Privacy Policy

Naija Game Arena · Effective Date: 5 April 2026 · Last Updated: 5 April 2026

1. Introduction

Naija Game Arena ("we," "us," "our") is operated by MZ Technologies LTD, a company registered in Nigeria with registration number RC 9449995.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Naija Game Arena website, mobile application, and related services (the "Service").

We are committed to protecting your privacy in accordance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023, and other applicable data protection laws.

By using the Service, you consent to the collection and use of your information as described in this Policy.

2. Information We Collect

2.1. Information You Provide

Data	When Collected	Purpose
Google account info (name, email, photo)	Account creation	Authentication, account setup
Username	Account creation	Public display name, referral code
Phone number	SMS verification (future)	Account verification, withdrawal auth
Bank account details	Withdrawal requests	Processing payouts
Payment information	Deposits	Processed by Paystack — we do not store card details

2.2. Information Collected Automatically

Data	How	Purpose
Device info (type, OS, browser)	Automatic	Optimisation, debugging
IP address	Automatic	Security, fraud prevention
Game activity (moves, outcomes)	During gameplay	State management, fairness, disputes
Transaction history	During financial activity	Ledger, compliance, support
Session data	Automatic	Security, analytics
Referral activity	Referral features	Programme management

2.3. Information We Do NOT Collect

We do not store your Google password.
We do not store bank card numbers (Paystack handles this).
We do not collect precise GPS location.
We do not access your contacts, photos, or other device data.

3. How We Use Your Information

3.1. Service Delivery

Account management, authentication, gameplay, matchmaking, transaction processing, and wallet management.

3.2. Security and Integrity

Fraud detection, cheating prevention, Terms enforcement, dispute investigation, and suspicious activity monitoring.

3.3. Fairness Verification

Storing cryptographic seeds for provably fair system, enabling independent outcome verification, maintaining game logs.

3.4. Communication

Transactional notifications and promotional communications (opt-out available).

3.5. Improvement and Analytics

Aggregated, anonymised data analysis for game balance, matchmaking, UX, and platform performance.

4. Legal Basis for Processing

Basis	Applies To
Consent	Account creation, Google OAuth, promotional communications
Contract	Transactions, wallet management, service delivery
Legitimate interest	Fraud prevention, security, analytics
Legal obligation	KYC, financial records, law enforcement requests

5. Third-Party Services

Provider	Data Shared	Purpose
Google (OAuth)	Auth tokens	Account sign-in
Paystack	Name, email, payment details	Deposit/withdrawal processing
Google Cloud Platform	All data (hosted)	Infrastructure
Upstash	Session data	Session management (Redis)

Paystack processes payment information directly. We do not receive or store your full card number, CVV, or bank PIN.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

Data Type	Retention	Reason
Account info	Account + 2 years	Compliance, disputes
Game history & logs	2 years	Fairness, disputes
Transaction records	7 years	Financial regulations
Provably fair seeds	2 years	Player verification
Session logs	90 days	Security
Aggregated analytics	Indefinitely	Not personally identifiable

After retention, data is permanently deleted or irreversibly anonymised.

7. Your Rights

Under the NDPR and NDPA, you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate or incomplete data. (Username cannot be changed.)
Deletion — request account and data deletion within 30 days, subject to pending transactions and legal retention.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent — opt out of promotional communications at any time.
Object — object to certain processing (may affect service availability).
Complaint — lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Contact support@naijagamearena.com to exercise these rights. We respond within 30 days.

8. Data Security

Encryption in transit: TLS 1.2+
Encryption at rest: Google Cloud encryption for databases and backups
Access control: Restricted to authorised personnel
Session security: HTTP-only, Secure, SameSite cookies
Financial data: SERIALIZABLE isolation, double-entry bookkeeping
Infrastructure: Google Cloud Platform (SOC 2, ISO 27001)

In the event of a data breach, we will notify you and the NDPC within 72 hours per the NDPR.

9. Children's Privacy

The Service is not intended for persons under 18. We do not knowingly collect data from minors. Accounts found to belong to minors will be deleted.

10. Cookies and Similar Technologies

Type	Purpose	Duration
Session cookie	Authentication	30 days
Preference storage	Sound/mute settings	Persistent

We do not use third-party tracking, advertising, or analytics cookies.

11. International Data Transfers

Data is stored on Google Cloud Platform (europe-west1). By using the Service, you consent to transfer outside Nigeria. Google Cloud provides adequate data protection safeguards per the NDPR.

12. Changes to This Policy

Material changes notified 14 days in advance via email or in-app notification.

13. Contact Us

Data Protection Officer: Data Protection Officer

Email: support@naijagamearena.com

Website: https://naijagamearena.com

Address: No. 7A Anyaeji Street, Ugbowo, Benin City, Edo State, Nigeria