Every year, competition organisers in the UK face investigations, ASA rulings, and — in the worst cases — criminal prosecution. Not because they set out to break the law, but because they didn't understand the difference between a legal prize competition and an illegal lottery. The distinction is narrow, the consequences are serious, and the online competition industry is growing fast enough that regulators are paying close attention. This guide covers everything you need to know to run a legal prize competition in the UK in 2026: the fundamental legal framework, qualifying question requirements, free entry routes, advertising rules, data protection, and the practical steps that keep you compliant from launch to draw.
Not legal advice
This article provides general guidance on UK prize competition law. It is not a substitute for professional legal advice. If you are unsure about your specific situation, consult a solicitor who specialises in gambling or competition law.
What Counts as a Prize Competition?
Before you launch anything, you need to understand the three categories UK law uses to classify promotional prize draws. Getting this wrong is where most organisers run into trouble — they assume that charging for entry is automatically fine, when the legality depends entirely on which category their promotion falls into.
Prize Competition
A prize competition requires entrants to exercise skill, knowledge, or judgment to participate. The winner may ultimately be selected at random from correct entries, but there must be a genuine barrier to entry — typically a qualifying question. Prize competitions are legal without a licence as long as they meet the requirements set out in Section 14 of the Gambling Act 2005.
Lottery
A lottery is determined purely by chance with no skill element. Running a lottery in the UK requires a licence from the Gambling Commission. Operating an unlicensed lottery is a criminal offence that can result in an unlimited fine or up to 51 weeks in prison. This is not a theoretical risk — Trading Standards and the Gambling Commission investigate complaints, and the online competition sector has received increasing scrutiny as it has grown.
Free Draw
A free draw is also determined by chance, but participation is completely free with no payment required. Free draws are largely unregulated because there is no commercial element. They are a legitimate promotional tool, but they offer limited revenue potential compared to prize competitions.
The key legal distinction
The critical difference between a legal prize competition and an illegal lottery is the skill element. As long as you include a genuine qualifying question that creates a real barrier to entry — and meet the other requirements — you can charge for entry without a Gambling Commission licence. Remove that skill element, or use a question so easy it functions as no barrier at all, and you are operating an unlicensed lottery.
The Gambling Act 2005: Key Rules
The Gambling Act 2005 is the primary legislation governing prize competitions in the UK. Section 14 sets out what constitutes a legal prize competition, and there are several requirements your competition must satisfy.
Skill, Knowledge, or Judgment
The Act requires that the process for allocating prizes involves an element of skill, knowledge, or judgment. In practice, this means including a qualifying question that acts as a genuine barrier to entry. We cover what makes a valid qualifying question in detail below.
The Reasonable Person Test
The level of skill required must be such that a reasonable proportion of people would be prevented from entering or would find it difficult to participate. This is where the law becomes nuanced, and it is the test that catches many operators out.
The question does not need to stump a majority of entrants — but it must genuinely exclude some. The Gambling Commission and the courts assess this objectively: would a reasonable cross-section of the public find the question difficult enough to represent a real barrier? A question everyone gets right on first attempt offers no such barrier.
No Purchase Necessary (With Conditions)
While you can charge an entry fee for a prize competition, you must also provide a free entry route in most circumstances. This obligation comes from the Consumer Protection from Unfair Trading Regulations 2008 and the CAP Code (enforced by the ASA), rather than the Gambling Act itself — but it is equally important and equally enforceable.
Qualifying Questions: Getting Them Right
The qualifying question is the legal foundation of your prize competition. It is what transforms an otherwise illegal lottery into a lawful competition. Choosing the right question requires more care than most guides acknowledge.
