Privacy policy

This policy is being finalised and may change before launch.

This policy explains what personal data we collect, why we collect it, and your rights under the Nigeria Data Protection Act 2023 (NDPA).

Data we collect

• Account details: name, email address, phone number, date of birth and state of residence.
• Identity checks for winners: government ID (such as NIN or BVN) and a selfie, collected through our verification partner.
• Transactions: tickets, payments and refunds. Card details are handled by our payment partner and never stored by us.
• Usage data: device and browser information, and how you use our site, with your consent where required.

How we use it

• To run your account and competitions, issue tickets and pay prizes (performance of a contract).
• To verify age and identity and to prevent fraud (legal obligation and legitimate interest).
• To send marketing, only where you have agreed. You can opt out at any time.

Sharing

We share data only with providers that help us run Nairalot (payments, identity verification, messaging and hosting), with regulators where the law requires it, and, with a winner's consent, publicly on our winners page. We never sell your personal data.

Storage and security

We encrypt your data in transit and identity documents at rest, limit staff access by role, and keep data only as long as the law and our purposes require.

Your rights

• Access a copy of your data, or have it corrected.
• Ask us to delete your data, where we are not required to keep it.
• Object to or restrict certain processing, and withdraw consent at any time.
• Complain to the Nigeria Data Protection Commission (NDPC).