"Open worldwide" is the most expensive two-word phrase in promotional marketing. Running a sweepstakes in the United States is already a multi-jurisdictional compliance exercise — 50 states, each with its own registration, bonding, and disclosure requirements. Expanding that promotion across international borders multiplies the complexity by an order of magnitude.

Every country has its own promotional marketing laws. Some countries ban sweepstakes entirely. Others impose registration requirements, mandatory government fees, language restrictions, or unique legal mechanisms that have no U.S. equivalent. The European Union layers GDPR on top of country-specific promotional laws. Canada — the market most U.S. brands expand into first — requires a mathematical skill-testing question that fundamentally changes how a sweepstakes operates.

This guide covers the major international markets, the specific legal requirements in each, and the practical strategies brands use to run compliant cross-border promotions.

This article is for informational purposes only and does not constitute legal advice. Consult with a qualified attorney for guidance specific to your promotion.

Why International Sweepstakes Are Complex

The core challenge is that there is no international sweepstakes law. There is no equivalent of a bilateral trade agreement that harmonizes promotional marketing regulations across countries. Each jurisdiction defines its own rules, and those rules often conflict.

Varying Definitions of Core Concepts

The three-element test that defines U.S. sweepstakes law — prize, chance, and consideration — does not translate cleanly across borders. Different countries define "consideration" differently. Some treat any form of engagement (including visiting a website) as consideration. Others focus narrowly on monetary payment. The result is that a promotion that is clearly a legal sweepstakes in the United States might be classified as a lottery in another jurisdiction.

Outright Bans

Several countries prohibit promotional sweepstakes entirely, or impose restrictions so severe that running one is impractical for foreign sponsors:

Brazil requires federal authorization from the Secretaria de Avaliacao, Planejamento, Energia e Loteria (SEAE) for any promotion involving prizes. The authorization process takes months, requires a Brazilian legal entity as the sponsor, and mandates that prize funds be deposited in a government-designated bank.
Italy requires registration with the Ministry of Economic Development (MISE) for any promotion offering prizes. Prize values above a threshold require a bank guarantee. The server hosting the promotion's random selection mechanism must be located in Italy.
India bans prize-linked promotions in several states, including Goa, Sikkim, and Meghalaya. Other states permit them with restrictions, but the patchwork of state-level laws — combined with national consumer protection regulations — makes India one of the most complex markets for promotional sweepstakes.
China requires government approval for promotional lotteries and caps individual prize values at 50,000 RMB (approximately $7,000 USD). Online promotions targeting Chinese consumers face additional requirements under cybersecurity and data localization laws.

Regulatory Enforcement Across Borders

Even if you run a promotion from U.S. soil, targeting consumers in another country subjects you to that country's laws. A sweepstakes promoted to French consumers must comply with French promotional law, regardless of where the sponsor is incorporated. Enforcement mechanisms vary — the EU has strong cross-border enforcement, while other regions are less consistent — but the legal obligation exists.

Canada: The Closest International Market

Canada is typically the first international market U.S. brands add to a sweepstakes, and it is where most brands discover that "North America" is not a single regulatory jurisdiction.

The Skill-Testing Question

Canadian law classifies a promotion as an illegal lottery if it combines prize, chance, and consideration — the same framework as the United States. But Canada adds a unique mechanism to remove the "chance" element: the mathematical skill-testing question (STQ).

To avoid lottery classification, Canadian sweepstakes require that potential winners correctly answer a mathematical skill-testing question before claiming their prize. The question must be sufficiently difficult that the outcome is not purely a matter of chance — the standard is a multi-step arithmetic problem, such as:

(15 x 3) + (120 / 4) - 17 = ?

The STQ must be answered without mechanical or electronic assistance. It must be administered before the winner is confirmed, not after. And it must be genuinely evaluative — a single-digit addition problem (2 + 3) would not satisfy the requirement.

The rationale is that by requiring skill to claim the prize, the promotion is no longer purely chance-based and therefore does not meet the lottery definition. This is unique to Canadian law and has no U.S. equivalent.

