Privacy notice

Who we be

Na [Company name] dey run Wahala Republic. Na we dey decide how dem go use your personal data, so for Nigeria Data Protection Act 2023, na we be the data controller. If you get any question about your data, write to [email protected].

Wetin we dey collect

• Your email address and password. We dey lock the email (encrypt) and other players no go ever see am. The password na only one-way hash we dey keep, so nobody fit read am, even our staff.
• The year wey dem born you and the time wey you confirm say you don reach 18. We dey check your full date of birth for sign-up, but we no dey keep am.
• Your name for street, your state, your work, how you look, and wetin you dey do for the game: shifts, money, votes, items, evidence, messages and reports.
• Device ID: na random code wey we dey save for cookie, local storage and IndexedDB for your browser, plus scrambled fingerprint of small browser details (browser type, language, screen size, how many processor, time zone). Na only the scrambled one we dey keep, no be the details themselves.
• Scrambled version of your internet (IP) address. We dey use am small to know if na the same device.
• If you on notifications: the push address wey your browser give us and the time wey you no want make we disturb you.
• Session cookie wey dey keep you signed in, and short record of errors when something spoil.

Why we dey use am, and wetin give us right to use am

The Data Protection Act talk say make we tell you why we dey use your data and wetin give us right to use am.

• To run your account and the game wey you sign up for. Basis: the agreement between you and us.
• To make the game fair: one vote per device for each election, at most 3 accounts for one device every season, and to catch cheats, bots and accounts wey dey work together. Basis: our right interest to keep the game fair.
• To keep players safe: chat filter, reports, sanctions and the 18+ rule. Basis: our right interest to keep the game safe, and wetin the law say we must do.
• To send you email when you ask make we reset your password. We no dey send advert email. Basis: the agreement between you and us.
• To send you push notifications, only if you agree. You fit off am anytime. Basis: your consent.
• To protect our systems and repair wetin spoil. Basis: our right interest to keep the service working and safe.

We no dey sell your data. Sponsored billboards for the game, na only how many times dem show for each slot every day we dey count: no outside trackers, no profile about you, and we no dey target you with your data.

How we dey measure play

We dey count wetin happen for the game so we fit fix am and balance am: shifts, choices, money wey enter and comot, things wey people buy, trips, seat races, sign-up steps, how long you stay for one session, how fast the game load and how smooth e dey run. Every record get pseudonymous code, no be your name or account ID. The code na scramble wey dem lock with key from your player ID; na only we get the key. Basis: our right interest to run and improve the game.

These records no dey ever hold your email, your internet (IP) address, your chat messages or any device fingerprint, and dem no dey ever show who you vote for, only say vote don cast. We dey keep dem for our own Cloudflare R2 storage bucket, we no send dem to any analytics company, and we go delete dem after 24 months.

You fit off am: for the game, open Phone, then Settings, and off Share play statistics. We dey also respect your browser Do Not Track and Global Privacy Control settings.

Wetin other players dey see

Your name for street, your work, rank, state and wetin you dey show (house, motor, cloth, Clout) dey show for the game, for your public profile and for the flex board. Share card dey show wetin you choose to share. Your email no dey show anywhere.

Who else dey handle am

Some companies dey run some part of the service for us, and dem fit only use your data for dat work:

• Render: our servers. Neon: our database. Resend: to send email.
• Cloudflare: to bring the website come your phone, block attacks, the robot check for sign-up, and to keep backup and analytics record.
• Sentry: error report when something spoil.

Some of these services dey keep data outside Nigeria. When e be like dat, we dey use the protection wey the Data Protection Act talk say make we use when data dey go abroad. We go only share data with police or court if the law say we must.

How long we dey keep am

• Your account: as long as e dey open. When you delete am, your email and personal data go comot. In-game money record go remain but without your name, so the game book go still balance.
• Chat messages: 30 days. Messages wey dey inside report go stay with dat report.
• Inbox items: 30 days. Sessions: reach 30 days. Password reset link: 30 minutes, and each one dey work once.
• Device records, reports, sanctions and appeals: as long as we need dem to apply the device rules and handle appeals, then we go delete dem or remove your name.

Your rights

For the Data Protection Act, you fit ask us make we:

• give you copy of your personal data;
• correct data wey no correct;
• delete your account and personal data;
• stop or reduce how we dey use am if you no gree, or send your data give you for format wey you fit carry go another place;
• stop push notifications, if you take back your consent.

Send email to [email protected] from the address wey dey your account, and we go answer you inside 30 days. If our answer no sweet you, you fit complain give the Nigeria Data Protection Commission.

How we dey protect am

We dey encrypt connections and emails, we dey hash passwords, databases dey for private network, and staff dey sign in with two-factor and everything wey dem do dey recorded. If breach happen wey fit put your data for danger, we go tell the Nigeria Data Protection Commission inside 72 hours, and we go tell you sharp sharp.

Players wey never reach 18

Wahala Republic na for people wey don reach 18 and above. We no dey collect data from person wey never reach on purpose. If we find out say one player never reach 18, we go suspend the account sharp sharp and remove am. Use Report for the game if you think say one player never reach 18.

Cookies and browser storage

• Session cookie dey keep you signed in.
• The device ID dey for cookie, local storage and IndexedDB, for the fair play rules wey we talk for up.
• Your sign-up progress dey stay for the browser tab until you finish.
• Cloudflare robot check for sign-up fit set im own cookie. We no dey use advert or tracking cookies.

When we change dis notice

If we change dis notice, we go change the date for top. If the change concern you well well, we go tell you for the game before e start.

Contact

[Company name], the team wey dey behind Wahala Republic. Email: [email protected].