Scope of this privacy document for Kenya users

The operator collects personal data to provide and secure services in Kenya under the Data Protection Act, 2019 and guidance by the Office of the Data Protection Commissioner.

Data that may be collected:

• Identity details: full name, date of birth, national ID or passport, KRA PIN where required
• Contact details: mobile number, email, address
• Account and verification data: login details, security credentials, KYC documents, responsible gaming settings
• Transaction information: deposits, withdrawals, payment references, mobile money or bank details
• Usage and device data: IP address, browser type, app identifiers, log files, approximate location, online activity on the websites
• Communications: support tickets, call recordings where lawful, in-platform messages

Why the information is collected:

• To create and manage a user account and deliver gaming and betting services
• To verify identity and age, meet KYC and AML/CFT obligations, and prevent fraud
• To process payments and resolve billing issues
• To provide support and maintain service quality

Technical and organisational protection measures:

• Encryption in transit and at rest, TLS for data in motion
• Strict access controls, role-based permissions, and audit logs
• Data minimisation, pseudonymisation where appropriate, and secure backups
• Vendor due diligence and data processing agreements
• Staff training and incident response procedures

User rights under Kenya law:

• Right to be informed about collection and use
• Right to access personal data and request a copy
• Right to correction of inaccurate information
• Right to deletion where lawful grounds apply
• Right to object or restrict certain processing
• Right to lodge a complaint with the ODPC

The company aims to keep information accurate and up to date and applies retention periods aligned to legal obligations under Kenya regulations and gaming rules.

Personal data is used only for lawful, specific, and explicit purposes, and processing is conducted in a transparent manner.

Core uses:

• Account setup, identity checks, and responsible gambling measures
• Processing deposits and withdrawals through authorised payment providers
• Operating online services, troubleshooting, and improving user experience
• Preventing, detecting, and investigating fraud or misuse
• Meeting legal, tax, AML/CFT, and regulatory reporting duties
• Analytics for service performance and security monitoring
• Marketing communications where consent is given, and preference management

Legal bases for processing include consent, performance of a contract, compliance with legal obligations under Kenya law, and legitimate interests such as platform security and service improvement.

Users may exercise their rights through account settings or by contacting the support team. A request may require identity verification. The operator aims to respond within 30 days, subject to statutory timelines.

Requests that can be made:

• Access: get a copy of personal data and information on processing
• Correction: update inaccurate or incomplete details
• Deletion: request erasure where no lawful basis requires retention
• Restriction or objection: limit certain processing where permitted by law

Procedure:

• Submit a request via the privacy contact channel or in-account tools
• Provide identification and any details needed to locate the records
• The company will confirm receipt and address the request within legal timeframes

By using the service, the user consents to security checks, KYC validation, and processing of payment information by authorised payment providers for transactions and fraud prevention.

The services are intended for persons aged 18 and above, in line with the Betting, Lotteries and Gaming Act and licensing requirements in Kenya. The operator cannot confirm age without suitable documents and may request proof at any time.

If a parent or guardian believes a minor has provided personal information, a request can be made for immediate deletion. The account will be closed and related data removed where legally permitted.

Personal data may be stored or processed outside Kenya where service providers or group companies operate. Use of the websites and services signifies consent to such international transfers.

Safeguards applied:

• Contractual protections and confidentiality undertakings for all processors
• Limiting access to the minimum information needed for the service
• Security standards equivalent to those applied in Kenya

Partners are required to protect information and use it only for the agreed purposes.

A disclaimer in this policy clarifies the scope of obligations and the limits permitted by law. Acceptance of this policy through a tick-box, electronic acceptance, or continued use constitutes agreement to that disclaimer.

Nothing in this policy limits statutory rights under the Data Protection Act, 2019 or any mandatory consumer protection law in Kenya. If any term conflicts with law, the legal requirement prevails.

Cookies are small text files placed on a device to store information for a set period. The platform uses cookies for statistics, behaviour analysis, personalisation, security, and to improve site performance.

Key points:

• Types: essential, analytics, preference, and advertising cookies
• Retention: up to 1 year unless a shorter period is needed for the purpose
• Control: browser settings can block or delete cookies, and consent tools manage non-essential cookies

Blocking some cookies may affect certain services and features.

Use of the services signifies full acceptance of this privacy policy. The most recent version published on the websites prevails over any prior version.

The operator may update this document to reflect changes to processing or law. Material changes will be highlighted by updating the effective date and posting a notice on the site.

Personal data may be shared in limited cases:

• Where required by law, court order, or a regulator
• To prevent or investigate fraud, resolve disputes, or enforce agreements
• To payment providers, KYC and AML/CFT vendors, hosting and security partners, analytics tools, and customer support platforms

A current list or category description of processors is available on the site or on request. If a new category of third party is introduced and not listed, the company will inform users of the purpose and scope before or at the time of sharing. Providing information for these services is treated as consent, subject to legal bases under Kenya law.

All third parties must keep information confidential and process it only under written instructions.

The site may contain links to external websites or apps that operate under their own privacy rules. The operator is not responsible for how those platforms collect or use personal information.

Users should review privacy notices on any external site before providing data. Caution is advised when leaving the platform to access third-party services.