punctuation - Usage of the Oxford Comma with "and"

I was told that this sentence is correct with the usage of a comma before and after the word and. I want to correct my grammar if I am in error.

To claim a prize, send a Private Message to me stating: which prize
you won, your geographical location, and, if necessary, your address
for sending a physical prize.

Is the comma usage in this sentence correct?