Quebec: A Jurisdiction Unto Itself

Quebec's promotional laws are administered by the Regie des alcools, des courses et des jeux (RACJ), and they impose requirements that no other Canadian province matches:

Registration. Any sweepstakes open to Quebec residents with a total prize value exceeding $100 CAD must be registered with the RACJ. The registration must be filed at least 30 days before the promotion begins.
Duties. The sponsor must pay a duty equal to 10% of the total prize value to the RACJ.
French-language rules. All promotional materials, official rules, and participant communications must be available in French. This is not a courtesy — it is a legal requirement under Quebec's Charter of the French Language.
Bonding. For prize values above a certain threshold, the sponsor must post a security deposit with the RACJ.
Winner publication. The names of winners must be published or made available to participants upon request.

Because of these requirements, many brands choose to exclude Quebec residents from their Canadian sweepstakes. The official rules typically include a clause stating "Open to legal residents of Canada, excluding Quebec" or "Open to legal residents of the 50 United States and Canada (excluding Quebec)." While this limits reach, it eliminates a significant compliance burden.

Rest of Canada

Outside Quebec, Canadian sweepstakes law is relatively straightforward. The Competition Act and Criminal Code govern promotional contests. Key requirements include the STQ, clear disclosure of odds, rules availability, and compliance with Canada's Anti-Spam Legislation (CASL) for any electronic communications sent to entrants.

European Union: GDPR and Beyond

The EU presents a dual compliance challenge: GDPR applies uniformly across all member states, but each country also has its own promotional marketing laws.

GDPR Requirements for Promotions

Any sweepstakes that targets EU residents — or collects data from them, even incidentally — must comply with the General Data Protection Regulation. For promotional sweepstakes, this means:

Lawful basis for data processing. You must identify a lawful basis for collecting and processing entrant data. For sweepstakes, this is typically "consent" — the entrant affirmatively agrees to the collection and use of their data by entering. "Legitimate interest" may apply in some cases, but consent is the safer basis for promotional data collection.

Explicit, granular consent. GDPR requires that consent be freely given, specific, informed, and unambiguous. Pre-checked consent boxes are invalid. Bundled consent (e.g., "by entering you agree to our terms AND consent to marketing emails") is prohibited — each purpose requires separate consent. The entrant must actively opt in to each type of data use.

Right to erasure. Entrants can request that their personal data be deleted at any time. Your systems must be able to locate and delete a specific individual's entry data across all storage systems. If you are using third-party services for entry management, analytics, or email marketing, the erasure obligation extends to those services.

Data processing agreements. Any third party that processes entrant data on your behalf must be covered by a Data Processing Agreement (DPA) that meets GDPR requirements. This includes your sweepstakes platform, email service provider, analytics tools, and any vendors involved in winner selection or prize fulfillment.

Cross-border data transfer. Transferring EU resident data outside the EU requires an adequate legal mechanism — Standard Contractual Clauses (SCCs), Binding Corporate Rules, or a transfer to a country with an EU adequacy decision. The U.S. and EU have the EU-U.S. Data Privacy Framework, but its long-term stability remains uncertain. Your data transfer mechanisms should not depend on a single legal basis.

Country-Specific Promotional Laws

Beyond GDPR, individual EU member states impose additional requirements — and they vary enough that "EU compliance" is not a single thing.

Germany requires that promotional conditions be transparent and not misleading. Aggressive marketing practices, including certain types of promotional tie-ins, may violate Germany's Unfair Competition Act. France requires promotional rules to be available in French (under the Toubon Law) and mandates specific disclosures about odds, prize values, and the sponsor's identity — plus a notary requirement for certain types of promotional lotteries. Spain requires tax withholding on prize values above a threshold, with the sponsor responsible for reporting to the Spanish tax authority. Belgium restricts certain types of promotional games and requires that the rules of participation be deposited with a notary for prizes above a certain value.

Four countries, four different sets of additional requirements — and that is before accounting for the other 23 EU member states.

UK Post-Brexit

Following Brexit, the UK operates under its own data protection regime (UK GDPR, essentially a copy of EU GDPR) and its own promotional marketing regulations. The UK Gambling Commission regulates prize competitions and free draws. A free draw (no consideration required) is generally permissible, but a prize competition that involves payment to enter may require a gambling license.

Data Privacy Across Borders

Beyond GDPR, several major data privacy frameworks affect international sweepstakes:

CCPA/CPRA (California, USA). Applies to any business that collects personal information from California residents. Requires specific disclosures about data collection practices, provides consumers with the right to opt out of data sales, and imposes restrictions on data retention.

PIPEDA (Canada). Canada's Personal Information Protection and Electronic Documents Act governs data collection by private-sector organizations. Key requirements include consent for data collection, limitation of collection to what is necessary, and accuracy obligations.

