Ticketpro

ICC Men's Cricket World Cup 2027

1. Who we are and what this notice covers

2027 Cricket World Cup NPC ("the Company", "we", "us") is the responsible party for personal information you give us when you register for and enter the ICC Men's Cricket World Cup 2027 ticket ballot (the "Ballot").

Our official ticketing provider, TicketPro Group (Pty) Ltd, runs the ballot platform and processes your information on our behalf as an operator under a written agreement.

This notice covers ballot registration, entry, the draw, results notification, payment by successful entrants and ticket delivery. Once you buy tickets, the Ticket Terms and Conditions / general CWC2027 privacy policy also applies.

We collect only what we need to run a fair ballot and issue tickets.

Examples: Full name, date of birth, ID or passport number, nationality.

Examples: Email address, mobile number, country and postal address.

Examples: Username, password (stored encrypted).

Examples: Matches and ticket categories selected, number of tickets, entry time, draw outcome.

Examples: Payment status and reference; card details are handled by the payment provider, not stored by us.

Examples: IP address, device and browser details, log data, CAPTCHA and bot-detection signals.

Examples: Queries to the contact centre, complaints, dispute records.

We do not ask for special personal information (such as health, religion or biometrics) to enter the Ballot.

How we collect it. Most information comes directly from you when you register, enter, or contact us. Technical data is collected automatically through cookies, server logs and similar tools. We may receive limited information from third parties, such as payment status from the payment provider and fraud signals from bot-protection services.

The personal information provided as part of the Ballot process will be collected and used solely for purposes related to the administration of the Ticket Ballot, ticket allocation, communication with applicants, fraud prevention, security verification, and compliance with applicable legal and regulatory requirements. By submitting an application, you confirm that the information provided is accurate and that you consent to the processing of your personal information for these purposes.

Cookies. The ballot site uses session cookies (deleted when you close your browser) and persistent cookies (kept until they expire or you delete them). Essential cookies keep you signed in and protect the ballot from bots; analytics cookies are used only if you accept them in the cookie banner.

If you don't provide it. Fields marked as required are needed to verify eligibility and run the draw. Without them we cannot accept your entry.

Your information only. You may only submit your own information, except where a parent or guardian adds a child's name (section 11). Please keep your details up to date in your account so we can reach you if you are successful.

De-identified data. We may use statistics that cannot identify you, such as entry numbers per fixture, for reporting and planning. If such data is ever combined with information that identifies you, we treat it as personal information under this notice.     CWC2027 Ticket Ballot _Privacy …

We process your information only for the purposes below, each on a lawful ground under section 11 of POPIA.

Create your account and record your ballot entry

Lawful basis: Performance of the ballot terms you accept.

Run the draw and notify you of the result

Lawful basis: Performance of the ballot terms.

Take payment and issue tickets to successful entrants

Verify identity and eligibility, including host-nation allocations

Lawful basis: Performance of the ballot terms; legitimate interest in a fair ballot.

Detect duplicate, bot and fraudulent entries

Lawful basis: Legitimate interest in ballot integrity.

Lawful basis: Legitimate interest; performance of the ballot terms.

Stadium safety, access control and ticket-resale protection

Lawful basis: Legitimate interest; legal obligations.

Meet legal, tax, audit and regulatory duties

Send marketing about CWC2027, and share your details with Cricket South Africa, the ICC, the IBC or partners if you choose

Lawful basis: Your consent (see section 7).

We will not use your information for an unrelated purpose without telling you and, where required, asking for your consent.     CWC2027 Ticket Ballot _Privacy …

The draw is a random computer selection among valid entries; your personal characteristics do not affect your chances.

Before the draw, we run automated and manual checks to remove duplicate, bot or fraudulent entries. An entry flagged by these checks is reviewed by a person before it is disqualified.

Under section 71 of POPIA, you may ask us to explain a result and make representations about it. Contact us using section 12 within [14] days of the result notification.

We never sell your personal information. We share it only with the parties below, each bound by confidentiality and data-protection terms.

Our operators may process your information only on our written instructions and may not use it for their own purposes, including their own marketing.

TicketPro Group (Pty) Ltd – ticketing provider

Information received: All ballot and account data.

Purpose: Runs the ballot platform, contact centre and ticket issuance for us.

Information received: Pseudonymised entry and draw records.

Information received: Ticket-holder name and ticket details.

Purpose: Access control and safety on matchday.

IT, hosting and fraud-prevention suppliers

Information received: Data they need to provide their service.

Purpose: Secure hosting and bot protection.

Information received: Only what the law requires.

Purpose: Owns the tournament.     CWC2027 Ticket Ballot _Privacy …

Some recipients sit outside South Africa, including the ICC (UAE), IBC (UAE), InCrowd (United Kingdom) and cloud hosting providers. Tournament co-hosts Zimbabwe and Namibia may also receive ticket-holder data for their venues.

We transfer information abroad only where section 72 of POPIA allows it: the recipient is bound by law or a binding agreement giving adequate protection, or the transfer is needed to perform the ballot terms with you. In practice we rely on one of these safeguards: a country recognised as giving adequate protection; standard data-protection clauses in our contract with the recipient; or, for US providers, certification under the EU-US Data Privacy Framework. Contact us for details of the safeguard used for a specific transfer.

Entering the Ballot does not sign you up for marketing. We send marketing only if you tick the opt-in box at registration, in line with section 69 of POPIA.

Every marketing message has an unsubscribe link, and you can also opt out in your account settings. Service messages about your entry, the draw result, payment and tickets are not marketing and will still be sent.     CWC2027 Ticket Ballot _Privacy …

We keep information only as long as we need it, then delete or de-identify it. Proposed periods, to be confirmed by legal:

Unsuccessful entries: 6 months after the tournament ends, to handle queries and audit the draw.

Successful entries and ticket records: 5 years after the transaction, for tax and financial records.

Draw and audit records: 5 years after the tournament, pseudonymised.

Contact-centre and dispute records: 3 years after the query is closed.

Security and bot-detection logs: 12 months.