Skip to content
SailyGrandGiveaWay British Columbia
Cookies Policy

Cookies & similar technologies

Everything the website can store on your device, named individually — what it is, who sets it, how long it lasts and how to turn it off.

Last updated: 13 October 2026 Version 1.3

This Cookie Policy applies to SailyGrandGiveaWay.com, owned and operated by the British Columbia Lottery Corporation (BCLC), a Crown corporation of the Province of British Columbia, located at 74 West Seymour Street, Kamloops, BC V2C 1E2, Canada. PlayNow.com sets its own cookies under its own policy, which this document does not cover.

“Cookies” here is shorthand for several technologies that store or read data on your device: HTTP cookies, local storage and session storage, tracking pixels and web beacons (1×1 images or script tags that report that a page or email was opened), and device or browser identifiers. Each one used on the website is listed by name in the register below, whatever its technical type.

There are three categories. Essential storage is necessary for the website to work and is always on. Analytics and Advertising are optional, off by default, and set only if you switch them on. Nothing optional is loaded before you consent.

The register

Entries marked In use now are set on the website today. Entries marked Not set yet are the identifiers that category will set once the applicable tag is deployed — they are listed in advance so the consent banner asks you about what will actually happen, and so this page is not rewritten quietly after the fact.

Essential — always on, no consent needed

NameTypeParty DomainPurposeLifetime
dg_sid
In use now
Cookie (session)First partySailyGrandGiveaWay.comKeeps you signed in and protects forms against forgery. Set only when you log in, register or use a form; HttpOnly, never readable by scripts.Ends when you log out, close the browser, or after 30 minutes without activity
dg_age_ok
In use now
Local storageFirst partySailyGrandGiveaWay.comRecords that you clicked the 19+ notice (a self-declaration; age is verified at registration), so it is not shown again.Until you clear site data
dg_cookie
In use now
Local storageFirst partySailyGrandGiveaWay.comRecords your cookie choice per category, when you made it, and whether it came from the banner or a browser signal. This is the proof of consent.12 months, then re-asked

All essential entries are first-party: the session cookie is sent only to the website, the two local-storage entries never leave your device, and none is sent to any third party. Server access logs — IP address, timestamp, page requested, user agent — are also kept for security; they are covered by our Privacy Policy, not by consent, because they are not stored on your device.

Analytics — optional, off unless you turn it on

NameTypeParty DomainPurposeLifetime
_ga
Not set yet
CookieThird party — Google.SailyGrandGiveaWay.comDistinguishes one visitor from another (pseudonymous ID) for Google Analytics 4.2 years
_ga_<ID>
Not set yet
CookieThird party — Google.SailyGrandGiveaWay.comMaintains the GA4 session state for a specific property.2 years

Advertising — optional, off unless you turn it on

NameTypeParty DomainPurposeLifetime
_gcl_au
Not set yet
CookieThird party — Google.SailyGrandGiveaWay.comGoogle Ads conversion linker — attributes a sign-up or click to the ad that led to it.90 days
IDE
Not set yet
CookieThird party — Google.doubleclick.netAd measurement. Remarketing is off unless separately approved and listed here.13 months
test_cookie
Not set yet
CookieThird party — Google.doubleclick.netChecks whether the browser accepts cookies at all.15 minutes
dg_conv
Not set yet
Local storageFirst partySailyGrandGiveaWay.comRemembers which confirmed conversions (account created, ticket registered) were already reported, so none is counted twice. Contains no personal data.Last 50 entries

First party and third party

A first-party entry is set by SailyGrandGiveaWay.com and can only be read by the website. All essential entries are first-party. A third-party entry is set by another company's code running on this page; that company can read it, and where the same code runs on other websites it can recognise the same browser there. Everything in the Analytics and Advertising categories is third-party.

Who the third parties are

These are the organisations whose tags the optional categories load. Each has its own privacy policy governing what it does with the data:

ProviderWhat it is used forWhere it processes dataIts privacy policy
Google Ireland Ltd / Google LLC Google Analytics 4 and Google Ads conversion measurement, once deployed (remarketing off unless approved) United States, Ireland and other locations policies.google.com
Google LLC — Google Fonts Typefaces on play.SailyGrandGiveaWay.com. Sets no cookie; receives your IP address and browser details when that page loads. United States and other locations policies.google.com

If we add or remove a provider, this table and the register above are updated before the change goes live, the consent version is incremented, and you are asked again.

Data sent outside Canada

If you consent to analytics or advertising, the data those tags collect is transmitted to and processed outside Canada, principally in the United States. While it is there it is subject to that country's laws, which can compel disclosure to foreign courts, law-enforcement and security agencies — potentially without your knowledge and without a Canadian court being involved, and with fewer practical remedies than you would have in British Columbia.

