Privacy Policy
Last updated: 2 May 2026. This policy explains how we collect, use, and protect your personal data under the Nigeria Data Protection Act 2023.
1. Who We Are
DOXNPLAY Ltd ("we", "us", "our") operates the DOXNPLAY prediction platform at doxnplay.com. We are the data controller for personal data collected through the Platform under the Nigeria Data Protection Act 2023 (NDPA). For privacy-related enquiries, contact our Data Protection Officer at privacy@doxnplay.com.
2. Data We Collect
We collect the following categories of personal data: (a) Identity data — name, username, date of birth; (b) Contact data — email address, phone number; (c) Financial data — bank account details, crypto wallet addresses, transaction history; (d) Technical data — IP address, browser type, device identifiers, session logs; (e) Profile data — preferences, prediction history, market activity; (f) Verification data — government-issued ID documents and selfie images collected during KYC verification; (g) Communications data — support messages, dispute evidence, and feedback submitted through the Platform. We also collect aggregated, anonymised analytics data which cannot be used to identify you.
3. How We Use Your Data
We use your personal data to: (a) create and manage your account; (b) process deposits, withdrawals, and payouts; (c) verify your identity and comply with KYC and AML obligations under Nigerian law; (d) resolve disputes and verify market outcomes; (e) send transactional and service notifications; (f) detect, investigate, and prevent fraud, abuse, and prohibited conduct; (g) improve the Platform through usage analytics; (h) comply with our legal and regulatory obligations. We do not use your data for automated profiling that produces significant legal effects without human review.
4. Legal Basis for Processing
We process your personal data under the following legal bases as defined under the NDPA 2023: (a) Contract — processing necessary to deliver our services to you; (b) Legitimate interests — fraud prevention, platform security, abuse detection, and service analytics; (c) Legal obligation — KYC, AML, financial record-keeping, and regulatory reporting requirements; (d) Consent — for optional marketing communications, where you have explicitly opted in. You may withdraw consent for marketing at any time without affecting other processing.
5. Data Sharing
We do not sell your personal data to third parties. We may share your data with: (a) Payment processors (Paystack and crypto network providers) solely to execute your transactions; (b) Identity verification service providers for KYC compliance; (c) Regulatory and law enforcement authorities where required by Nigerian law or court order; (d) Cloud infrastructure and hosting providers who act as our data processors under binding data processing agreements. All third-party processors are contractually prohibited from using your data for their own purposes. We will notify you of any material changes to our list of processors that affect your data.
6. International Data Transfers
DOXNPLAY uses cloud infrastructure providers (including Vercel and Neon) whose servers may be located outside Nigeria. Where your personal data is transferred outside Nigeria, we ensure appropriate safeguards are in place in accordance with the NDPA 2023, including contractual obligations that require recipient organisations to protect your data to at least the standard required under Nigerian law. By using the Platform, you acknowledge and consent to this transfer where necessary for the delivery of our services. For questions about specific transfer mechanisms, contact privacy@doxnplay.com.
7. Cookies & Tracking
We use essential cookies for session management and authentication — these are required for the Platform to function and cannot be disabled. We use analytics cookies (with your consent) to understand how the Platform is used and to improve it. You can manage non-essential cookie preferences through your browser settings. Disabling non-essential cookies does not affect core Platform functionality. We do not use cross-site tracking for advertising purposes.
8. Data Retention
We retain your account data for the duration of your relationship with us and for up to 5 years after account closure to comply with legal and regulatory obligations. Transaction records, KYC data, and financial logs are retained for 7 years in line with Nigerian financial and AML regulations. You may request erasure of data not subject to mandatory legal retention requirements, and we will action such requests within 30 days.
9. Your Rights Under the NDPA 2023
As a data subject under the Nigeria Data Protection Act 2023, you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate or incomplete data; (c) request erasure of data (subject to legal retention obligations); (d) restrict or object to processing in certain circumstances; (e) data portability — receive your data in a structured, machine-readable format; (f) withdraw consent at any time for consent-based processing; (g) lodge a complaint with the Nigeria Data Protection Commission (NDPC). To exercise any of these rights, contact privacy@doxnplay.com. We will respond within 30 days. Some rights may be limited where we have a legal obligation to retain or process data.
10. International Users
DOXNPLAY is open to users globally and we are committed to protecting your personal data regardless of where you are located. Your data is processed in accordance with this Privacy Policy and the Nigeria Data Protection Act 2023, which provides strong, comprehensive privacy protections. Users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with their own data protection frameworks (such as GDPR, UK GDPR, or CCPA) are welcome on the Platform. If you have rights under your local privacy law that go beyond what is described here — such as specific GDPR rights — please contact privacy@doxnplay.com and we will handle your request in good faith and respond within 30 days. Our goal is to give every user, wherever they are, meaningful control over their data.
11. Security
We implement industry-standard security measures including: TLS encryption for all data in transit, encryption for sensitive data at rest, regular security assessments, multi-factor authentication for administrative access, and access controls limited to authorised personnel on a need-to-know basis. Despite these measures, no internet-based system is completely secure. If you suspect a security vulnerability, please report it responsibly to security@doxnplay.com. We commit to acknowledging reports within 72 hours.
12. Children's Privacy
DOXNPLAY is strictly for persons aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account or provided us their data, please contact privacy@doxnplay.com immediately and we will investigate and take appropriate action, including erasure of the data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform at least 14 days before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
14. Contact & Complaints
For privacy-related enquiries or to exercise your data rights, contact our Data Protection Officer at privacy@doxnplay.com. If you are unsatisfied with our response to your request or complaint, you have the right to escalate to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng. Response time: we aim to respond to all privacy requests within 30 days.