LGPD (Brazil). Brazil's Lei Geral de Protecao de Dados mirrors GDPR in many respects but has distinct requirements around data processing agents, data protection officers, and the National Data Protection Authority (ANPD).

Each framework has different consent requirements, retention limits, transfer restrictions, and enforcement mechanisms. A promotion that collects data from participants in the U.S., Canada, the EU, and Brazil must comply with CCPA, PIPEDA, GDPR, and LGPD simultaneously — and the most restrictive standard effectively becomes the floor.

Cross-Border Data Transfer

Moving participant data across international borders triggers transfer restrictions under most modern privacy frameworks. EU data cannot be transferred to the U.S. without an adequate legal mechanism. Brazilian data transfers require ANPD authorization or contractual safeguards. Even within countries, sectoral data laws may impose additional restrictions.

The practical implication is that your sweepstakes infrastructure must account for where data is stored, where it is processed, and what legal mechanisms authorize each cross-border transfer. Using a U.S.-based sweepstakes platform to collect EU participant data requires at minimum Standard Contractual Clauses and a privacy impact assessment.

Language Requirements

Many jurisdictions require that promotional rules and participant communications be available in the local language. These are not suggestions — they are legal requirements.

Quebec requires French for all promotional materials. France requires French under the Toubon Law, which mandates French in all commercial communications targeting French consumers. Brazil requires Portuguese for any promotion targeting Brazilian consumers. Belgium requires materials in the language of the region where the promotion is offered — French, Dutch, or German, depending on the community. Catalonia (Spain) requires Catalan alongside Spanish for promotions offered in Catalonia. Publishing official rules only in English for a promotion targeting Quebec residents violates Quebec's Charter of the French Language. Publishing rules only in English for a promotion targeting Brazilian consumers violates LGPD consent requirements (consent must be informed, which requires the participant to understand the terms).

Translation is not just a language exercise. Legal terms, eligibility requirements, and dispute resolution clauses must be translated by someone who understands the legal concepts in the target language. Machine translation of official rules is risky — a poorly translated eligibility clause could be interpreted differently in the local jurisdiction.

Currency and Prize Valuation

International promotions must address how prizes are valued and described across currencies.

State prize values in local currency for participants in each target jurisdiction. Stating a prize value of "$500" to a UK audience without specifying USD creates ambiguity — the participant may reasonably assume GBP. Be aware of exchange rate fluctuations for promotions with extended entry periods: a prize valued at $1,000 USD at the start of a 3-month promotion may be worth significantly more or less in the winner's local currency by the time it is awarded.

Import duties and taxes on physical prizes shipped internationally are typically the winner's responsibility, but this must be stated explicitly in the official rules. A winner in Germany who receives a prize from a U.S. sponsor may owe import VAT, customs duties, and income tax on the prize value — and if your rules are silent on this, you will hear about it.

The simplest solution: offer a cash alternative. A cash equivalent or gift card avoids the logistical and tax complications of shipping physical prizes across borders.

The Practical Approach

Given the complexity, most brands adopt one of two strategies for international sweepstakes:

Strategy 1: Country-Specific Promotions

Rather than running a single "worldwide" sweepstakes, run separate promotions in each target market. Each promotion has its own official rules, tailored to the specific legal requirements of that jurisdiction. This is the most compliant approach but also the most resource-intensive.

Strategy 2: Limited Markets with Country Addenda

Run a single promotion with a core set of official rules, then create country-specific addenda that modify the core rules for each target jurisdiction. For example, the core rules might cover eligibility, entry methods, and prize details, while the Canadian addendum adds the skill-testing question requirement and the Quebec addendum adds French-language rules and RACJ registration information.

This approach balances compliance with operational efficiency. The core rules provide consistency, and the addenda address jurisdiction-specific requirements.

What "Worldwide" Actually Means

A promotion marketed as "worldwide" or "open to all countries" is a legal fiction. No promotion is truly open to every country on Earth — even if you wanted to, the countries that ban sweepstakes (Brazil without SEAE authorization, Italy without MISE registration) make universal eligibility impossible.

In practice, "worldwide" promotions should list the specific countries where entry is permitted and exclude countries where the promotion would violate local law. The official rules should include a comprehensive list of eligible countries and a statement that the promotion is void where prohibited by law.

