Online Interactions

We collect personal data when you engage with us digitally, including:

• Through our Platform: When you access or use our website and mobile applications, including account registration, betting activity, deposits, withdrawals, and customer support interactions.
• Through Communications: When you contact us via email, live chat, SMS, or other customer support channels.
• Through Marketing Engagements: When you subscribe to promotional communications, participate in surveys, promotions, competitions, or loyalty programmes.
• Through Social Media: When you interact with our official social media pages, including participation in campaigns, promotions, or customer engagement initiatives.
• Through Cookies and Tracking Technologies: When you browse our Platform, we collect data via cookies and similar technologies to enhance user experience, personalise content, and analyse usage patterns.

Offline Interactions

We may also collect personal data through offline channels, including:

• Customer Support Engagements: When you interact with our customer service representatives via telephone or in-person support channels.
• Events and Promotions: When you participate in physical promotional events, activations, or brand campaigns organised or sponsored by us.
• Verification Processes: During in-person or assisted identity verification procedures, where applicable.

Third-Party Sources

We may obtain personal data from third-party sources to support our operations and comply with legal obligations, including:

• Identity Verification and KYC Providers: To verify your identity and prevent fraud.
• Payment Service Providers: To process deposits, withdrawals, and detect suspicious transactions.
• Fraud Prevention and AML Databases: To comply with Anti-Money Laundering and counter-terrorism financing obligations.
• Publicly Available Sources: Including sanctions lists, regulatory databases, and other publicly accessible records.
• Marketing and Analytics Partners: Where you have consented to such sharing or where permitted by law.

Device and Technical Data Collection

We and our service providers automatically collect certain technical information when you use the Platform, including:

• Device identifiers such as IP address and, where applicable, Media Access Control (MAC) address;
• Device type, manufacturer, model, and operating system;
• Browser type, version, language, and settings;
• Screen resolution and system configuration; and
• Application usage data, session logs, and performance metrics.

This information is used to ensure the proper functioning, security, and optimisation of the Platform, as well as to detect and prevent fraudulent or unauthorised activity.

Provision of Third-Party Data

Where you provide personal data relating to another individual, for example, as part of a referral programme, you represent and warrant that you have obtained the necessary consent or legal authority to disclose such data to us and to permit its processing in accordance with this Privacy Notice.

Consequences of Non-Provision

The provision of certain personal data is necessary for us to establish and maintain your account, comply with regulatory obligations, and deliver our services. Where you fail to provide required information, we may be unable to onboard you, process transactions, or provide access to certain features of the Platform.

Providing Gaming and Betting Services

• To create and manage your account, process bets, deposits, and withdrawals.
• To verify your identity (KYC) and maintain account integrity.
• To respond to enquiries, complaints, and customer support requests.
• To send administrative communications, including updates to our terms, policies, or services.

This processing is necessary for the performance of our contract with you and to comply with legal obligations.

Marketing and Promotions

• To send you offers, bonuses, promotions, and updates relating to our services.
• To personalise marketing content and facilitate participation in campaigns, competitions, and loyalty programmes.

This is carried out based on your consent or our legitimate interests, where permitted by law. You may opt out at any time.

Platform Functionality and User Experience

• To provide and maintain Platform functionality, including secure login and account access.
• To personalise your experience and improve gameplay and interface performance.
• To communicate with you regarding your activity and service usage.

Fraud Prevention, Security, and Compliance

• To detect, investigate, and prevent fraud, money laundering, and other illegal activities.
• To monitor transactions and betting patterns for suspicious activity.
• To comply with applicable legal and regulatory obligations, including AML and responsible gaming requirements.

Business Operations and Improvement

• To conduct data analytics, audits, and performance monitoring.
• To improve and develop our Platform, products, and services.
• To assess the effectiveness of marketing campaigns and user engagement.
• To support internal governance, risk management, and compliance processes.

• Affiliates: Within our corporate group for the purposes outlined in this Notice.
• Service Providers: To trusted third parties such as payment processors, cloud providers, identity verification services, analytics providers, and customer support vendors.
• Regulatory and Law Enforcement Authorities: Where required to comply with applicable laws, regulatory obligations, or lawful requests, including AML and fraud investigations.
• Professional Advisors: Including auditors, legal advisers, and consultants for compliance and advisory purposes.
• Third Parties with Your Consent: Such as social media platforms or partners where you have agreed to such sharing.
• Business Transfers: In connection with a merger, acquisition, restructuring, or sale of assets.

We may also disclose personal data where necessary to enforce our terms, protect our rights, or safeguard users and the Platform.

• Contractual Necessity: To create and manage your account, process transactions, and provide betting services.
• Legal and Regulatory Compliance: To comply with applicable laws, including Anti-Money Laundering (AML) obligations and directives issued by the NDPC.
• Legitimate Interests: To ensure platform security, prevent fraud, conduct analytics, and improve our services, provided such interests do not override your fundamental rights.
• Consent: Where you have expressly opted in to receive marketing communications or for other specific processing activities requiring consent.

• Be processed fairly, lawfully and in a transparent manner.
• Be obtained for a specified and lawful purpose and shall not be processed in any manner incompatible with such purposes.
• Be adequate, relevant and limited to what is necessary to fulfil the purpose of processing.
• Be accurate and, where necessary, up-to-date. In the event data is inaccurate, steps should be taken to rectify or erase such data.
• Not be kept for longer than necessary for processing.
• Be processed in accordance with the data subject’s rights.
• Be kept safe from unauthorised processing, accidental loss, damage or destruction using adequate technical and organisational measures.

• Encryption: Use of Transport Layer Security (TLS/SSL) for data in transit and robust encryption protocols for data at rest.
• Access Controls: Role-based access restrictions ensuring that only authorised personnel with a legitimate business need can access personal data.
• Security Testing: Regular vulnerability assessments, penetration testing, and system monitoring to maintain platform integrity and resilience.

• Third-Party Safeguards: All service providers are subject to binding Data Processing Agreements (DPAs) and are required to implement appropriate data protection and security measures.
• Cross-Border Transfers: Where personal data is transferred outside Nigeria, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) or transfers to jurisdictions recognised as providing an adequate level of data protection, in accordance with NDPA.

Right of Access

You have the right to confirm whether we process your personal data and to access such data in a structured, commonly used, and machine-readable format. You may also request information on the purposes of processing, categories of data, and recipients or categories of recipients.

Right to Rectification

You may request the correction of inaccurate personal data and the completion of incomplete data without undue delay.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary, where consent has been withdrawn, where processing is unlawful, or where erasure is required by law.

This right is subject to our legal and regulatory retention obligations, including AML requirements.

Right to Restrict Processing

You may request restriction of processing in certain circumstances, including where you contest data accuracy, where processing is unlawful but you prefer restriction over deletion, or where data is required for legal claims.

Right to Object and Withdraw Consent

You may object to processing for direct marketing purposes, including profiling. Where processing is based on consent, you may withdraw that consent at any time without affecting prior lawful processing.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used, and machine-readable format, or request its transfer to another service provider where technically feasible.

Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions significantly affect you, unless authorised by law or necessary for contractual performance.

Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at dataprotection@247bet.ng. We will:

• Verify your identity before processing your request.
• Respond within 30 days, in accordance with NDPA.
• Respond free of charge, unless requests are manifestly unfounded or excessive.