How To Run A Prize Draw Legally In The UK

Running a prize draw can be a brilliant way to build your email list, drive traffic to a new product launch, or give your customers a reason to engage with your brand.

But prize draws sit in a tricky legal space in the UK. If your promotion is structured the wrong way (even by accident), it can start to look like an illegal lottery or fall foul of advertising, consumer protection and data protection rules.

The good news is that most small businesses can run a prize draw legally in the UK, as long as you set it up properly from day one. Below, we’ll break down what a prize draw is, the key legal rules you need to keep in mind (including the Gambling Act 2005 and the CAP Code enforced by the ASA), and the practical steps you can follow to protect your business.

What Is A Prize Draw (And How Is It Different From A Competition Or Lottery)?

Before you start drafting Instagram captions or designing landing pages, it’s worth getting clear on the basics.

Prize Draw: The Winner Is Chosen At Random

A prize draw is a promotion where:

• people enter (usually by submitting details or completing an action), and
• a winner is selected at random.

Random selection is the key feature. If skill or judgment decides the winner, you’re usually looking at a competition instead.

Competition: Skill Or Knowledge Determines The Winner

A competition typically requires an entrant to do something that involves genuine skill, knowledge, or judgment (for example, answering a question that is not “too easy” or completing a task that is meaningfully competitive).

Competitions can sometimes be simpler from a “gambling law” perspective, but they still need compliant marketing and terms.

Lottery: Payment + Chance = Higher Risk

In the UK, “lottery” is a regulated concept under the Gambling Act 2005. Keeping this practical (not legalese-heavy), the core risk area is this:

If there is a prize and the winner is chosen by chance, and entrants have to pay (or give “payment” in a way the law treats as payment), your promotion may be classed as a lottery.

Most businesses are not authorised to run lotteries, and that’s where promotions can go wrong quickly.

It’s also worth knowing that “payment” can be broader than just an entry fee. Depending on how your promotion is set up, it may include things like paying more than the normal price for a product to cover entry, paying for a premium-rate call or text, or incurring a cost that’s more than the ordinary cost of entry (for example, expensive postage). Purchase-linked promotions can be lawful in some circumstances, but the detail matters.

If you’re considering something that looks closer to a raffle model, it’s worth sanity-checking your approach against the rules for raffles and lotteries before you go live.

A Step-By-Step Checklist To Run A Prize Draw Legally

If you want a simple roadmap, here’s a practical sequence most small businesses and startups can follow.

1. Decide What People Must Do To Enter (And Whether Entry Is Free)

Start by clearly defining your entry mechanic. Common examples include:

• entering via an online form (name/email)
• subscribing to a newsletter
• following your social account and commenting
• submitting a photo or testimonial
• making a purchase

Tip: If purchase is involved, be extra careful. Purchase-linked draws can be lawful, but you’ll want to structure the promotion so it doesn’t cross the line into a regulated lottery (for example, by ensuring there isn’t an unlawful “payment to enter” element).

2. Write Clear Terms Before You Promote Anything

This is the step businesses most commonly skip, and it’s also the step that usually prevents disputes later.

Your prize draw terms should cover things like:

• who can enter (age, UK residents only, employees excluded, etc.)
• how to enter (and whether there’s a free entry route)
• opening and closing date/time (including time zone)
• how the winner will be chosen (random selection method)
• how and when the winner will be contacted
• what happens if you can’t reach the winner
• the prize details and any restrictions (dates, availability, non-transferable, etc.)
• any exclusions or limitations (as far as legally allowed)

If entries are collected via your website, it’s also common to align this with your broader Terms and Conditions so the rules are consistent across the customer journey.

3. Make Sure Your Marketing Matches The Reality

Once you have rules in place, you need to ensure your ads, emails and social posts don’t contradict them.