Layering International Requirements on Domestic Compliance

International expansion does not replace domestic compliance — it adds to it. A U.S.-based sponsor running a sweepstakes open to participants in the U.S., Canada, and the UK must comply with:

U.S. federal law (FTC, FCC, CAN-SPAM)
U.S. state law (registration, bonding, disclosure requirements — see our sweepstakes compliance guide)
U.S. state registration in states that require it (see our guide on multi-state sweepstakes compliance)
Canadian federal law (Competition Act, Criminal Code, CASL, PIPEDA)
Canadian provincial law (Quebec RACJ if Quebec is included)
UK data protection law (UK GDPR)
UK Gambling Commission regulations (for prize competitions)

Each layer adds requirements. None replaces the others.

Common International Sweepstakes Mistakes

Assuming U.S. Rules Work Globally

The most frequent mistake, and the most predictable one. A brand drafts official rules that comply with U.S. law, adds "open to legal residents of the United States and Canada" to the eligibility section, and considers compliance complete. The rules contain no skill-testing question for Canada, no PIPEDA disclosures, no CASL opt-in language, and no Quebec exclusion or registration. The result is a promotion that violates Canadian law from day one.

Ignoring Quebec

Brands that include Canada in their eligible markets but overlook Quebec's registration, duty, bonding, and French-language requirements face enforcement action from the RACJ. The RACJ actively monitors promotions targeting Quebec residents and has imposed fines for non-compliance.

Not Translating Rules

Publishing English-only official rules for a promotion targeting non-English-speaking markets violates language requirements in multiple jurisdictions and undermines the informed consent required by GDPR and other privacy frameworks.

Violating GDPR with Data Collection

Collecting personal information from EU residents using pre-checked consent boxes, bundled consent, or no consent mechanism at all. GDPR enforcement has resulted in fines of up to 4% of global annual revenue for non-compliant data practices.

Running in Countries That Ban Promotions

Opening a sweepstakes to residents of Brazil, Italy, India, or other countries with promotional restrictions without obtaining the required authorizations or registrations. The fact that enforcement may be inconsistent does not eliminate the legal obligation — or the reputational risk if enforcement does occur.

Neglecting Tax Implications

Failing to account for income tax obligations on prizes in each jurisdiction. In the U.S., prizes over $600 require IRS reporting (Form 1099). Other countries have their own prize taxation rules, and the sponsor's obligations vary — some jurisdictions require the sponsor to withhold and remit taxes on the winner's behalf.

How Comprizant Handles International Promotions

Comprizant's compliance engine supports multi-jurisdiction promotions with country-specific rules generation. When you add international markets to your campaign, the platform identifies the applicable legal requirements for each jurisdiction and generates the appropriate rules content — including Canadian skill-testing question language, GDPR consent mechanisms, language requirements, and country-specific eligibility restrictions.

For promotions that include Canada, the system automatically generates skill-testing question language in the official rules and provides the Quebec exclusion clause (or, if Quebec is included, flags the RACJ registration and duty requirements). For EU-targeting promotions, the platform generates GDPR-compliant consent language and data processing disclosures.

The platform does not replace legal counsel for complex international promotions — but it provides a compliance foundation that handles the structural requirements most brands miss.

Key Takeaways

There is no international sweepstakes law. Every country has its own promotional marketing regulations, and many of them conflict with each other.
Several countries ban or heavily restrict sweepstakes — including Brazil, Italy, India, and China. Do not open a promotion to these markets without confirming that the required authorizations are in place.
Canada requires a mathematical skill-testing question for all sweepstakes. Quebec requires registration, a 10% duty, French-language rules, and bonding. Many brands exclude Quebec to avoid these requirements.
GDPR applies to any promotion targeting EU residents. Consent must be explicit, granular, and freely given. Pre-checked boxes and bundled consent are invalid.
Data privacy frameworks (GDPR, CCPA, PIPEDA, LGPD) each impose different consent, transfer, and retention requirements. The most restrictive standard becomes the effective floor.
Language requirements are legal obligations, not courtesies. Official rules must be available in the local language of each target jurisdiction.
International expansion adds to domestic compliance — it does not replace it. U.S. state registration, bonding, and disclosure requirements still apply to U.S. participants.
The practical approach: limit your promotion to specific countries rather than claiming "worldwide" eligibility, and create country-specific rules addenda for each target market.

Expanding your promotions internationally should grow your brand's reach, not its legal exposure. Launch your compliant international sweepstakes with Comprizant and let the platform handle multi-jurisdiction compliance from the start.