Privacy Policy

Mostbet Nigeria (operated by the licensed entity holding a Curaçao eGaming license) is committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access and use our website at mostbet.ng, our mobile applications, and related services. Please read this policy carefully. If you do not agree with our practices, do not use our services.

Data Controller and Contact Information

The operator is the data controller responsible for your personal data. For inquiries regarding this Privacy Policy, data subject rights requests, or to contact our Data Protection Officer, please reach out via the following channels: Email: [email protected]; Live Chat: available 24/7 on mostbet.ng; Telegram, Phone, and other support channels listed on our website. We will respond to all data-related inquiries within 30 days of receipt.

Data We Collect

We collect personal data in several categories to provide, operate, and improve our services:

Identity Data: Full name, date of birth, nationality, gender, and identification document numbers (passport, national ID).
Contact Data: Email address, phone number, postal address, and preferred communication channels.
Financial Data: Bank account details, payment card information, cryptocurrency wallet addresses, transaction history, and account balance.
Transaction Data: Deposits, withdrawals, bets placed, game results, winnings, and wagering activity.
Technical Data: IP address, device type, operating system, browser type, device identifiers, mobile app version, and hardware specifications.
Usage Data: Pages visited, features accessed, time spent on the platform, betting patterns, game preferences, and interaction logs.
KYC/AML Data: Proof of address (utility bills, bank statements), source of funds documentation, beneficial ownership information, and politically exposed person (PEP) screening results.
Marketing Data: Preferences for promotional communications, consent records, and engagement with marketing materials.
Communications Data: Records of support tickets, live chat conversations, emails, and other correspondence with our team.
Biometric Data: If you use biometric login features (fingerprint or facial recognition), we process the biometric template stored on your device; we do not store biometric data on our servers.

Data Sources

We obtain your personal data from the following sources:

Directly from You: Information you provide during registration, account setup, profile updates, deposit/withdrawal requests, and customer support interactions.
Cookies and Tracking Technologies: Cookies, web beacons, and similar technologies placed on your device when you visit our website or use our mobile app.
Third-Party Service Providers: Payment processors, KYC/AML verification providers, credit reference agencies, fraud prevention services, and identity verification partners.
Affiliate and Marketing Partners: Referral data, promotional campaign attribution, and marketing partner networks.
Regulatory and Law Enforcement: Information shared by government agencies, financial intelligence units, and licensing authorities in accordance with legal obligations.

Purposes of Processing and Legal Bases

We process your personal data for the following purposes, relying on these legal bases:

Purpose: Legal Basis
Account creation, management, and service delivery: Performance of contract with you
Identity verification, KYC, and AML compliance: Legal obligation (anti-money laundering and counter-terrorism financing regulations)
Payment processing and financial transactions: Performance of contract and legal obligation
Fraud detection, prevention, and account security: Legitimate interest in protecting the platform and users
Responsible gambling monitoring and enforcement of limits: Legal obligation and legitimate interest in player protection
Marketing communications and promotional offers: Your consent (where required by law)
Platform improvement, analytics, and personalization: Legitimate interest in optimizing services
Regulatory reporting and compliance: Legal obligation
Customer support and dispute resolution: Performance of contract and legitimate interest
Enforcement of terms and conditions: Legitimate interest and legal obligation

We may disclose your personal data to the following categories of recipients:

Payment Service Providers: Banks, payment processors, e-wallet operators (OPay, Moniepoint, Skrill, Neteller), and cryptocurrency exchanges to process deposits and withdrawals.
KYC/AML Partners: Third-party verification providers, credit reference agencies, and identity verification services to comply with anti-money laundering regulations.
Fraud Prevention Services: Specialized vendors that help detect and prevent fraudulent activity and account abuse.
Regulatory and Law Enforcement Authorities: Gaming regulators, financial intelligence units, tax authorities, and law enforcement agencies as required by law.
Group Companies: Other entities within the operator's corporate group for administrative, technical, and compliance purposes.
Affiliate and Marketing Partners: Referral networks and marketing partners (who receive only aggregated or anonymized data unless you have consented to direct marketing).
IT Service Providers and Contractors: Cloud hosting providers, software developers, data analytics firms, and customer support vendors who process data on our behalf under data processing agreements.
Professional Advisors: Lawyers, accountants, and auditors engaged for legal, compliance, or business purposes.