That means:

• don’t imply “everyone wins” if only one person can win
• don’t hide important limits (for example, “UK only” or “18+”) in a place people won’t see
• don’t exaggerate the prize value or availability

Misleading promotions can create legal and reputational risk, particularly under consumer protection rules and the CAP Code (which is enforced by the Advertising Standards Authority). If you want to pressure-test your language, it can help to understand the typical pitfalls around misleading ads.

4. Plan Your Winner Selection And Record Keeping

“Random” should be genuinely random, and you should be able to show you followed your process if someone challenges the outcome.

For example, you might:

• export entrants to a spreadsheet and use a random number generator, or
• use a reputable prize draw platform with an auditable selection method.

It’s also smart to keep a basic audit trail (date/time of draw, selection method, winner notified) in case of complaints.

5. Deliver The Prize Promptly And Handle Any Issues Fairly

Once you announce a winner, your obligations don’t stop.

From a business perspective, the key is to treat the prize as a real commitment. If you can’t supply it as promised, you may need to offer an alternative of equal value (depending on what you stated in your terms) or manage expectations carefully to avoid complaints and escalation.

Key UK Legal Rules That Affect Prize Draws

When you run a prize draw, there are usually three main legal “buckets” you need to think about:

• Gambling law (is it a lawful prize draw, or could it be classed as a lottery under the Gambling Act 2005?)
• Advertising and consumer protection (are you promoting it fairly under consumer law and the CAP Code?)
• Data protection (are you collecting and using personal data properly under UK GDPR?)

Avoid Creating An Illegal Lottery

The classic danger zone is where a promotion involves:

• payment to enter (or something the law treats as payment), and
• chance (random selection), and
• a prize.

That combination is where you need to pause and get advice, because not every business promotion will qualify as a lawful prize draw.

In practice, many small businesses reduce risk by offering a genuine free entry route and making sure entry is not dependent on purchase alone. The “free” route should be real and accessible, and it shouldn’t involve more than the normal, reasonable cost of entry. If you’re exploring alternative mechanics, it’s also useful to compare your plan to the rules around free-to-enter competitions, because the compliance thinking is similar.

Follow Consumer Protection Principles

Even if your prize draw is lawful from a gambling perspective, you still need to run it in a way that’s fair and transparent.

That generally means:

• no unfair or hidden conditions
• no misleading claims about the prize, how to enter, or your odds of winning
• no bait-and-switch tactics (for example, promoting one prize and substituting something much lower value without proper wording)

This matters because promotional activity can be treated as part of your business-to-consumer communications, and regulators expect clarity.

Be Careful With “No Purchase Necessary” And Similar Claims

Phrases like “no purchase necessary” can be helpful, but only if they’re true in practice. If there is a free entry route, it should be:

• clearly explained,
• genuinely accessible, and
• not unreasonably burdensome (for example, requiring entrants to jump through hoops that effectively discourage free entry).

If you’re not sure whether your planned mechanics cross the line, getting tailored legal advice early can save you a stressful rework after launch.

What Marketing Rules Apply To A Prize Draw?

Most prize draws are promoted on channels like Instagram, TikTok, email newsletters and landing pages. That means your marketing needs to be compliant across multiple touchpoints.

Make Your Terms Easy To Find

A common best practice is to include a short line in each promotional post like:

• “18+, UK only. Ends 5pm GMT 31 Jan. T&Cs apply (link in bio).”

In other words, the key restrictions shouldn’t be buried. You can keep the full detail in a hosted page, but the basics should be visible wherever you promote the prize draw.

Don’t Accidentally Run A Subscription Trap

If your prize draw involves signing up to something paid (like a subscription), be especially careful about clarity on costs and cancellation.

It’s often a good idea to align your promotion with your Online Subscription Terms so participants know exactly what they’re signing up for, what it costs, and how to cancel (where relevant).

Social Media Platforms Have Their Own Rules Too

Separate from UK law, many platforms impose their own promotion requirements (for example, requiring you to state the promotion is not sponsored/endorsed by the platform, or restricting certain entry mechanics).

