Analytics

When a promotion falls over on compliance, it rarely happens at the permits stage. The authority numbers, the filing deadlines, the state notifications — most experienced teams have those handled. What catches brands is everything that comes after: mechanics that create unintended entry barriers, T&Cs that leave interpretation gaps, fulfilment processes that don’t match what was promised in the advertising.

Trade promotion compliance in Australia is commonly understood as a state-and-territory exercise. That’s accurate as far as it goes. But the compliance failures that create real exposure — consumer complaints, regulatory scrutiny, prize disputes — tend to live in the operational detail, not in the permit paperwork.

And that detail is about to attract more scrutiny.

The Regulatory Baseline in Australia

NSW, ACT, and SA each require a formal permit or authority before you can run a promotional lottery above certain prize thresholds. In NSW — where most national promotions are anchored — the Community Gaming Act 2018 requires an authority for any trade promotion lottery with a total prize pool exceeding $10,000. The Community Gaming Regulation 2020 replaced the old per-promotion permit system with a duration-based authority (1, 3, or 5 years), which is more workable for brands running several campaigns a year.

Critically, NSW Fair Trading still needs to be notified at least 10 working days before each individual promotion commences — even if the authority is already in place. The authority number must appear in all advertising materials. Entries must be genuinely free: you can’t require a purchase as the only path into a chance-based draw.

SA and ACT have their own requirements. WA sits outside the Community Gaming framework entirely and has its own framework under the Gaming and Wagering Commission Act 1987. Trevor Services covers the full state-by-state breakdown here.

Getting this right is foundational. But it’s not the whole picture.

Where Compliance Actually Breaks Down

The failures Trevor Services sees most often in promotional execution don’t stem from missed permit filings. They show up in the gap between what the T&Cs say and what the promotion actually does.

T&Cs that don’t match the mechanics

The terms say one entry per person; the platform allows multiple submissions from the same email. The prize described in the terms differs from what appears in advertising. These gaps are consumer protection issues under Australian Consumer Law, regardless of how the permits are structured. If a participant is misled about how their entry is being processed or what they can win, that’s a misleading conduct problem — and it sits entirely outside the permit framework.

Winner selection and notification gaps

NSW’s Community Gaming Regulation 2020 is specific: the terms must describe the draw process, the date and time, how winners will be notified, and what happens if a prize goes unclaimed. An unclaimed prize requires a documented redraw. In our experience, this tends not to be specified clearly in the T&Cs, and a documented process isn’t in place when it’s needed. The gap surfaces months after the promotion closes, when a participant queries an outcome and there’s no paper trail to point to.

Receipt validation with no error path

For cashback and receipt-based promotions, OCR validation occasionally fails — the image is too blurry, the format is unfamiliar, the receipt is from a newer store template the system hasn’t seen. If the T&Cs and the platform don’t specify what happens in that scenario, there’s no clear path for the participant to follow. The claim was made in good faith; the validation failed; the answer to “now what?” needs to be in the terms, not buried in a FAQ.

Entry friction that functions as a barrier

There’s a principle in The Shelf Truth called Friction as a Cost: every form field, every extra step, every barrier in the entry process costs approximately 10% of potential entries. That’s a campaign design problem. But it’s also a compliance signal. A claim process that’s genuinely difficult to complete isn’t just bad for participation rates — it can make the promotional offer feel harder to claim than it should be.

This doesn’t mean entry forms need to be frictionless. But the friction should serve a legitimate purpose, and that purpose should be something you can explain clearly.

The Unfair Trading Practices Bill 2026 — A New Dimension

The Competition and Consumer Amendment (Unfair Trading Practices) Bill 2026 was introduced in April 2026. If passed, it would add a general prohibition on conduct that “unreasonably manipulates a consumer” or “unreasonably distorts the environment in which a consumer makes a decision” — with proposed effect from July 2027.

ADMA, Australia’s peak body for data-driven marketing, has submitted to Treasury that the prohibition is currently too broad and its scope is unclear. Their specific concern: everyday marketing practices — countdown timers, low stock notifications, urgency framing — could be inadvertently captured, even where they don’t mislead. ADMA has recommended the general prohibition either be removed or significantly narrowed before passing.

