1. Who We Are
mCHEZA Kenya (“the Platform”, “we”, “our”) is operated under licence from the Betting Control & Licensing Board of Kenya. Registered office: Nairobi, Kenya.
2. Data We Collect
Data you provide directly
- Identity — name, date of birth, national ID/passport number.
- Contact — mobile number, email, physical address.
- Payment — M-Pesa MSISDN, card details (tokenised), e-wallet IDs.
- Verification docs — selfies, proof-of-address.
Data collected automatically
- Device info — model, OS, browser type.
- Log data — IP address, timestamps, pages visited.
- Gameplay records — bets, wins/losses, session duration.
- Cookies & analytics tags (see § 6).
3. How Your Data Is Used
- Account creation, authentication, and KYC checks.
- Processing deposits, withdrawals, and bonus credits.
- Fraud detection and anti-money-laundering compliance.
- Personalised offers (only if you opt-in to marketing).
- Service-quality analytics and troubleshooting.
4. Legal Basis for Processing
We rely on:
- Contractual necessity — to deliver betting services you request.
- Regulatory obligations — Kenyan gambling, AML, and taxation rules.
- Legitimate interest — security, fraud-prevention, service improvement.
- Consent — for direct marketing or non-essential cookies.
5. When We Share Your Data
- Payment providers (M-Pesa, card processors) to handle transactions.
- Identity-verification partners (credit bureaus, ID-tech) to confirm age and legitimacy.
- Regulators or law-enforcement when legally required.
- Analytics vendors (aggregated, pseudonymised only).
- No data is ever sold to third-party advertisers.
6. Cookies & Trackers
Cookies are small text files stored on your device to remember preferences and improve performance.
| Type | Purpose | Lifespan |
|---|---|---|
| Essential | Login authentication, bet-slip persistence | Session |
| Analytics | Site usage statistics (Google Analytics) | Up to 2 years |
| Marketing (opt-in) | Remember email/SMS consent | 6 months |
You can disable non-essential cookies any time in your account settings.
7. Data Security
- 256-bit SSL encryption for all traffic.
- Data stored on ISO-27001 certified servers in Kenya.
- Two-factor authentication available for every account.
- Access to personal data is role-based and logged.
8. Data Retention
Betting and KYC records are retained for a minimum of seven years as required by Kenyan regulation. Marketing consents are reviewed annually. Data is deleted or anonymised once legal retention periods expire.
9. Your Rights
- Access — request a copy of personal data we hold.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion where legal retention doesn’t apply.
- Object — opt-out of marketing anytime.
- Data portability — receive data in machine-readable format.
Contact our Data-Protection Officer at privacy@mcheza-kenya.com to exercise any right.
10. Policy Updates
Updates are posted on this page and, where material, communicated via SMS/email. Continued use of the platform indicates acceptance of the revised policy.
11. Contact Us
- Email: privacy@mcheza-kenya.com
- Helpline: + 254 730 000 000 555
- Mail: P.O. Box 12345-00100, Nairobi, Kenya