Skip to content

Privacy Policy

Privacy policy

Last updated: 2026 -09 – 03

This policy explains what personal information the Game Over Cancer campaign
collects, why, who sees it, and what you can ask us to do with it. It is
written to meet our obligations under the Protection of Personal Information
Act 4 of 2013, known as POPIA.

1. Who is responsible

  • Responsible party: Shoma Govender, trading as Game Over Cancer
  • Legal status: [CONFIRM: same answer as the terms page]
  • Physical address: [CONFIRM: same answer as the terms page]
  • Information officer: Shoma Govender
  • Contact: admin@shomagovender.co.za

CANSA is the beneficiary of this campaign. It is not the responsible party
for information you give this website.

2. What we collect, and why

We only collect what we need to sell you a ticket and get a prize to you.

  • Your name, email address and phone number, given at
    checkout. Used to issue your ticket numbers, send your order
    confirmation, and contact you if you win.
  • Your ticket numbers and order history. Used to run the
    draw and to prove which numbers were yours if that is ever questioned.
  • Your delivery address, but only if you win. It is asked
    for at that point, not when you buy.
  • Donation amounts, if you donate. Used to report the
    campaign total to CANSA and to arrange your tax certificate if you ask
    for one.
  • Basic technical information your browser sends, such as
    your IP address and device type, which our host records in its server
    logs for security.

3. What we never see

Your card details. Payments are processed by Payfast on
their own secure pages. Your card number, expiry and CVV are entered there
and are never transmitted to, seen by, or stored on this website. We receive
only a confirmation that a payment succeeded or failed, and the amount.

4. Why we are allowed to hold it

  • To perform our agreement with you. We cannot sell you a
    ticket, issue a number, or deliver a prize without your name, contact
    details and order.
  • To meet a legal obligation. Financial records must be
    retained, and the draw record must be capable of verification.
  • With your consent, for anything optional, such as being
    added to a mailing list. We do not add you to anything by default, and
    buying a ticket is not consent to marketing.

5. Who else sees it

  • Payfast, our payment processor, to take the payment and
    confirm it.
  • Our website host, [CONFIRM: name your hosting provider],
    which stores the site and its database.
  • CANSA, for reporting on the campaign, and for issuing a
    section 18A certificate if you request one. Reporting is on totals. Your
    personal details are only shared with CANSA where you have asked for a
    certificate and they need them to issue it.
  • A courier, if you win, to deliver the prize.

We do not sell your personal information, and we do not share it for anyone
else’s marketing.

6. Where it is stored

The website and its database are hosted [CONFIRM: in South Africa, or name
the country. If your host stores data outside South Africa, POPIA section 72
requires that the receiving country has comparable protection or that
suitable contractual safeguards are in place. Your host can tell you which
applies].

7. How long we keep it

  • The draw record, meaning ticket numbers and the order they
    belong to, is kept for [CONFIRM: 12 months is a reasonable default] after
    the draw, so a query or a dispute can be answered.
  • Order and financial records are kept for as long as tax
    and accounting law requires, which in South Africa is generally five
    years.
  • Anything else is deleted when it is no longer needed for
    the purpose it was collected for.

8. Your rights

Under POPIA you may, at any time:

  • Ask what personal information we hold about you, and get a copy.
  • Ask us to correct anything that is wrong.
  • Ask us to delete it, where we are not required to keep it. Note that we
    cannot delete a ticket number that is in a completed draw record without
    destroying the integrity of that draw.
  • Object to how we are using it.
  • Withdraw consent to anything you consented to, such as a mailing list.

Email admin@shomagovender.co.za
and we will respond within [CONFIRM: 30 days is the usual commitment].

9. Complaints

If you are not satisfied with how we have handled your information, please
tell us first so we can put it right. You also have the right to complain to
the Information Regulator of South Africa:

10. Cookies

This site uses cookies only where they are needed to work: keeping your cart
and your session while you check out. These cannot be turned off without
breaking checkout.
[CONFIRM: if you later add analytics or a Meta or Google advertising pixel,
that is not a necessary cookie, it needs consent, and this section has to be
updated before you add it.]

11. Security

The site is served over HTTPS, payments are handled off-site by Payfast, and
administrative access is limited to people who need it. No system is
completely secure, but if a breach affecting your personal information ever
occurs, POPIA requires us to notify you and the Information Regulator, and
we will.

12. Children

Entry is limited to people aged 18 and over, and we do not knowingly collect
personal information from children. If you believe we have, email us and it
will be deleted.

13. Changes to this policy

If this policy changes, the updated version is published on this page with a
new “last updated” date.

Back to the campaign