I guess you should require a bitcoin signed message for the address since many can claim that they're the winner like just what happened on your previous draw, mentioning the username isn't enough.

If not, you'll be dealing a lot of problems instead.