA) and other applicable South African data protection legislation.

1. INFORMATION WE COLLECT

We may collect and process the following categories of personal information:

  • Identity and Contact Data: Full name, email address, telephone number, and physical or billing address.

  • Account Credentials: Username, password, and profile preferences set up when creating an account on www.raffles.co.za.

  • Transaction and Financial Data: Details concerning your ticket purchases, bookings, and payment history. Note: Sensitive payment card details (credit/debit card numbers) are processed directly by our secure, PCI-DSS compliant South African payment gateway partners and are never stored on our servers.

  • Technical and Usage Data: IP address, browser type and version, time zone setting, operating system, and data regarding how you navigate and interact with our website.

2. HOW WE COLLECT YOUR INFORMATION

We collect information through:

  • Direct Interactions: When you register an account, purchase tickets, subscribe to newsletters, or contact our support team.

  • Automated Technologies: As you navigate our website, cookies and similar tracking technologies automatically collect technical data about your equipment and browsing patterns.

3. PURPOSE OF PROCESSING (POPIA COMPLIANCE)

Under POPIA, we must have a lawful basis for processing your personal information. We process your data for the following specific purposes:

  • Fulfilling Our Contractual Obligations: To process your ticket orders, deliver digital tickets, and manage your account bookings.

  • Intermediary Operations: To share necessary booking and contact information with the respective Event Organizer so they can manage venue access, send crucial event updates, or comply with venue safety and emergency requirements.

  • Customer Support: To respond to your queries, resolve transaction issues, and provide technical assistance.

  • Legal and Regulatory Compliance: To comply with South African tax laws, accounting standards, and lawful requests from public authorities.

  • Direct Marketing: To send you promotional updates, newsletters, or event recommendations—only if you have explicitly opted in to receive such communications. You may opt out at any time.

4. DISCLOSURE OF YOUR INFORMATION

We treat your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to third parties. We may share your data only with:

  • Event Organizers: The specific promoter, venue, or producer hosting the event for which you purchased tickets, strictly for event administration and entry validation.

  • Service Providers: Trusted third-party vendors who assist us in operating our website, processing secure payments, hosting data, and delivering emails, under strict contractual confidentiality obligations.

  • Legal Authorities: Law enforcement agencies, regulators, or courts when required to do so by South African law or to protect our legal rights.

5. DATA SECURITY AND PROTECTION

In accordance with Section 19 of POPIA, we implement robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed unauthorizedly, altered, or disclosed. These measures include data encryption, secure socket layer (SSL) technology, restricted employee access, and secure server hosting.

6. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Once your data is no longer required, it is securely deleted or anonymized.

7. YOUR RIGHTS UNDER POPIA

As a data subject under POPIA, you have the right to:

  • Access: Request a copy of the personal information we hold about you.

  • Correction: Request the correction of inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading, or unlawfully obtained personal information.

  • Deletion: Request the destruction or deletion of your personal information under certain circumstances.

  • Objection: Object to the processing of your personal information for direct marketing purposes or based on compelling legitimate grounds.

  • Lodge a Complaint: You have the right to submit a complaint to the Information Regulator of South Africa if you believe your data protection rights have been infringed.

8. COOKIES

Our website uses cookies to distinguish you from other users, enhance your browsing experience, and analyze site traffic. You can configure your browser to refuse all or some browser cookies, though doing so may affect the functionality of certain areas of www.raffles.co.za.

9. CHANGES TO THIS PRIVACY POLICY

We review this Privacy Policy regularly and may update it from time to time to reflect changes in our practices or legal requirements. Any updates will be posted directly on this page with a revised “Last Updated” date.

10. CONTACT US

If you have any questions about this Privacy Policy, wish to exercise your POPIA data rights, or want to report a privacy concern, please contact our Information Officer at:

  • Website: www.raffles.co.za

  • Privacy & Support Email: admin@raffles.co.za