Privacy Policy

1. Who We Are

Guza Game (“we”, “us”, “our”) is the data controller for the personal data described in this policy. We are licensed by the Betting Control and Licensing Board of Kenya (BCLB) under License Number BK 0001319 and are registered with the Office of the Data Protection Commissioner (ODPC) of Kenya.

2. Data We Collect

Information you give us

• Full name, date of birth and gender
• National ID or passport number, and a photo of the document
• Mobile number and email address
• Physical or postal address
• Selfie / liveness image used for KYC verification
• Self-exclusion preferences and deposit limits you set
• Messages you send to our support team

Information collected automatically

• Device type, operating system, browser and unique device identifiers
• IP address and approximate geolocation
• Pages visited, games played, stakes, wins, losses and session length
• Cookies and similar technologies (see Section 7)

Information from third parties

• Safaricom M-Pesa — transaction confirmations, payer mobile number and reference codes for deposits and withdrawals.
• Identity verification providers — checks against the IPRS (Integrated Population Registration Services) and credit bureaus permitted to confirm your identity.
• Game and odds providers — gameplay results and settlement data tied to your account.
• Fraud and AML screening services — including sanctions, PEP and watchlist data.

3. Why We Use Your Data

• To open, operate and secure your account
• To process deposits, withdrawals and bet settlement
• To verify your identity and age, as required by the BCLB
• To prevent fraud, money laundering and other unlawful activity
• To comply with our obligations to the Kenya Revenue Authority and other regulators
• To send transactional messages (deposit confirmations, withdrawals, security alerts)
• To offer responsible-gaming tools and act on self-exclusion requests
• To send marketing about Guza Game products, where you have opted in
• To improve the Platform, including game performance and user experience

4. Lawful Bases

We rely on the following lawful bases under the Data Protection Act, 2019:

• Contract — to deliver the betting services you have asked us for.
• Legal obligation — to meet our BCLB, AML/CFT, tax and consumer-protection obligations.
• Legitimate interest — to keep our Platform secure, prevent fraud and conduct analytics.
• Consent — for direct marketing and for non-essential cookies. You can withdraw consent at any time.

5. Sharing Your Data

We do not sell your personal data. We share it only with:

• Safaricom (M-Pesa) for payment processing;
• licensed game and sportsbook providers for the games you play;
• identity, KYC and fraud-screening providers;
• cloud hosting, SMS, email and analytics providers acting under contract on our behalf;
• the BCLB, KRA, ODPC, courts and law-enforcement agencies, where required by law.

6. International Transfers

Some of our processors operate servers outside Kenya. Where personal data is transferred out of Kenya, we put in place safeguards required by the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021, including contractual data-protection clauses and assessment of the recipient country.

7. Cookies

We use cookies and similar technologies to keep you signed in, to remember preferences, to measure how the site is used and (with your consent) to personalise marketing. You can control cookies through your browser settings. Disabling essential cookies will prevent parts of the Platform from working, including the ability to place bets.

8. How Long We Keep Your Data

We retain account and transaction records for a minimum of seven (7) years after account closure, in line with Kenyan AML and tax record-keeping requirements. Marketing preferences are kept until you opt out. Self-exclusion records are kept for the full duration of the exclusion and a reasonable period thereafter to prevent re-registration.

9. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive fields, role-based access controls and regular security testing. No system is 100% secure — please use a strong, unique password and never share your login or M-Pesa PIN.

10. Your Rights

Under the Data Protection Act, 2019 you have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion (subject to our legal retention duties);
• object to or restrict certain processing;
• withdraw consent to marketing at any time; and
• lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, email privacy@guzagame.com. We will respond within thirty (30) days.

11. Children

Our services are strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always show the current version. We will notify you of material changes by email or in-product notice.

13. Contact

Guza Game — Data Protection Officer
Nairobi, Kenya
Email: privacy@guzagame.com

See also our Terms & Conditions and our Responsible Gaming policy.