WinAm Privacy Policy

WinAm (“we”, “us”) is operated by Scriptdesk Technology Limited (RC 1780013), Lagos, Nigeria. Our registered address is available on request. This policy explains what personal data we collect when you use WinAm at winam.gg, why we collect it, who we share it with, and the rights you have over it. We comply with the Nigeria Data Protection Act, 2023 (NDPA) and its regulations.

If you have any question about this policy or your data, contact us at support@winam.gg.

1. What we collect, and why

We collect only what the service needs. In plain terms:

Account data. Your email address (your sign-in credential), and where applicable your phone number and mobile network. Your chosen nickname. A timestamped record that you confirmed you are 18 or older. Why: to create and secure your account, sign you in with one-time codes, and meet our age requirement.

Gameplay data. Puzzle sessions, tickets earned, streaks, mission progress, leaderboard standing. Why: this is the game itself — scoring, draws, and prizes depend on it.

Payment data. When you buy a pass, our payment processor handles your card or bank payment; we receive and keep the transaction record (amount, pass type, status, processor reference and fee). We never see or store your card number. Why: to grant your access pass, keep honest accounts, and fund the prize pools.

Identity verification (KYC) data — only if you win a cash prize or join the affiliate programme. Your name, date of birth, and government ID number (NIN or BVN), which we verify against the official registry through our identity-verification partner; the registry’s response (registered name, date of birth, gender) is stored so we can confirm the match. We also collect your bank account details (for cash payouts), payout email, phone number and network (for airtime prizes). Why: Nigerian law and basic fraud prevention require us to know that prize money goes to a real, verified person — and to that person only. Players who never win cash and never join the affiliate programme are never asked for any of this.

Affiliate data — only if you join the affiliate programme. Your referral code, clicks on your link (a technical fingerprint of the visiting device, not the visitor’s identity), signups and sales attributed to you, your earnings and payout records. Why: to compute and pay your commissions accurately.

Technical data. IP address (used for security rate-limiting on sign-in), device/browser information sent by your browser, and server logs. One-time code delivery logs (when a code was sent and verified — never the code itself in readable form). Why: to keep accounts secure and the service running.

What we deliberately do not do: we do not sell your data; we do not run advertising or share data with advertisers; we do not collect data from anyone under 18 (the service requires an 18+ confirmation to register); we do not store card numbers; identity documents’ biometric artefacts (such as registry photos) returned by the verification service are not retained. We do not currently send marketing messages; if we ever do, we will ask for your consent first and every message will include a way to opt out.

2. Who we share data with

We share personal data only with the service providers that make WinAm work, each bound to use it solely for the service they provide us:

• Identity verification: our identity-verification partner receives the ID number, name and date of birth you submit, verifies them against the official Nigerian registry (NIMC/CBN as applicable), and returns the registry record for matching.
• Payments: Paystack — processes your pass payments and holds your card details under its own security certification; we exchange transaction references and status with them.
• Message delivery: our messaging provider delivers one-time sign-in codes to your email or phone.
• Infrastructure: our hosting and infrastructure providers store and serve the platform’s data under contractual confidentiality.
• Law and safety: we will disclose data where Nigerian law, a court order, or a competent regulator requires it, or where disclosure is necessary to investigate fraud against the platform or its players.
• Business transfer: if WinAm’s business is transferred or restructured, player data may transfer with it under this same policy; we will notify you of any such change.

We do not share your data with anyone else.

3. How long we keep data

• Account and gameplay data: for as long as your account exists.
• Transaction, payout and KYC records: retained after account closure for as long as Nigerian financial, tax and gaming regulations require, because prize and payment records are legal records.
• Technical logs and one-time-code logs: kept for a short operational window and then deleted or anonymised.
• Admin session records: automatically purged after 30 days.

When retention ends, data is deleted or irreversibly anonymised.

4. Your rights (NDPA)

Under the Nigeria Data Protection Act you have the right to: access the personal data we hold about you; correct inaccurate data; delete data we no longer have a legal basis to keep; object to or restrict certain processing; port your data in a usable format; and withdraw consent where processing is based on consent. To exercise any of these, email support@winam.gg. We will respond within the timelines the NDPA prescribes. If you are unsatisfied, you may complain to the Nigeria Data Protection Commission (NDPC) — ndpc.gov.ng · info@ndpc.gov.ng.

Note: some data cannot be deleted on request while a legal duty to retain it exists (for example, records of prizes paid to you).

5. Security

We protect your data with measures built into the platform: one-time-code sign-in (no passwords to steal); phone numbers and identifiers stored hashed where full values are not needed; masked display of sensitive values in our admin tools, with full payout details visible only to authorised operators on deliberate action; role-restricted, auditable admin access with automatic session expiry; encrypted connections throughout; and identity verification gated to the moments it is genuinely required. No system is perfectly secure, but we collect little and guard what we collect.

6. If a data breach happens

If personal data in our care is breached in a way that puts you at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware, inform affected players without undue delay, explain what happened and what we are doing about it, and take the steps needed to contain and remedy the breach.

7. Cookies

WinAm uses a single essential cookie: your session (so you stay signed in). We do not use advertising or third-party tracking cookies. Your browser can clear the cookie at any time — you will simply be signed out.

8. Children

WinAm is for adults. Registration requires confirming you are 18 or older, and prize payouts require government-ID verification, which confirms age. If we learn an account belongs to someone under 18, we will close it.

9. Changes to this policy

We may update this policy as the service evolves. The current version always lives at winam.gg/privacy with its effective date. For material changes we will notify you by email or an in-app notice before they take effect.

10. Contact

Scriptdesk Technology Limited (RC 1780013)
Lagos, Nigeria
Email: support@winam.gg