Names, numbers and privacy

Typically

• The Privacy Act 2020 applies to social clubs, charities, societies and community groups, including volunteer-run ones. Names, phone numbers and email addresses on raffle stubs, bid sheets and sign-up forms are personal information.
• Collect only what you need, collect it from the person, and tell them why you want it. A short privacy line on the stub or form usually does this.
• Use it only for the purpose you gave. A phone number taken to contact a raffle winner can't be used later to promote your next fundraiser unless the person agreed to that when they gave it, for example with a tick box.
• Keep it secure (a locked box or password-protected file), let people see and correct what you hold about them, and securely destroy it once you no longer need it.
• Appoint someone as your privacy officer. A volunteer or member can do it.
• Under the Unsolicited Electronic Messages Act 2007, an email or text promoting something you sell (raffle tickets, event tickets, products) needs the person's consent, must say clearly who sent it, and needs a free, working unsubscribe that you action within five working days. One sale isn't enough to infer consent, so ask for it.
• If a privacy breach is likely to cause someone serious harm, you must tell the Privacy Commissioner (the NotifyUs tool) and the people affected as soon as practicable. The Office expects notice within 72 hours.

Checked against the official pages on 8 October 2026.

Ideas this applies to

• 50/50 draw
• Guess the lollies in the jar
• Sweepstake (Melbourne Cup, Rugby World Cup, etc.)
• Meat raffle at the pub or club
• Anzac Day: what your group can and cannot do
• Chocolate wheel
• Small class or team raffle (Class 1, up to $500)
• Sponsor-a-player or sponsor-a-place
• Pick-a-square board (100 squares)
• Scratchies or mystery envelopes
• Seasonal bakery pre-orders (hot cross buns, Christmas cakes)
• Pick-a-date calendar