These aren’t “laws”, but they can still get your campaign taken down or your account restricted. So it’s worth checking the platform’s promotion guidelines before you launch.

Collecting Entries And Personal Data: What You Need To Do Under UK GDPR

If your prize draw involves collecting names, emails, phone numbers, addresses, photos, or social handles, you’re handling personal data.

That means UK GDPR and the Data Protection Act 2018 are likely relevant.

Be Clear About What You’re Collecting And Why

At a minimum, you should be transparent about:

• what data you collect to run the prize draw (for example, email to contact the winner)
• whether you’ll use the data for marketing after the draw
• how long you’ll keep the data
• who the data may be shared with (for example, a fulfilment partner sending the prize)

Most businesses handle this through a properly drafted Privacy Policy and clear opt-in wording where marketing is involved.

Marketing Consent Matters

A big compliance mistake is using a prize draw to “force” marketing consent (for example, making marketing opt-in mandatory to enter) without thinking through whether that consent is valid.

In practice, you’ll want to:

• separate “admin” communications (contacting the winner) from marketing
• use unticked checkboxes for marketing opt-in (where you rely on consent)
• keep a record of how and when consent was captured

Cookies And Tracking On Landing Pages

If you run a prize draw through a landing page that uses analytics or advertising cookies, you may also need a compliant cookie banner and Cookie Policy.

This is easy to overlook when you spin up a quick campaign page, but it’s part of building legally solid marketing infrastructure as you grow.

What Legal Documents Should A Small Business Have For A Prize Draw?

Prize draws are often treated as “just marketing”, but they create real legal risk if someone complains, claims the prize wasn’t awarded fairly, or alleges your advertising was misleading.

Having the right documents in place helps you show that your process is fair and that entrants agreed to the rules.

Prize Draw Terms And Conditions

This is your core document. It sets the rules, defines eligibility, and explains how the promotion works.

Even if you already have general website terms, it’s usually best practice to have prize draw-specific terms to cover the details of that specific campaign.

Website Terms (If You’re Hosting Entries Online)

If entries go through your website (especially if people create accounts, submit content, or interact with your platform), your broader Terms and Conditions help manage:

• acceptable behaviour
• intellectual property rules for submitted content
• limitations of liability (where appropriate)
• your general site rules

Privacy Policy (And Possibly Data Processing Terms)

As noted above, a clear Privacy Policy is often essential.

If you use third-party tools (email marketing platforms, CRM systems, prize draw software, fulfilment providers), you may also need to ensure your contracts and data processing terms are in good shape. This is where startups can get caught out, because tools are easy to set up, but compliance still sits with you as the business.

Clear Internal Process Notes (Yes, These Count)

Not every “document” has to be customer-facing. It’s also smart to have internal notes covering:

• who is responsible for running the draw
• how the winner will be selected
• what you’ll do if there’s a dispute
• how you’ll verify eligibility (age, location, etc.)

This kind of operational clarity can be invaluable if your business grows and you start running promotions regularly.

Key Takeaways

• A prize draw is a promotion where the winner is selected at random, and the legal risk increases if there is an unlawful “payment to enter” element.
• Set your prize draw up properly from day one with clear rules on eligibility, entry methods, dates, and winner selection.
• Be careful that your promotion doesn’t accidentally become a regulated lottery under the Gambling Act 2005, especially if purchase is involved.
• Your marketing must be clear and not misleading, including obvious disclosure of key restrictions (like age and location) in line with the CAP Code.
• If you collect personal data for entries, UK GDPR obligations apply, and you’ll usually need a Privacy Policy and compliant marketing consent wording.
• Strong prize draw terms and aligned website terms reduce disputes and help you run promotions confidently as your business grows.

This article is general information only and isn’t legal advice. If you’d like help setting up prize draw terms or checking whether your promotion is compliant, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.