International Data Transfers

Your personal data may be transferred to, stored in, and processed in countries outside Nigeria, including countries that may not have data protection laws equivalent to those in Nigeria. When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by relevant data protection authorities, adequacy decisions, and binding corporate rules. By using our services, you consent to the transfer of your data to countries outside Nigeria as described in this policy. If you do not consent to such transfers, please do not use our services.

Data Retention

We retain your personal data for the following periods:

Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure to comply with anti-money laundering and regulatory retention requirements.
Transaction Data: Retained for a minimum of 5 years after the transaction date for audit, compliance, and dispute resolution purposes.
KYC/AML Documentation: Retained for a minimum of 5 years after account closure as required by financial regulations.
Marketing Data: Retained until you withdraw consent or request deletion, or for the duration of our business relationship.
Technical and Usage Data: Typically retained for 12–24 months for analytics and security purposes, unless longer retention is required by law.
Communications Data: Retained for 3 years for customer service and dispute resolution purposes.
Cookies: Retained according to the cookie type and your preferences (see Cookie Policy).

After the applicable retention period expires, we securely delete or anonymize your data, except where we are required by law to retain it longer.

Your Data Subject Rights

Subject to applicable data protection laws, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you, including the purposes of processing, categories of recipients, and retention periods.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data, subject to legal and contractual obligations (e.g., AML retention requirements).
Right to Restrict Processing: You may request that we limit the processing of your data to storage only, pending resolution of a dispute or verification of accuracy.
Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format and have it transferred to another service provider.
Right to Object: You may object to processing based on legitimate interest or direct marketing. We will cease such processing unless we have compelling legal grounds.
Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
Right to Lodge a Complaint: You have the right to file a complaint with the relevant data protection authority if you believe your rights have been violated.

To exercise any of these rights, please contact us at [email protected] or via live chat on mostbet.ng. We will respond to your request within 30 days (or as required by applicable law). We may request proof of identity to verify your request.

Automated Decision-Making

We do not make decisions about you based solely on automated processing (including profiling) that produce legal or similarly significant effects on you. However, we may use automated systems for fraud detection, account verification, and responsible gambling monitoring. If an automated decision significantly affects you (e.g., account suspension), you have the right to request human review and to contest the decision.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. Cookies may be essential (required for platform functionality), analytical (to understand how you use our services), or marketing-related (to show you relevant advertisements). For detailed information about the cookies we use, your choices regarding cookies, and how to manage cookie preferences, please refer to our Cookie Policy. By continuing to use mostbet.ng, you consent to our use of cookies as described in the Cookie Policy.

Data Security

We implement comprehensive organizational, technical, and physical security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Data in transit is protected using SSL/TLS encryption; sensitive data at rest is encrypted using industry-standard algorithms.
Access Controls: Personal data access is restricted to authorized personnel on a need-to-know basis, with role-based access controls and authentication mechanisms.
Firewalls and Intrusion Detection: Network security systems monitor and prevent unauthorized access attempts.
Regular Security Audits: We conduct periodic security assessments, penetration testing, and vulnerability scans.
Data Minimization: We collect only the personal data necessary for the specified purposes.
Employee Training: Staff handling personal data receive regular data protection and security training.
Incident Response: We maintain procedures to detect, investigate, and respond to data breaches, and we notify affected individuals and authorities as required by law.

While we strive to protect your data, no security system is impenetrable. We cannot guarantee absolute security, and you use our services at your own risk. If you suspect a data breach or security incident, please contact us immediately at [email protected].

Minors and Age Restrictions

Our services are intended only for individuals aged 18 years and older. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will immediately delete such data and terminate the account. If you believe a minor's data has been collected, please notify us at [email protected] immediately.

Third-Party Links and Services

Our website and mobile applications may contain links to third-party websites, payment processors, and external services. This Privacy Policy applies only to mostbet.ng and our services. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external services before providing your personal data.

Data Protection Authority Complaints

If you believe your data protection rights have been violated or if you have concerns about our data processing practices, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. While we encourage you to contact us first to resolve any issues, you are not required to do so before filing a complaint with a supervisory authority.

Policy Updates and Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on mostbet.ng and updating the 'Last Updated' date below. Your continued use of our services after such changes constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this policy periodically to stay informed of how we protect your data.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us. Our support team is available 24/7 via live chat on mostbet.ng, email at [email protected], Telegram, phone, or other channels listed on our website. We are committed to addressing your privacy concerns promptly and transparently.

Last Updated: [Date]. This Privacy Policy is effective as of the date listed above and applies to all users of Mostbet Nigeria.