Privacy & Data Protection Policy

1. Overview and Scope

BenueDraws ("we", "us", or "our") respects your fundamental right to privacy. This Privacy Policy outlines our standards for collecting, processing, storing, and protecting your personal information when you access our digital raffle platform.

This policy applies to all visitors, registered players, and prize recipients in accordance with the provisions of the Nigeria Data Protection Act 2023 (NDPA).

2. Personal Information We Collect

To provide digital draws and process prize payouts, we collect the following categories of information:

• Account Information: Full name, verified email address, mobile phone number, and encrypted password credentials.
• Transaction & Ticket Data: Ticket serial numbers, draw entries, purchase timestamps, payment transaction reference numbers, and winnings history.
• KYC Verification Information: Valid government identification (NIN, Voter's Card, Driver's License) and bank account details required exclusively for verifying and paying out high-value jackpot winners.
• Technical & Analytics Data: IP address, device type, browser metadata, and privacy-focused aggregate visit counts (via our built-in analytics).

3. Payment Security & Card Data

BenueDraws uses licensed, PCI-DSS Level 1 compliant payment gateways (such as Paystack and Flutterwave) to process ticket purchases.

• We never store your full debit card numbers, CVV codes, or banking PINs on our servers.
• Payment details are transmitted directly through encrypted TLS/SSL tunnels directly to the payment processor.

4. How We Use Your Information

Your data is processed strictly for the following purposes:

• Creating and maintaining your secure player account.
• Issuing and assigning unique raffle ticket numbers to your profile.
• Notifying you via SMS, email, and dashboard alerts when you win a draw.
• Disbursing verified cash prizes directly to your designated bank account.
• Maintaining the public, verifiable results ledger (with sensitive personal details masked for winner privacy).
• Detecting and preventing fraudulent entries, bot activity, and underage participation.

5. Public Results & Winner Privacy

In order to maintain public trust and regulatory transparency, winning ticket numbers and draw results are permanently recorded on our public ledger. However, to safeguard winner privacy:

• We only display the winner's first name and masked phone number (e.g., 0803***1234) on public certificates and result pages.
• Full home addresses, email addresses, and complete bank account numbers are never made public.

6. Data Storage & Security Standards

All platform data is securely stored within enterprise-grade Supabase (PostgreSQL) databases guarded by Row Level Security (RLS) policies and hosted on Cloudflare's secure edge infrastructure. Data in transit is secured using modern TLS 1.3 encryption.

7. Your Data Protection Rights

Under the Nigeria Data Protection Act (NDPA), you have the right to:

• Access: Request a copy of all personal records we hold concerning you.
• Rectification: Request correction of inaccurate or incomplete personal details.
• Erasure: Request the deletion of your account and data, subject to legal record-retention requirements for financial transactions.
• Withdraw Consent: Opt-out of non-essential marketing communications at any time.

8. Cookies and Local Storage

BenueDraws uses essential browser localStorage purely to remember your theme preference (Dark Mode / Light Mode) and maintain your secure authenticated login session. We do not use intrusive third-party cross-site tracking cookies.

9. Privacy Inquiries & Data Protection Officer

For privacy inquiries, data access requests, or questions regarding our compliance with NDPA guidelines, please contact our Data Protection desk:

Data Protection Desk — BenueDraws
Email: privacy@benuedraws.ng
Makurdi, Benue State, Nigeria.