What Data We Hold (and Why We Need It)
When you register on our platform, your betting account cannot function on less than four categories of data. Each is held for a highly specific, legal, or operational reason:
| Data Category | What It Includes | Why We Hold It |
|---|---|---|
| Identity Data | Your name, date of birth, address, and the NRC or passport used to verify you. | To confirm age (18+), establish account ownership, meet mandatory KYC verification requirements, and ensure payouts reach the actual person who owns the account. |
| Payment Data | Mobile wallet numbers, card details, and a record of every deposit and withdrawal. | To process your payment transactions, reconcile the account, investigate fraud, and meet strict anti-money laundering (AML) record-keeping laws. |
| Activity Data | Bets placed, settled, cancelled, and your bonus participation history. | This is the core of your account. It also drives our responsible gambling tools: for example, a deposit limit needs a record of your past deposits to enforce it. |
| Technical Data | Device type, browser, IP address, and exact login timestamps. | To secure your account. This tells us when you login versus when an unauthorized person attempts to access your profile. |
Those are the main categories an active account runs on. Other minor data points may be processed for security, customer support, or legal compliance. Our full policy lists them comprehensively.
Your Rights Under Zambian Law
The Zambian Data Protection Act No. 3 of 2021 gives you specific, enforceable rights that are worth knowing precisely:
- Right to Access: You can ask whether your data is being processed at all and obtain a copy of it. You can be told the purpose, how long we expect to keep it, where we got it, and whether it has been disclosed to third parties.
- Right to Logic: Where a decision about you was made automatically by our systems (e.g., a bonus restriction), you can ask about the logic behind it.
- Right to Correction: You can have inaccurate data corrected and incomplete data completed.
- Right to Erasure (The “Right to be Forgotten”): You can ask for your data to be deleted where it is no longer needed for its original purpose, where you withdraw consent and no other lawful basis remains, or where other conditions in the Act apply.
- Right to Portability & Restriction: You can ask us to restrict processing, object to it, and receive your data in a secure, portable format to take elsewhere.
The Legal Reality: Why We Cannot Always Delete Your Data
We want to provide one honest qualification. Your right to erasure is limited where our processing is required by national or international law. This covers most identity and financial transaction records. Anti-money-laundering (AML) obligations do not disappear simply because a user prefers their history deleted. Furthermore, information must be kept to enforce an active Self-Exclusion block, which by design has to survive a user’s later, impulsive wish to undo it and gamble again.
How to Exercise Your Rights
To exercise any of your data rights, send a formal request through your authenticated account support chat or via our contact page, stating clearly which right you are exercising.
Security Notice: You will be asked to verify your identity first. That is not obstruction. A request to hand over a full account’s data is exactly what an identity thief impersonating you would send. Do not send identity documents through an unsecured email channel unless our support team explicitly directs you to an approved, encrypted route.
Data That Leaves Zambia (Cross-Border Transfers)
As an international operator, the full policy states that information is stored on servers according to the legislation of your state, and that third-party suppliers may be involved in technical support, transactions, and account maintenance. Payment processing runs through a separate registered financial entity.
Zambian law places strict conditions on any transfer of data out of the country: it requires user consent with approved contractual protections, a specific determination by the Minister, or direct authorisation from the Data Protection Commissioner. The Act also generally requires sensitive personal data to be stored within the Republic unless a legal exemption applies. Our specific server and encryption arrangements are set out in the full legal policy. If cross-border processing matters to your privacy preferences, we encourage you to read it in full.
Where to Complain
We are committed to resolving any privacy concerns quickly and fairly.
- You can contact us first through our official support channels. Our formal internal complaints process applies if you are not satisfied with the initial response.
- If you believe your data has been processed contrary to the Zambian Data Protection Act, you also have the legal right to lodge a complaint directly with the Office of the Data Protection Commissioner in Zambia.
Reaching out to the Commissioner is not conditional on approaching us first. This route arises purely under Zambian data-protection law and does not depend on the jurisdiction of our Curaรงao betting licence.