Policy and restrictions
Disclosure requires written consent. Disruption, social engineering, physical intrusion and brute force are prohibited; internally known findings count as duplicates.
Eligibility and submission status
Platform membership and researcher-identified registration are required. Application self-registration is limited to Dutch residents and citizens. Platform eligibility requires age 18, or 16 with guardian permission, plus legal and employer authorization.
Logged-out policy and login invitation do not independently establish current intake status.
Advertised rewards
No monetary bounty schedule; currency and numeric bounds remain null.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
www.staatsloterij.nederlandseloterij.nlPublished location: http://www.staatsloterij.nederlandseloterij.nl | URL | Tier 2 |
www.krasloten.nederlandseloterij.nlPublished location: http://www.krasloten.nederlandseloterij.nl | URL | Tier 2 |
www.eurojackpot.nederlandseloterij.nlPublished location: http://www.eurojackpot.nederlandseloterij.nl | URL | Tier 2 |
www.luckyday.nederlandseloterij.nlPublished location: http://www.luckyday.nederlandseloterij.nl | URL | Tier 2 |
www.lotto.nederlandseloterij.nlPublished location: http://www.lotto.nederlandseloterij.nl | URL | Tier 2 |
www.miljoenenspel.nederlandseloterij.nlPublished location: http://www.miljoenenspel.nederlandseloterij.nl | URL | Tier 2 |
www.nederlandseloterij.nlPublished location: http://www.nederlandseloterij.nl | URL | Tier 2 |
www.toto.nlPublished location: http://www.toto.nl | URL | Tier 2 |
See the CSV file attached in the In-scope section for a full list of assets in scope | Other | No bounty |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Review limitations
- The linked scope attachment was deliberately not collected; coverage is therefore incomplete.
- No announcement archive or complete revision history was established. Expanded safe-harbor terms and other incorporated documents remain unreviewed.
- Logged-out review; summaries omit inventories and procedures. Live terms prevail; this record grants no authorization.
Sources and provenance
- Dutch Lottery Vulnerability Disclosure Program policy Nederlandse Loterij / Intigriti · reviewed 2026-10-03
- Intigriti Researcher Terms & Conditions Intigriti · reviewed 2026-10-03
- Published Intigriti asset table Nederlandse Loterij · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.