Fairness, Transparency & Security
When you enter a competition, you are placing your trust in us. We take that responsibility seriously.
From the moment you enter, to the moment a winner is drawn, every step of the process creates a secure and permanent record. These records cannot be altered and can always be independently verified.
This means every entry, every ticket, and every draw can be traced and confirmed if a result is ever questioned.
Fairness is not just something we promise. It is built into how Win A Bundle operates.
Site Security & Secure Payments
All pages on the Win A Bundle website use HTTPS encryption with an SSL certificate issued by Let’s Encrypt. This ensures all data sent between your browser and our website is encrypted at all times.
We never store card or payment details on our systems.
All payments are processed by regulated payment providers:
- Cashflows
- TrustPayments
- PayPal
These providers operate PCI DSS compliant infrastructure. PCI DSS is the global security standard for organisations that process card payments. It ensures payment details are handled and protected according to strict security requirements.
Every transaction also creates an independent payment record held by the payment provider. This includes the payment amount, timestamp, and reference.
Your Tickets Are Protected From the Moment You Enter
Once your entry is completed:
- Your ticket numbers are automatically assigned
- They are sent to you by email
- They remain visible in your account dashboard at any time
Within minutes of your order being placed, your ticket confirmation is cryptographically timestamped by an independent service called FreeTSA.org.
This creates permanent external proof that your tickets existed at that exact date and time.
Because this verification exists outside our systems, it cannot be edited, backdated, or removed by anyone, including us.
You can verify this token yourself through your account at any time here: https://www.winabundle.co.uk/ticket-verification/
Every Draw Has a Complete Audit Trail
Each competition generates a full record that includes:
- Order records for every entry
- Ticket allocation logs showing which numbers were issued and when
- Entry timestamps
- Cryptographic verification tokens
- Payment processor confirmations
- Email confirmation logs
- Draw records showing how the winner was selected
Together, these records create a complete audit trail for every competition.
Even if one system failed, independent records would still exist through:
- FreeTSA cryptographic timestamps
- Payment provider records
- Amazon SES email archives
This ensures the integrity of every competition can always be verified.
Online and Postal Entries
Entries placed online or by post follow the same process.
Postal entries are entered manually by staff. Once entered, they move through the same system as online entries. This means:
- Tickets are assigned automatically
- A cryptographic verification token is created
- Confirmation emails are sent and archived
Confirmation Emails and Email Archives
Every entry triggers a confirmation email that includes:
- Your ticket numbers
- The time and date of your entry
These emails are permanently archived both in our internal systems and through Amazon SES.
Once recorded, these logs cannot be edited or altered.
They provide additional verification alongside the cryptographic timestamp attached to each entry.
Payment Processing
Payments may be processed by one of the following regulated providers depending on the checkout method.
Cashflows
Cashflows Europe Limited is authorised and regulated by the Financial Conduct Authority under the Electronic Money Regulations 2011, register reference 900006.
TrustPayments
Trust Payments Ltd and TrustUK Payments Ltd are authorised and regulated by the Financial Conduct Authority under the Payment Services Regulations 2017, register reference 932557.
PayPal
PayPal is one of the world’s most recognised electronic payment platforms and operates as a regulated electronic money institution across multiple jurisdictions including the UK and EU.
Each provider independently records every transaction. These records form part of the permanent competition audit trail.
How Winners Are Chosen
Every valid ticket has an equal chance of being selected.
Depending on the competition, draws may be conducted live or automatically.
Live Draws
Live draws use ANGIE, our electronic raffle draw machine. This is the Thomas Spin Electronic Raffle and Tote Machine supplied by Thomas and Anca.
For each draw:
- The start and end ticket numbers are entered into the device
- The machine randomly generates a number within that range
- That number is matched against the entrant list to identify the winner
All live draws are broadcast in real time on Facebook and YouTube.
Every completed draw is permanently archived on our YouTube channel so that anyone can watch the draw again and verify the result.
If ANGIE is unavailable, draws are conducted using the Google Random Number Generator. These draws are also carried out live and archived in the same way.
Automated Draws
Automated draws follow a defined system process.
- Competition closes
At the scheduled closing time or when the final ticket sells out. - Eligible tickets are collected
Every valid ticket forms the pool of entries. - Random selection
The system selects a winning ticket using PHP’sarray_rand()function and the Mersenne Twister random number generator. - Winner recorded
The winning ticket is logged and linked to the winner’s account. - Winner notification
The winner receives an automatic email confirming the result.
Each stage is recorded as part of the competition audit trail.
Instant Wins
Some competitions include instant win prizes.
Before a competition opens, these prizes are linked to specific ticket numbers. These ticket numbers are visible on the competition page so entrants can see which tickets carry a prize.
When an entry is made:
- A ticket number is assigned randomly using the same random generator
- If that ticket number carries an instant win prize, the prize is triggered automatically
The winner is notified immediately by email and the prize appears in their account.
If the prize is a discount or store credit, a single use coupon code is created and locked to the winner’s email address.
Every instant win is also recorded as part of the competition audit trail.
Draw Results
After each draw:
- Winners are notified by email
- Results are published on the Winners page
This allows anyone to verify the outcome of every competition.
Refunds
If an order is refunded:
- The refund is recorded and timestamped by the payment provider
- The associated tickets are removed from the entrant list
- The tickets are returned to the available pool
This ensures the audit trail remains complete and that every ticket in the draw is valid.
Fair Play
We actively monitor competitions to protect their integrity.
If we identify suspicious behaviour or activity that goes against the spirit of a competition, we may remove affected entries and issue a full refund. This always happens before the draw so that only valid entries remain.
Any such action is recorded within the competition audit trail.
Verifying Your Own Entry
Every entrant has access to independent proof of their tickets.
You can verify your entry using:
- Your account dashboard, where all tickets are listed
- Your confirmation email, sent immediately after entry
- Your verification token, a cryptographic timestamp issued by FreeTSA.org
You can verify this token yourself at any time, or contact us and we will verify it with you.
Questions
If you would like to know more about how our competitions work, our team is happy to help.
You can contact us at any time at:
info@winabundle.co.uk