What we keep, and why

What we collect

• Account: player tag, email, WhatsApp number, password (stored only as a salted hash).
• Gameplay: your game IDs and in-game names, the lobbies you join, and the screenshots you upload as proof.
• Money: wallet ledger, Paystack references, and the bank account name and number you add for withdrawals. Card details go straight to Paystack; we never see them.
• Security: IP address, browser and device identifiers, and sign-in history, used to detect fraud, multiple accounts and account takeover.

Who sees it

• Other players see your player tag and, in lobbies you join, your game ID and name. Never your email, WhatsApp number or bank details.
• Staff see what their department needs (for example finance sees bank details for payouts). Staff access is role-limited and logged.
• Service providers process data for us: Paystack (payments), Cloudinary (screenshot storage), our email and push providers, and our hosting provider. If an image-reading check is enabled, uploaded proof images are sent to an AI provider to read the text on them.
• We disclose data when the law requires it.

How long

Ledger and payout records are kept for as long as financial record-keeping rules require. Proof screenshots and security logs are kept as long as needed to resolve disputes and fraud, then removed. You can ask us to delete your account; we will keep only what the law or an open dispute requires.

Your choices

• Turn email and push notifications on or off per type in Settings.
• Ask for a copy, correction or deletion of your data through WhatsApp support.
• Sign out of every device from your security settings.

Cookies

We use only essential cookies: your sign-in session and a device identifier used for security. No advertising cookies.