What Makes a Valid Qualifying Question
A qualifying question must:
- Require genuine knowledge or skill — it should not be trivially easy
- Be answerable — it should not be so obscure that no reasonable person could answer it
- Act as a real barrier — incorrect answers must disqualify the entry
- Be clearly presented before payment is taken
Examples of Good Qualifying Questions
- "In what year did the UK formally leave the European Union?" (2020, 2019, 2021, 2018)
- "What is the chemical symbol for gold?" (Au, Ag, Fe, Cu)
- "Which planet is closest to the Sun?" (Mercury, Venus, Mars, Earth)
These questions require a degree of knowledge, have a definitive correct answer, and would prevent a meaningful proportion of people from entering if they guessed incorrectly.
Examples of Poor Qualifying Questions
- "What colour is a red bus?" — Too easy; offers no genuine barrier to entry
- "What was the average rainfall in Lincolnshire on 3 March 1987?" — Too obscure; unreasonably difficult and likely challengeable
- Opinion-based questions with no correct answer — These do not constitute a test of skill at all
The Grey Area: Questions That Feel Easy Without Being Trivial
This is where many operators struggle. A question like "How many sides does a triangle have?" is clearly too easy. But what about "What is the capital of Australia?" or "How many players are in a football team?" These sit in an uncomfortable middle ground.
The honest answer is that UK law draws no bright line. The test is always whether a reasonable proportion of people would be prevented from entering. A question that most educated adults know — but not everyone — occupies uncertain territory.
The safer approach is to choose questions that require a specific piece of knowledge rather than obvious common sense. Questions about history, science, sport, geography, or current affairs with a definitive correct answer are far more defensible. If you are in doubt, go harder rather than easier: the legal risk of an insufficiently difficult question is greater than the commercial cost of a slightly more demanding one.
Multiple choice is standard practice
Most UK competitions use multiple-choice qualifying questions with four options. This format is widely accepted as meeting the legal requirements, provided the question itself demands genuine knowledge. Avoid making the wrong answers obviously absurd — if incorrect options are comically wrong, the correct answer becomes obvious to anyone regardless of knowledge, which weakens the skill element.
Free Entry Routes
Even though prize competitions are not lotteries, UK advertising rules and consumer protection law require you to offer a free entry route in most circumstances. The CAP Code states that promotions requiring purchase must not create the impression that a purchase is necessary to enter.
How to Implement a Free Entry Route
The most common approach is a postal entry route. You provide a postal address where entrants can send their name, contact details, and answer to the qualifying question without making a payment. This entry must be treated identically to paid entries in every respect — same draw eligibility, same prize, same process.
Key requirements for your free entry route:
- It must be clearly communicated in your terms and conditions and on the competition page itself
- Free entries must have the same chance of winning as paid entries
- The process must not be so burdensome as to discourage participation unreasonably — requiring a separate application form or return postage would be problematic
- You must actually process free entries that arrive — ignoring them is a serious breach and undermines the entire legal basis of your competition
Prominence matters as much as presence
Displaying your free entry route in the fine print at the bottom of your T&Cs is not sufficient. The CAP Code requires that significant conditions are communicated clearly. Make the AMOE route visible on the competition page and in any advertising. Burying it risks an ASA complaint — and those rulings are published publicly.
Terms and Conditions
Every prize competition must have comprehensive terms and conditions that are accessible to entrants before they participate. Under UK law and the CAP Code, your terms must include:
- Promoter details — Full legal name and registered address of the organiser
- Eligibility criteria — Minimum age (18 for paid competitions), geographical restrictions, and any exclusions (for example, employees of the promoter and their immediate families)
- Entry mechanics — How to enter, the qualifying question, the entry fee, and full free entry route details
- Prize description — Exactly what the winner receives, including the approximate retail value; any conditions attached to the prize (e.g., travel dates for holidays)
- Draw details — When and how the winner will be selected
- Winner notification — How and when winners will be contacted, and what happens if a winner cannot be reached within a specified period
- Prize delivery — Timeframe for receiving the prize and who bears any associated costs
- Data usage — How entrant data will be used, with a link to your privacy policy
- Closing date — When the competition closes and entries stop being accepted
- Limitation of liability — Standard legal protections for the organiser
Terms must be available before entry
Entrants must be able to read the full terms and conditions before they pay or submit their entry. Failing to make terms available upfront is a breach of the CAP Code and can result in an ASA ruling against you. The ASA has upheld complaints against competitions where T&Cs were inaccessible or incomplete at the point of entry — those rulings are permanent, searchable, and public.