The bill hasn’t passed. The direction it’s travelling, though, is worth paying attention to for anyone designing promotional mechanics.

The proposed law is aimed at conduct that distorts consumer decision-making. For promotional marketers, the relevant question is: do any of our standard mechanics — time-limited prize tiers, narrow claim windows, layered entry requirements — create an environment that could be characterised as unfairly distorting consumer choices? Not necessarily misleading, but distorting.

That’s a higher bar than the current framework sets. It’s not a reason to redesign every promotion, but it is worth being deliberate about how mechanics are structured and communicated.

What Operational Compliance Actually Looks Like

Compliance in practice is a set of disciplines maintained across the life of every campaign, not a checklist run once before launch.

Treat T&Cs as an operational document. They need to reflect how the promotion will actually run — not be a generic template with the dates and prize values dropped in. Draw process, notification method, unclaimed prize procedure, redraw conditions: all of this should match what the platform and fulfilment process will do. Where a promotion involves multiple entry channels (online, in-store, social), the T&Cs need to address each of them explicitly.

Document the draw. NSW requires records of the draw process, winner selection, prize distribution, and any redraws. Those records are the defence if a participant disputes the outcome. What that means in practice is a timestamped, reproducible draw process — not a chain of emails.

Build a clear error path for validation failures. Whether it’s receipt OCR, unique code verification, or QR scan processing, every validation mechanism has edge cases. The T&Cs and the consumer-facing communications need to specify what happens when validation fails and who the participant contacts to resolve it.

Apply the Kill Sheet before launch. Before any promotion goes live, it’s worth running a 15-minute diagnostic: Does the entry mechanic match what’s in the T&Cs? Is the prize description consistent across all creative assets? Is the winner selection process documented? Has the platform been tested for the failure cases? They’re easy to skip when timelines are tight.

Where the Operational Discipline Often Lives

For most brands and agencies, the compliance work sits across at least three teams: marketing (owns the campaign brief), legal (owns the terms), and the platform or fulfilment partner (runs the mechanics). When those three are not aligned, gaps appear.

At Trevor Services, the operational compliance piece is built into how campaigns are run on the platform. Draw documentation, winner selection, unclaimed prize redraws, fraud controls (velocity limits, receipt validation, unique code issuance) — these are logged in real time within the Salesforce-native system. The T&Cs generation process is aligned with how each mechanic actually works. That’s not just a campaign management convenience; it’s what makes the compliance record defensible when it needs to be.

The ACCC’s enforcement and compliance priorities for 2026-27 emphasise proactive compliance at all levels of business operations — not just legal sign-off at the start of a campaign.

A Practical Starting Point

If you’re reviewing your promotion compliance framework ahead of the second half of the year, the most useful place to start isn’t the permit filings — those are usually fine. It’s the gap between your standard T&Cs template and how your promotion actually runs. Walk the entry and claim process end-to-end. Check that the draw documentation matches what the terms describe. Make sure every error scenario has an answer.

The UTP Bill, if it passes in its current or amended form, will raise the bar on what “fair” means in a promotional context. The brands that are best positioned for that are the ones whose compliance is already operational, not just procedural.

If you’re thinking through how trade promotion compliance works in practice across your campaigns, we’re happy to talk through it.

NSW gives you ten business days before launch — and the clock only starts when Fair Trading has your complete terms and conditions, not when you email them.

That one detail quietly rewrites how you should plan the whole compliance leg. The application itself is a form and a fee; the thing that holds it up is almost always the terms and conditions sitting behind it. So the useful move is the opposite of what the campaign plan usually shows: finalise the T&Cs weeks before you touch a single application, and the permits fall into place around them.

Which states in Australia require a promotional permit?

Three jurisdictions require a permit or licence for a trade promotion lottery: New South Wales, the Australian Capital Territory and South Australia. The rest — Victoria, Queensland, Western Australia, Tasmania and the Northern Territory — let you run on prescribed conditions without an individual permit. The permit rules apply to games of chance, not games of skill.

