Privacy Policy

This Privacy Policy explains how Crash Media Company Limited (PaddyWin) (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our platform.

1. Data Controller

Crash Media Company Limited (PaddyWin) is responsible for your personal data.

For any data protection inquiries: dpo@paddywin.ng

2. Personal Data We Collect

We may collect and process the following categories of personal data:

1. Identity Data: name, date of birth, identification details
2. Contact Data: phone number, email address
3. Financial Data: payment details, deposits, withdrawals, transaction history
4. Account & Activity Data: betting activity, account usage, preferences
5. Verification Data (KYC): identity verification data obtained directly or via third-party providers
6. Technical Data: IP address, device information, login activity

3. Purpose of Processing

We process your data for the following purposes:

1. Account registration and management
2. Provision of betting and gaming services
3. Payment processing and withdrawals
4. Identity verification (KYC)
5. Compliance with legal and regulatory obligations (including AML requirements)
6. Fraud detection and prevention
7. Platform performance and service improvement
8. Customer support and service communication
9. Marketing communications (where applicable)

4. Legal Basis for Processing

We process your personal data based on:

1. Contract Performance – to provide services to you
2. Legal Obligation – to comply with applicable laws and regulations
3. Legitimate Interest – to maintain platform security, prevent fraud, and improve services
4. Consent – where required (e.g. marketing communications)

5. Data Sharing

We may share your personal data with:

1. Verification providers (for KYC checks)
2. Payment processors and financial service providers
3. Platform and infrastructure providers
4. Regulatory authorities and law enforcement, where required

We do not sell your personal data.

All third parties are required to implement appropriate data protection and security measures.

6. International Transfers

Your personal data may be processed outside Nigeria where necessary for service delivery.

Where this occurs, appropriate safeguards are applied to ensure your data remains protected.

7. Data Retention

We retain your personal data only for as long as necessary for:

1. Legal and regulatory compliance (including AML obligations)
2. Operational and contractual purposes

In certain cases, data may be retained for up to 5–7 years as required by applicable regulations. Data is securely deleted or anonymized when no longer required.

8. Your Rights

You have the right to:

1. Access your personal data
2. Request correction of inaccurate data
3. Request deletion (where applicable)
4. Object to processing
5. Request restriction of processing
6. Request data portability

To exercise your rights, contact: dpo@paddywin.ng

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

1. Access controls and authentication
2. Secure storage and encryption
3. System monitoring and activity logging

10. Data Breaches

In the event of a data breach that poses a risk to your rights, we will notify:

1. The Nigeria Data Protection Commission (NDPC), where required
2. Affected users, where applicable

11. Complaints

If you have concerns about how your data is handled, you may contact us directly.

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).