ASA Advertising Rules
The Advertising Standards Authority (ASA) regulates how prize competitions are promoted in the UK. If you advertise your competition on social media, your website, or through paid channels, you must comply with the CAP Code.
Key Advertising Requirements
- Do not mislead — Your advertising must accurately represent the prize, the odds, and the cost of entry. Exaggerating prize values or implying better odds than actually exist is a CAP Code breach
- Significant conditions upfront — Key terms (closing date, entry fee, age restriction) must appear in the advertisement itself, not only in the full T&Cs
- No targeting children — Competitions for adults must not be advertised in a way that particularly appeals to under-18s, including through imagery, language, or platforms that skew towards younger audiences
- Social media compliance — Paid promotions and influencer posts must be clearly labelled as advertisements using #ad or equivalent
- Prize availability — The advertised prize must exist, be available, and be exactly as described at the time of advertising
If someone complains about your advertising to the ASA, they will investigate. A sustained or upheld ruling requires you to amend or withdraw the promotion, and — more damagingly — the outcome is published on the ASA website. Persistent non-compliance can be referred to Trading Standards for enforcement under consumer protection law.
Age Restrictions
Paid prize competitions should not be open to anyone under the age of 18. While the Gambling Act 2005 does not classify prize competitions as gambling (which is why no licence is required), the regulatory expectation — and the consistent practice across the industry — is to treat 18 as the minimum age. Some legal commentators describe this as best practice rather than a hard statutory requirement, but departing from it creates meaningful regulatory and reputational risk that is simply not worth taking.
Verification Approaches
- Self-declaration — Require entrants to confirm they are 18 or over at the point of entry; this is the minimum standard for most competitions
- Age verification services — Third-party verification for high-value competitions where the risk of underage entry is a particular concern
- Payment method checks — Credit and debit card payments provide an implicit verification layer, since under-18s generally cannot hold their own cards
- Terms and conditions — State the minimum age clearly and reserve the right to void and reclaim prizes from underage participants
Data Protection and UK GDPR
When you collect personal data from competition entrants — names, email addresses, postal addresses, payment information — you become a data controller under the UK General Data Protection Regulation (UK GDPR). This is not optional, and the obligations are real.
Your GDPR Obligations
- Lawful basis — You need a lawful basis for processing data. For competition entry, this is typically "contract" (performance of the competition) or "legitimate interests"
- Privacy notice — Provide a clear privacy notice explaining what data you collect, why, how long you retain it, and who you share it with
- Marketing consent — If you intend to send marketing communications to entrants, you must obtain separate, explicit consent for that purpose. You cannot make marketing opt-in a condition of entry, and pre-ticked consent boxes are unlawful
- Data minimisation — Only collect the data you genuinely need to run the competition
- Retention limits — Delete entrant data within a reasonable period after the competition ends, unless you hold valid consent to retain it for other purposes
- Subject access requests — Be prepared to respond within one calendar month to requests from individuals asking to see, correct, or delete their data
Marketing consent must be separate and explicit
Pre-ticked marketing consent boxes are unlawful under UK GDPR. Entrants must actively opt in — unticked by default, freely given, and not required as a condition of entry. The ICO (Information Commissioner's Office) has enforcement powers including fines of up to £17.5 million or 4% of global annual turnover for serious breaches.
What Happens If You Get It Wrong?
Most guides cover the rules; few explain the consequences. Understanding what is actually at risk is important context for how seriously to take compliance.
Criminal Prosecution
Operating an unlicensed lottery — which is what your competition becomes if the qualifying question is inadequate or absent — is a criminal offence under the Gambling Act 2005. Maximum penalties are an unlimited fine and up to 51 weeks' imprisonment. Prosecutions do occur, particularly for operators running large-scale competitions without proper legal foundations.
