Privacy Policy

1. Sisi ni Nani

This policy explains what personal data SHINDIVO collects, why we collect it, how long we keep it, and what rights you have over it.

The data controller is Shop and Deliver Limited, of Mayfair Business Centre, operator of SHINDIVO under Gambling Regulatory Authority of Kenya licence numbers BK-00011111 and PG-0001110.

We process personal data in accordance with the Data Protection Act, 2019 and with regulation 96 of the Gambling Control (Conduct of Gambling Operations) Regulations, 2026, which requires that data be collected and processed only for purposes directly related to the operation of the gambling business.

You can reach us about any matter in this policy through the contact details on our Contact page ([email protected]).

Kifungu hiki hakijakamilika: mwendeshaji bado hajatoa maelezo yanayohitajika. (numarInregistrare)

2. Data Tunayokusanya

Identity data: your full name, date of birth, national identity card or passport number, photograph of your identity document, and a photograph of you where we need to confirm the document is yours.

Contact data: mobile telephone number, email address and postal or physical address where you provide one.

Account and financial data: your username, the mobile money or bank details you register for deposits and withdrawals, your transaction history, your balance, and any bonus or promotional entitlements.

Betting and gaming data: the bets you place, the games you play, stakes, outcomes, settlement records and the times at which you play.

Technical data: your IP address, device and browser characteristics, and location information used to confirm you are in a jurisdiction where we may lawfully serve you.

Responsible gambling data: the limits you set, reality check settings, self-assessment results, self-exclusion requests and any record relating to them.

Correspondence: messages you send to support, complaints, and recordings or transcripts of calls and chats where these are made.

3. Kwa Nini Tunaitumia

To operate your account: to register you, hold your balance, accept bets, settle them, and pay winnings. This is necessary to perform our contract with you.

To verify your identity, age and location. This is a legal obligation on us and a condition of our licence; we cannot let you play without it.

To meet anti-money-laundering obligations: customer due diligence, transaction monitoring, and reporting to the Authority and to the Financial Reporting Centre where the law requires.

To meet tax and record-keeping obligations, including the statutory deductions that apply to gambling transactions in Kenya and the records our licence requires us to keep.

To protect the platform and other players: detecting fraud, collusion, bonus abuse, multiple accounts and interference with our systems. This is necessary for our legitimate interests and for compliance.

To protect you: operating responsible gambling tools, acting on the signs of harmful play, and enforcing self-exclusion against the national register.

To provide support and to handle complaints, including keeping a record of complaints and their outcomes as our licence requires.

To send you marketing about our products. We do this only with your prior consent, as the regulations require, and you may withdraw that consent at any time without affecting your account.

4. Vidakuzi na Teknolojia Zinazofanana

We use cookies and similar technologies to keep you signed in, to remember your bet slip and preferences, and to keep the platform secure.

Strictly necessary cookies make the platform work. Without them you cannot sign in or place a bet, so these cannot be switched off from within the platform.

Analytics cookies tell us how the platform is used so that we can fix what is slow or confusing. We use this information in aggregate.

Where we use cookies that are not strictly necessary, we ask for your consent first and you may change your choice at any time.

You can delete or block cookies in your browser settings. If you block strictly necessary cookies, parts of the platform will stop working.

5. Tunaishiriki na Nani

Payment providers licensed by the Central Bank of Kenya, so that deposits and withdrawals can be made. They receive only what is needed to process the payment.

Identity verification providers, who check your document and personal details against reliable and independent sources.

Game and odds providers, who need a pseudonymous account reference to run a game session or settle a bet. They do not receive your identity documents.

The Gambling Regulatory Authority of Kenya, including through the central monitoring system our platform is integrated with, and the national self-exclusion register.

The Financial Reporting Centre, the Kenya Revenue Authority, the courts, the police and other competent bodies, where the law requires or permits disclosure.

Technology suppliers who host or maintain our systems, under written terms that restrict them to processing data on our instructions.

We do not sell your personal data, and we do not share it with advertisers for their own purposes.

6. Uhamishaji Nje ya Kenya

Some of our suppliers process data outside Kenya. Where that happens, we transfer data only on the conditions the Data Protection Act allows.

Before transferring, we satisfy ourselves that the recipient provides appropriate safeguards, and we put contractual terms in place requiring them.

You may ask us which categories of recipient outside Kenya receive your data and on what basis.

7. Usiri wa Washindi

We protect the confidentiality of winners. We do not disclose the identity or personal information of a winner except with their written consent, where a written law requires it, or under a court order.

We do not use your name, image or story in advertising or publicity without your consent, and consent to one use is not consent to another.

You may decline publicity without it affecting payment of your winnings.

8. Muda Tunaohifadhi Data

Account, transaction and betting records are kept for the period the gambling regulations and the Proceeds of Crime and Anti-Money Laundering Act require, counted from the closure of the account.

Verification documents are kept for the period required by anti-money-laundering law, and then deleted.

Self-exclusion records are kept for as long as the exclusion runs and for the period afterwards that the regulations require, so that the exclusion can be enforced.

Marketing consents and preferences are kept until you withdraw consent, and a record of the withdrawal is kept so that we can honour it.

Where a record is subject to an investigation, a dispute or a legal claim, it is kept until that matter is concluded.

When a retention period ends, data is deleted or irreversibly anonymised.

9. Jinsi Tunavyoilinda

Data is transmitted over encrypted connections and payment data is processed through a gateway that meets the payment card industry data security standard.

Access to personal data is limited to staff whose role requires it, is authenticated, and is logged.

We carry out independent security audits of the platform and maintain an incident response record of breaches, downtime and fraudulent activity.

You protect your account too: keep your password and one-time codes to yourself, and tell us at once if you think someone else has used your account.

Where a breach occurs that is likely to affect your rights, we notify the Office of the Data Protection Commissioner and, where the law requires, you.

10. Haki Zako

You have the right to be informed of the use to which your personal data is put, and this policy is part of how we meet it.

You have the right to access the personal data we hold about you, and to be given a copy.

You have the right to have inaccurate or out-of-date data corrected, and incomplete data completed.

You have the right to object to processing carried out for our legitimate interests, and to withdraw consent to marketing at any time.

You have the right to ask for deletion of data we no longer have a lawful reason to hold. Data we must keep under gambling, anti-money-laundering or tax law cannot be deleted on request, and we will tell you when that is the reason.

To exercise a right, contact us ([email protected]). We verify who you are before acting, and we respond within the period the Data Protection Act allows.

If you are not satisfied with how we have handled your data, you may complain to the Office of the Data Protection Commissioner of Kenya.

Kifungu hiki hakijakamilika: mwendeshaji bado hajatoa maelezo yanayohitajika. (emailReclamatii)

11. Watoto

The platform is for adults. Nobody under eighteen may register, bet, hold an account or receive marketing from us.

We verify age before an account is activated, and we do not knowingly collect personal data from a child.

Where we discover that an account belongs to a person under eighteen, we close it, void the bets, return the deposits and delete the data we are not required to retain.

If you believe a child is using our platform, tell us and we will act on it.

12. Mabadiliko ya Sera Hii

We may update this policy. The date of the current version is shown at the top of this page.

Where a change materially affects how we use your data, we tell you before it takes effect.

Continuing to use the platform after a change takes effect means you have been informed of it; it does not replace a consent where the law requires one.