That three-states split is the easy part to get right, and it’s the part everyone remembers. The Victorian regulator sets out the conditions for running a trade promotion lottery there without a permit, and Western Australia runs its lotteries under blanket permit conditions rather than individual applications. Running without a permit still means running inside a framework; the conditions just live in legislation instead of on an approval letter.

Why the terms and conditions are the real bottleneck

Every permit state assesses the terms you lodge, not an abstract promotion. NSW counts its notification window from the day Fair Trading holds a complete set of terms — complete meaning the prize schedule, the entry mechanic, eligibility, the draw method and the dates are all present and consistent with each other. If a clause is missing or the mechanic is described loosely, the terms come back, and the window you’d budgeted restarts from zero.

The reason terms take longer than people expect is that the mechanic you write into them decides the compliance path, and that choice isn’t always obvious until the terms are drafted. A cashback with a draw bolted on top — “claim your cashback and go in the draw to win a trip” — reintroduces an element of chance, and it’s that chance component, not the cashback, that the permit rules are written to catch.

Receipt-to-enter makes the same point more plainly. That is the work that has to be finished before permit work can start, and it’s the work that quietly eats the lead time nobody allocated to it. Our note on what promotion terms and conditions should include walks through the clauses that tend to cause the resets.

The state details that catch people out

NSW grants an Authority to Conduct a Trade Promotion Lottery that can cover a block of promotions over a multi-year period, so the licence itself isn’t the recurring cost — the per-promotion notification is, and that’s where the ten-business-day window bites, two full weeks of calendar time before launch. The thresholds are where a national promotion gets caught: NSW notification applies above a $10,000 total prize pool, South Australia requires a licence above $5,000, and the ACT sits lowest at $3,000. A $4,000 prize pool clears NSW and SA but still needs ACT approval — check your pool against the lowest number, not the one you remember. South Australia adds a wrinkle for printed scratch-and-win or break-open mechanics, which need a separate instant-prize licence regardless of prize value, and SA won’t let you advertise until the licence number is granted and shown on the creative.

Two layers sit on top of the lottery rules and both are easy to miss. Liquor promotions carry state liquor advertising conditions that apply regardless of permit status — so a wine draw has to clear responsible-promotion wording on top of the trade promotion rules, and that wording lives in the T&Cs too. And winner notification and unclaimed-prize handling are permit conditions in their own right, not housekeeping. The permit conditions on redraws and notification deadlines are what you lean on when a winner goes quiet.

The counter-view: aren’t permits the milestone that matters?

The fair version of the opposing case: figure out which three states need a permit, build in the lead time for NSW, ACT and SA, and you’ve handled the legal side. The timelines are fixed and external, so they’re worth protecting. But protecting them while the terms stay a draft is the trap — the application hits its window with incomplete terms, the clock resets to zero, and the date you guarded all along slips anyway. You can’t start the permit clock until the terms are done; the reset costs you the full window a second time, not a tidy day or two. A quick way to force the question early is pressure-testing the compliance path before the creative is locked. Once that path is mapped, the upstream strategy calls — prize architecture, mechanic selection, retailer fit — are what Bamboo Marketing covers.

The permit is the part everyone plans for; the terms and conditions behind it are the part that actually decides whether you launch on time.

If you’re mapping out permits and terms for a promotion, we’d be happy to talk it through.

One whitegoods client captures a receipt, a spend band and a customer ID at entry — most CDP projects never plug into that moment. That gap is the whole story. A customer data platform won’t fix your promotions data, because the problem isn’t where the data sits once you have it — it’s whether each entry mechanic was configured to capture an identified, consented customer record in the first place. Fix the capture at the form before you buy the platform.

The market narrative pulls the other way, and it’s worth stating fairly. The cookieless, privacy-first environment, the argument runs, makes a unified first-party profile essential, so the brands that invest first pull ahead while the rest fly blind. Industry voices in the trade press describe exactly this pressure — B&T has written about the “panic buying” of martech it produces. The instinct to move isn’t wrong. The sequencing is — and it’s wrong for a structural reason, not a lazy one: CDP procurement usually sits with IT or a martech lead, while the promotion form is configured by the agency or the trade team, so the two decisions almost never land in the same room until the data’s already been let slip.

