The Ballot ID could be created as an MD-5 encryption of several data: polling place, choices, time-stamp (to the millisecond) and a random number. They would ensure uniqueness. Since the MD-5 encryption is very hard to break (even if you know the algorithm) knowing just the ballot ID doesn't tell you anything about the data.