Privacy Notice

We process the phone number you provide, encrypted phone data and a keyed hash, order and M-Pesa transaction references, amount and status, nominee/category/competition selection, timestamps, network address, device and rate-limit signals, fraud-review records, support requests, and administrator audit events.

We use this data to initiate and reconcile payments, credit votes once, prevent fraud and duplicate processing, operate competitions, respond to support and rights requests, keep financial and security records, and comply with law. The legal basis depends on the activity and may include performing your agreement, legal obligations, legitimate interests in secure service operation, and consent where required.

Necessary data may be shared with M-Pesa/Safaricom and payment partners, hosting/database/cache providers, professional advisers, competent authorities, or competition operators where required for these purposes. Public results do not expose your phone number. Cross-border processing must use a lawful safeguard.

Operational, fraud, payment, tax, dispute and audit records are retained only for documented legal, accounting, security and limitation periods, then deleted or irreversibly de-identified where feasible. A verified deletion request may be limited where retention is legally required or necessary to establish or defend a legal claim.

You may ask to be informed, access data, object to processing, correct false or misleading data, delete data where applicable, or receive portable data where the law provides. We verify identity before disclosure. You may also complain to Kenya's Office of the Data Protection Commissioner.

See the Terms and Conditions and Competition Rules.