What is a customer data platform, and why does it matter for promotions?

A customer data platform resolves records into one profile — but its identity logic assumes structured field input. For promotions, that’s the catch most CDP briefs miss: an unstructured receipt image is invisible to it by design, not by accident. The platform can only unify the fields the entry form actually captured as values.

The capture happens at the form, or it doesn’t happen

Here’s where the six-figure mistake lives. A CDP greenlit before anyone audits what the promotions actually capture will faithfully unify entries that caught an email but no customer ID, no consent flag, no product, no channel. The downstream effect is specific and ugly: a segment you can’t build because half the records have no spend band, a suppression list you can’t trust because the purchase channel wasn’t captured, and an activation plan that stalls because there’s nothing matchable to act on. You paid for the tool; you can’t run the use case.

The richest capture moment is already running under a lot of promotions. At that one step you have identity, spend, product, channel and timing all present. It’s the single best first-party data moment a brand gets, and it’s the one CDP projects routinely skip past on their way to the vendor demo.

The live market runs on this exact moment. Coles’ Shop Scan & Win is built on scan-to-enter; Chemist Warehouse has run a receipt-gated $5 cashback. Every one of those entries is a consented record being created or let slip — decided by how the form is built, not by what unifies it afterwards.

Configuration decides what’s usable, not the platform

The choices that determine record quality are made at setup, long before activation. OCR is the one that quietly decides data quality: without it, the spend and product on a receipt arrive as an image in a folder that no profile can read, so the one field that justified a purchase gate never becomes a structured, matchable value. Low OCR penetration isn’t a cost at entry; it’s a cost you discover a year later when the CDP can’t segment on spend because spend was never captured as a number. A daily cap works the same way — it shapes the behavioural signal you get back. Get those wrong and the CDP inherits the mess.

Whether a record is even completable varies by prize tier, which tells you capture and claim design matter more than the platform. The mid-tier is where records go quiet — the step that collects the record is where it’s won or lost. A CDP can’t retrieve a profile the claim flow never finished. This is the same gap that produces unclaimed prizes: the data and the prize both fall out at the step you didn’t design. The fix is the same pass that lifts completion — a friction audit on the entry form also fixes what the record contains.

Consent is captured at entry too, and the rules are tightening

Privacy reform raises the stakes for how consent and data are captured, not just how they’re stored. The Productivity Commission’s 2025 interim report on harnessing data and digital technology frames the task as capturing the consumer benefit of data while managing the downside — and that line gets drawn at collection. A consent flag set at the entry form, tied to a customer ID, is worth more than any amount of reconciliation later. A CDP that unifies records with ambiguous consent provenance hasn’t solved your exposure; it’s centralised it — every one of those records now sits in one table, under one query, with the same unanswerable question about whether the person actually agreed, which is exactly the shape a regulator would ask you to produce. The terms and the consent language on the form are doing the compliance work, not the platform downstream.

The honest case for buying now — and where it breaks

The strongest version of the buy-first argument is that infrastructure takes time, so starting the CDP build in parallel with fixing capture is simply faster. Fair enough, and if your inputs are already clean, it holds. But it tends to break in one specific place: when the brand treats the platform purchase as the decision and the capture as a later integration detail. That’s the sequence that produces a unified view of records nobody can act on. Running promotions is how brands generate consented first-party records at scale — the entry is the capture event — so the work that makes a CDP worth owning is the work you’d do anyway to run a promotion properly. The why behind it — the shopper psychology — Bamboo Marketing covers that; the capture is execution, and execution is where the record is made or lost.

So the sequence matters more than the spend. Buy the platform first and you’ve bought a memory for data you never collected cleanly. Fix the form first and even a modest CDP has a structured spend field and a matchable customer ID to unify.

A customer data platform remembers what you collected; it cannot collect what the entry form let slip, and that step is decided long before any vendor is chosen.

If you’re rethinking how your promotions feed a customer data platform, we’d be happy to talk it through.