Privacy Policy

What we collect

Account details (name, email, phone), gameplay records (answers, scores and how long each answer took), wallet and transaction history, and the bank account details you provide for withdrawals.

Device and browser characteristics. To detect one person operating several accounts, we record technical characteristics of the device and browser you play on. These include your IP address and network, screen and language settings, the fonts installed, and characteristics of how your device renders graphics and processes audio. We also store a randomly generated identifier in your browser. These are combined into a fingerprint that helps us recognise when two accounts are being used from the same device. It does not identify you personally on its own and is never used for advertising.

Payment identity. When you deposit or withdraw, our payment provider gives us details of the instrument used: for cards, the issuing bank, the first six and last four digits and a token identifying the card; for bank transfers, the sending bank, the sender name and a partial account number. We keep these to detect the same person funding or cashing out from multiple accounts.

How we use it

To run the game and settle prizes, process deposits and withdrawals through our payment partner (Paystack), send transactional emails (via Resend), detect fraud and multi-accounting, and meet our legal obligations. Our lawful basis for the fraud-prevention processing described above is legitimate interest: operating a real-money skill platform requires us to be able to tell whether one person is playing as several. We do not sell your personal data and we do not use it for advertising.

Public information

Winners appear on our public winners wall as first name plus last initial and the amount won. You can opt out of the public feed from your account settings or by contacting support.

Sharing

Data is shared only with the processors needed to operate the service - payment providers for deposits, bank verification and payouts; email providers for transactional messages - and with authorities where the law requires it.

Security & retention

Passwords are stored as one-way hashes. Payment card details never touch our servers - they go directly to Paystack. We retain transaction records as required by financial regulations, and delete or anonymize other data when it is no longer needed.

Your rights

You may request a copy of your data, correction of inaccuracies, or deletion of your account (subject to financial records we are required to keep) by emailing help@popquizafrica.com. You may also object to the fraud-prevention processing described above, although we may then be unable to offer you paid play. PopQuizAfrica is operated from the United Kingdom and serves players in Nigeria, so this policy is written to meet both the UK GDPR and the Nigeria Data Protection Act. We respond within 30 days, and you have the right to complain to the UK Information Commissioner\u2019s Office or the Nigeria Data Protection Commission.