Naija Game Arena · Effective Date: 5 April 2026 · Last Updated: 10 September 2026
Naija Game Arena ("we," "us," "our") is operated by MZ Technologies LTD, a company registered in Nigeria with registration number RC 9449995.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Naija Game Arena website, mobile application, and related services (the "Service").
We are committed to protecting your privacy in accordance with the Nigeria Data Protection Regulation (NDPR) 2019, the Nigeria Data Protection Act (NDPA) 2023, and other applicable data protection laws.
By using the Service, you consent to the collection and use of your information as described in this Policy.
| Data | When Collected | Purpose |
|---|---|---|
| Google or Apple account info (such as name, email, and provider identifier) | SSO account creation or sign-in | Authentication, account setup |
| Username | Account creation | Public display name, referral code |
| Phone number | SMS sign-in, verification, or recovery | Authentication, account recovery, withdrawal auth |
| Bank account details | Withdrawal requests | Processing payouts |
| Payment information | Deposits | Processed by Paystack — we do not store card details |
| Data | How | Purpose |
|---|---|---|
| Device info (type, OS, browser) | Automatic | Optimisation, debugging |
| IP address | Automatic | Security, fraud prevention |
| Game activity (moves, outcomes) | During gameplay | State management, fairness, disputes |
| Transaction history | During financial activity | Ledger, compliance, support |
| Session data | Automatic | Security, analytics, attribution, support diagnostics |
| Referral activity | Referral features | Programme management |
Account management, authentication, gameplay, matchmaking, transaction processing, and wallet management.
Fraud detection, cheating prevention, Terms enforcement, dispute investigation, and suspicious activity monitoring.
Storing cryptographic seeds for provably fair system, enabling independent outcome verification, maintaining game logs.
Transactional notifications and promotional communications where permitted. A specific account-wide campaign may be enabled by default and will say so clearly. You can stop marketing email at any time in your notification settings or with the unsubscribe link included in every marketing email.
Product analytics, session replay, and aggregated trend analysis for game balance, matchmaking, UX, platform performance, and support diagnostics.
| Basis | Applies To |
|---|---|
| Consent or legitimate interests, where permitted | Google or Apple SSO, phone verification, promotional communications |
| Contract | Transactions, wallet management, service delivery |
| Legitimate interest | Fraud prevention, security, analytics |
| Legal obligation | KYC, financial records, law enforcement requests |
| Provider | Data Shared | Purpose |
|---|---|---|
| Identity assertion and profile fields | Account sign-in | |
| Apple (Sign in with Apple) | Identity assertion and profile fields you choose to share | Account sign-in |
| Termii | Phone number and SMS delivery metadata | One-time-code delivery |
| Paystack | Name, email, payment details | Deposit/withdrawal processing |
| Resend | Eligible email address, message content, and delivery metadata | Marketing-email delivery, bounce/complaint handling, and unsubscribe enforcement |
| Google Analytics | Usage analytics, anonymous campaign parameters, backend user ID (when signed in) | Funnel analytics, attribution, lifecycle reporting |
| Microsoft Clarity | Usage analytics, masked session replay data, internal user ID, username (when signed in) | Product analytics, UX improvement, support troubleshooting |
| Hetzner | Application and database data (hosted) | Primary compute and database infrastructure |
| Firebase / Google Cloud | Authentication, realtime game/session data, and push tokens | Authentication, realtime transport, hosting, and push notifications |
| Upstash | Session data | Session management (Redis) |
Paystack processes payment information directly. We do not receive or store your full card number, CVV, or bank PIN.
Google Analytics helps us understand acquisition, funnels, and lifecycle conversion. We do not send usernames, phone numbers, email addresses, OTP codes, wallet balances, bank details, or auth tokens to Google Analytics.
Microsoft Clarity helps us understand how players use the product and diagnose issues. We do not use Clarity for advertising, and we do not send OTP codes, wallet balances, phone numbers, email addresses, bank details, or auth tokens to Clarity.
Resend receives an eligible address and the content and delivery metadata needed to send marketing email. Resend stores account and email metadata in the United States even when email is sent from another region. We record preference and suppression state ourselves and stop future marketing email immediately after unsubscribe, hard bounce, or complaint.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
| Data Type | Retention | Reason |
|---|---|---|
| Account info | Account + 2 years | Compliance, disputes |
| Game history & logs | 2 years | Fairness, disputes |
| Transaction records | 7 years | Financial regulations |
| Provably fair seeds | 2 years | Player verification |
| Session logs | 90 days | Security |
| Aggregated analytics | Indefinitely | Not personally identifiable |
After retention, data is permanently deleted or irreversibly anonymised.
Under the NDPR and NDPA, you have the right to:
Contact support@naijagamearena.com to exercise these rights. We respond within 30 days.
In the event of a data breach, we will notify you and the NDPC within 72 hours per the NDPR.
The Service is not intended for persons under 18. We do not knowingly collect data from minors. Accounts found to belong to minors will be deleted.
| Type | Purpose | Duration |
|---|---|---|
| Session cookie | Authentication | 30 days |
| Preference storage | Sound/mute settings | Persistent |
| Analytics cookies / similar technologies | Google Analytics attribution/funnel measurement and Microsoft Clarity session replay/support diagnostics | Session and provider-managed persistent windows |
We do not use third-party advertising cookies. We do use Google Analytics and Microsoft Clarity analytics cookies and similar technologies for product analytics, attribution, session replay, and support diagnostics.
Primary application and database data is hosted in Germany, while retained Firebase services operate in European regions. Providers may process limited service data in other jurisdictions: in particular, Resend stores email metadata, logs, and API records in the United States. We use these providers only for the purposes described above and require appropriate contractual and security safeguards for international transfers.
Material changes notified 14 days in advance via email or in-app notification.
Data Protection Officer: Data Protection Officer
Email: support@naijagamearena.com
Website: https://naijagamearena.com
Address: No. 7A Anyaeji Street, Ugbowo, Benin City, Edo State, Nigeria
MZ Technologies LTD — All rights reserved.