If you would rather that did not happen, decline analytics and advertising. The site works identically either way. Essential storage never leaves your device.

Where Google tags are deployed, they run in Consent Mode v2. In practice:

  • Google's tags are loaded with all four consent signals — analytics_storage, ad_storage, ad_user_data and ad_personalization — set to denied by default, before any tag fires.
  • Ticking Analytics sets analytics_storage to granted. Ticking Advertising sets ad_storage and ad_user_data to granted. ad_personalization (remarketing) stays denied unless remarketing is separately approved and listed in this policy.
  • No Google tag file is requested at all until you opt in, and none is requested while the tag IDs are not deployed.
  • Conversions are reported only after an action the server has confirmed — an account created, or a lottery ticket registered by BCLC's central gaming system — once each, and without names, emails or other personal fields.
  • Attribution between SailyGrandGiveaWay.com and play.SailyGrandGiveaWay.com uses Google's cross-domain linker only when you have consented on the page you leave.
  • While a signal is denied, the corresponding Google tag sets no cookie and stores no identifier on your device. It may still send a cookieless ping that contains no identifier and cannot be used to recognise you.
  • Changing your choice later updates the signals immediately, without a page reload.

The consent state is kept in the dg_cookie record described above and is applied on every page before third-party tags load.

Global Privacy Control and Do Not Track

We honour the Global Privacy Control (GPC) signal. If your browser or extension sends GPC, we treat it as an express opt-out: analytics and advertising are recorded as declined, no optional tag is loaded, and the consent banner is not shown — because you have already answered the question and being asked again would be pointless.

We treat the older DNT: 1 Do Not Track header the same way, even though it has no legal force in Canada. You can still open “Cookie settings” in the footer and opt in deliberately if you want to; an explicit choice you make there overrides the browser signal, and we record which one it came from.

Changing or withdrawing consent

  • Whenever you choose, from any page: select Cookie settings in the website footer. The banner reopens with your current choice pre-filled. Change it and save; withdrawal takes effect immediately for future processing.
  • Your consent record expires after 12 months. After that you are asked again rather than assumed to still agree. We also ask again whenever the categories or providers change.
  • We keep the consent record for 12 months from the date you gave it, or for 3 years after withdrawal where we need to evidence what was consented to — see the retention table in our Privacy Policy.
  • In your browser: you can block or delete cookies and site data in browser settings. Clearing the website's storage removes your saved choice, so the banner will appear again on your next visit.
  • Opting out at source: Google offers opt-outs at adssettings.google.com and a browser add-on at tools.google.com/dlpage/gaoptout.

What actually happens if you refuse

Being specific, because “parts of the website are not permitted to work” is not an answer:

  • Declining analytics and advertising costs you nothing. Every page, tool and link works exactly as it does with them on. No content is withheld, no feature is degraded, and you are not asked again for 12 months. What we lose is aggregate insight into which pages are useful; what you lose is nothing.
  • Blocking essential storage does break things. The essential entries are not tracking — they remember that you passed the age gate and what you chose about cookies. If you block local storage for the website, the age gate reappears on every page load, the cookie banner reappears on every page load, and we have no record of your consent so nothing optional can ever run.
  • Private or incognito browsing clears storage when you close the window, so the age gate and the banner return on your next session. That is the browser working as intended, not a fault.

Questions

For the way we manage personal data generally, see our Privacy Policy. For anything about this policy, or to ask which providers are currently deployed, email our Privacy Officer at [email protected].

Version history

VersionIn effect fromSummary of changes
1.3 Current 13 October 2026 Added the dg_sid session cookie used by accounts and forms, and dg_conv for de-duplicating conversions; limited the Advertising choice to measurement with remarketing off unless approved; described how conversions and cross-domain attribution work.
1.2 7 August 2026 Removed the Meta Pixel identifier _fbp and Meta Platforms Ireland Ltd from the register and the third-party list: no Meta tag is deployed on the website and none is planned, so listing it overstated what the advertising category does.
1.1 7 August 2026 Added the Advertising category to the policy and the consent banner; replaced the two-row summary with a named register showing type, party, domain, purpose and lifetime for every identifier; named the third-party providers and linked their privacy policies; added first-party/third-party explanation, transfers outside Canada, Google Consent Mode v2, Global Privacy Control and Do Not Track handling, consent expiry and withdrawal, and a specific account of what refusing does.
1.0 26 June 2026 First published version: two categories, no named identifiers or providers.
Why play here

Accountability and oversight in British Columbia