ASA Rulings
If the ASA upholds a complaint against your competition, the ruling is published on their website permanently. For small competition businesses, a public ruling describing a misleading or non-compliant promotion causes lasting reputational damage. Entrants research operators before buying — an ASA ruling that appears on the first page of Google results for your brand name will cost you future sales.
Trading Standards Referral
The ASA refers persistent non-compliant advertisers to Trading Standards, which can take enforcement action under consumer protection legislation including issuing fines and prohibition orders.
ICO Enforcement
UK GDPR breaches are enforced by the Information Commissioner's Office. The ICO investigates individual complaints and can issue enforcement notices, formal reprimands, and fines for violations of data protection law.
Payment Processor Restrictions
Poor compliance increases your exposure to chargebacks. If entrants feel a competition was unfair or misrepresented, they will dispute payments through their bank. A high chargeback rate flags your account at Stripe or other processors and can lead to account suspension — which takes your entire operation offline.
The risk is cumulative, not all-or-nothing
Most operators who face serious problems do not get prosecuted immediately. The pattern is usually: inadequate terms attract entrant complaints, an ASA investigation follows, the ruling damages trust, payment disputes increase, and the processor restricts the account. Compliance is not only about staying out of court — it protects your payment infrastructure, your reputation, and your ability to keep operating.
Running Competitions the Right Way
Running a legally compliant prize competition involves many moving parts: qualifying questions, free entry routes, proper terms and conditions, GDPR-compliant data handling, auditable draw mechanics, and age verification. Managing all of this manually is time-consuming and leaves significant room for error.
Giveawayz was built to handle compliance by default. The platform includes:
- A qualifying question builder that guides you through creating a legally sound barrier to entry, with the question presented to entrants before payment is taken
- A free entry (AMOE) route built into every competition automatically, satisfying the CAP Code requirement without any additional setup on your part
- A UK-compliant T&Cs generator that covers all required fields — promoter details, eligibility, draw mechanics, prize description, data usage, winner notification, and closing date
- A provably fair draw engine using a cryptographically seeded PRNG with a full audit trail, so you can demonstrate to any entrant or regulator exactly how the winner was selected
- UK GDPR-compliant data handling, with marketing consent captured separately, correctly, and stored independently from competition entry
- Pre-built compliance profiles for UK prize competitions, charity raffles, and international promotions
You can start a 7-day free trial at Giveawayz — no credit card required.
Compliance handled from day one
Every competition on Giveawayz launches with a qualifying question, an AMOE route, auto-generated T&Cs, and a provably fair draw — so the legal foundations are in place before your first entrant arrives.
Summary Checklist
Use this before you launch any paid prize competition in the UK:
- [ ] Qualifying question included — requires genuine knowledge or skill, not trivially easy, has a single definitive correct answer, and is presented before payment
- [ ] Free entry route published — postal AMOE route clearly stated in T&Cs and visible on the competition page, not buried in small print
- [ ] Terms and conditions complete — covers promoter details, eligibility, entry mechanics, prize description, draw process, winner notification, data usage, and closing date
- [ ] Terms accessible before entry — entrants can read the full T&Cs before paying or submitting
- [ ] Minimum age of 18 — stated in T&Cs and confirmed by entrants during entry
- [ ] ASA-compliant advertising — significant conditions in the ad itself, no misleading prize claims, #ad labels on paid and influencer posts
- [ ] UK GDPR obligations met — privacy notice in place, marketing consent separate and opt-in only, data minimisation applied
- [ ] Draw process auditable — you can demonstrate how the winner was selected if questioned by an entrant or regulator
- [ ] Free entries actually processed — any postal entries received are entered into the draw on equal terms with paid entries
Get these fundamentals right and you can run prize competitions with confidence, knowing you are operating within the law and protecting both your business and your entrants.
