Overview of how personal information is handled

Paripesa acts as the data controller for personal information provided on this website and related services.

Data we collect

• Identification and contact information: name, date of birth, address, phone, email.
• Account details: username, preferences, responsible gaming settings, communication choices.
• Verification records: KYC documents such as ID, proof of address, and checks to satisfy Nigeria requirements.
• Transaction information: deposits, withdrawals, wagers, payment method tokens, and receipts.
• Technical information: device data, IP address, log files, browser type, approximate location and session activity.
• Communications: chats, emails, calls, and support tickets for service and compliance.

Why we collect it

• To register and manage accounts, provide online services, and process transactions.
• To verify identity and age, prevent fraud, and meet AML/CFT obligations under Nigeria law.
• To support responsible gaming measures and handle user requests.
• To maintain service security, monitor performance, and improve the website.

Security measures

• Encryption in transit and at rest, TLS, strong cipher suites, and hardened configurations.
• Access controls, multi-factor authentication, least-privilege policies, and log monitoring.
• Network protections, vulnerability management, and regular security reviews.
• Payment security aligned to PCI DSS through certified payment providers.
• Staff training, background checks where appropriate, and vetted third-party processors.

Your rights

• Access, correction, deletion, restriction, objection, and portability of personal information.
• Withdraw consent at any time for processing based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission.
• Expect a response to requests within one month, subject to lawful extensions when necessary.

Compliance

• Processing follows the Nigeria Data Protection Act 2023 and the NDPR 2019 and its framework.
• Gaming operations comply with regulators including the National Lottery Regulatory Commission and applicable state authorities.
• Record-keeping aligns to anti-money laundering legislation and Central Bank of Nigeria directives.

Data retention

Account and transaction information is retained for as long as needed to provide services and meet legal obligations, typically five to seven years after account closure for compliance purposes.

We process personal data for the purposes below, using lawful, fair, and transparent methods.

• Service delivery: create and manage accounts, verify eligibility, process payments, settle bets, and provide customer support.
• Security and integrity: prevent fraud, manage risk, conduct security checks, and enforce terms.
• Compliance: age and identity verification, anti-money laundering checks, tax and regulatory reporting.
• Improvement: analyse performance, diagnose issues, and enhance features and user experience.
• Personalisation: remember preferences and settings for the website and mobile access.
• Communications: send service messages and, where permitted, optional marketing that users can control.

Legal bases for processing

• Consent for optional features such as marketing or certain cookies.
• Contract necessity to provide requested services.
• Legal obligation to meet Nigeria regulatory requirements.
• Legitimate interests such as security, fraud prevention, and service improvement, balanced against user rights.

We do not sell personal information.

Users can access and update most account information in profile settings. A data rights request can be submitted through the in-account support centre or the Contact Us page. Identity verification may be required before changes or disclosures.

Process and timelines

• Access: receive a copy of personal information and an explanation of processing.
• Correction: request updates to inaccurate or incomplete records.
• Deletion: request removal of information that is no longer needed, subject to legal retention.
• Response time: usually within one month. A reasonable fee may apply only for excessive or repetitive requests.

Limits

• Certain records must be kept to meet legal, regulatory, tax, and anti-fraud obligations.
• Historical logs may be retained for security and dispute resolution.

By using this service, users consent to security screening, identity checks, and processing of payment information by authorised payment providers to complete transactions and verify compliance.

This website is intended for persons aged 18 years and above, in line with Nigeria gambling laws. The operator cannot confirm a user’s age without suitable documents during verification. If a minor’s account or data is identified, the account will be closed and personal information will be deleted as permitted by law. A parent or guardian can request deletion by contacting support; limited records may be retained where the law requires.

Personal information may be stored or processed in other countries where service partners operate, including payment processors, identity verification vendors, and technology providers. Using the website and services indicates consent to such international transfers.

Safeguards

• Contracts that impose confidentiality, security, and privacy obligations on partners.
• Transfer mechanisms recognised under Nigeria data protection rules and guidance from the Nigeria Data Protection Commission.
• Regular due diligence and oversight to ensure that partner processing remains lawful and secure.

All partners are required to maintain confidentiality and protect personal information.

This Privacy Policy sets rules for the collection, use, and disclosure of personal information. A disclaimer may adjust the scope or effect of certain rules where allowed by law. The policy and any applicable disclaimer apply once a user accepts the policy through signature, online acceptance, or accession while using the services. Where this document conflicts with mandatory law, the law prevails, and statutory rights remain unaffected.

Cookies are small files placed on a device to store settings and recognise a browser. These tools help the website function and support statistics, behaviour analysis, personalisation, and overall site improvement.

How cookies are used

• Essential cookies: enable login, account security, and transactions.
• Analytics: measure traffic and performance to improve services.
• Preference: remember settings such as language and display.
• Advertising: deliver relevant information where permitted by consent.

Controls and retention

• Users can manage preferences through browser settings and the cookie banner.
• Non-essential cookies are stored for up to 1 year unless removed earlier by the user.

Using this website signifies full acceptance of this Privacy Policy and any updates posted here. The current version on this page overrides any earlier versions. Continued use of the services after changes are posted indicates agreement to the revised document.

Personal information may be shared in the situations below:

• To comply with law, court orders, requests from regulators, or to enforce agreements.
• To process payments, perform KYC checks, deliver customer support, and provide technology services.
• To manage disputes, detect fraud, and protect the security of the services.

A list or description of key categories of recipients is provided on the website. Where a specific third party is not listed, users will be informed of the purpose and scope of sharing as required.

Providing personal information constitutes consent to share it for the purposes described, subject to applicable law.

Third parties may process data under their own privacy notices, and users should review those documents.

The website may include links to other websites or services that are operated by third parties. Those websites have their own privacy policies and practices. The operator is not responsible for how external sites collect, use, or protect personal information. Users should review the privacy notices on any external site before providing information.