Skip to content

Legal

Privacy Policy

Last updated September 2026

What we collect, why, and what you can do about it.

1. Who is responsible

WinBiga is the data controller for information collected through WinBiga. Contact: support@winbiga.com.

2. What we collect

Account information

Your username, email address, password (stored as a one-way hash — we cannot read it), whether you were referred by another player, and your settings.

Gameplay information

Every game you play: score, when it started and ended, how long it lasted, and the outcome of our score checks. We use this to run leaderboards, pay prizes and detect cheating.

Money information

Your wallet balance and a ledger of every funding, entry fee, prize, tip and withdrawal. For withdrawals, the bank name, account number and account name you give us. Card details are handled by our payment partner and never reach our servers.

Technical information

IP address, browser and device type, and pages visited. Standard server logs are kept for security and debugging.

Messages

Anything you send through the contact form, and tip messages you write to other players.

3. Why we use it

  • To run the game, leaderboards and prizes (performance of our contract with you).
  • To process payments and withdrawals and to meet legal obligations such as fraud prevention and record-keeping.
  • To detect and prevent cheating and abuse (our legitimate interest in a fair game).
  • To send you service emails: welcome, password resets, prize and withdrawal updates. We do not send marketing email unless you opt in.
  • To answer your questions and resolve disputes.

4. What's public

Your username, best score, number of games played, top rank, recent scores and badges appear on your public profile and on leaderboards. You can make your profile private in Settings; your username still appears on leaderboards for competitions you take part in. Your balance, email, bank details and transaction history are never public.

5. Who we share it with

  • Payment partner (currently Paystack) — to process wallet funding and to verify bank accounts for withdrawals.
  • Email delivery provider — to send service emails. [Insert provider.]
  • Hosting provider — our servers and database. [Insert provider and location.]
  • Authorities — where the law requires it.

We do not sell your information.

6. Cookies

We use a session cookie to keep you signed in and a CSRF token cookie to protect forms. If you tick "Keep me signed in" a longer-lived cookie is set. Some preferences (such as game sound) are stored in your browser's local storage. We do not use advertising cookies. [Insert analytics provider if any.]

7. Security

Passwords are hashed, traffic is encrypted, balance changes are recorded in a ledger, and administrative actions on scores and money are logged. No system is perfectly secure; tell us at once if you think your account has been accessed by someone else.

8. How long we keep it

Account and gameplay data: for as long as your account is open. Money records: [X years] after the transaction, as required by financial record-keeping rules. Server logs: [X days]. When you close your account we delete or anonymise personal data that we are not required to keep.

9. Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it (subject to records we must keep), or object to particular uses. Email support@winbiga.com. You can also complain to the Nigeria Data Protection Commission.

10. Children

WinBiga is for adults aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has an account, contact us and we will close it.

11. Changes

We'll post updates here and, for significant changes, tell you by email.