Privacy Policy — Wasafi Bet Tanzania

1. Data we collect

We collect the following categories of personal data when you register and use the platform:

• Identity data: full name, date of birth, national ID or passport number
• Contact data: phone number, email address, city of residence
• Financial data: M-Pesa number, payment method details, transaction history
• Technical data: IP address, device type, browser type, session logs
• Usage data: pages visited, bets placed, games played, session duration
• KYC documents: national ID scan and selfie photograph submitted for identity verification

We do not collect or store full card numbers. Card payment processing is handled by PCI-DSS certified third-party processors.

2. How we use your data

Your data is used for the following purposes:

• Registering and maintaining your account
• Processing deposits, bets and withdrawals
• Verifying your identity and age as required by GBT Licence No. SBI000000028
• Detecting and preventing fraud, money laundering and underage gambling
• Providing customer support via email and live chat
• Sending account notifications — deposit confirmations, withdrawal status, security alerts
• Sending promotional communications only if you have opted in
• Complying with legal obligations under the Gaming Act, 2003 and Tanzanian law

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal effects without human review.

3. Data sharing and retention

We share data only with the following categories of recipients where necessary:

• Payment processors: M-Pesa (Vodacom), Tigo Pesa, Airtel Money, HaloPesa, Visa, Mastercard — for transaction processing only
• KYC providers: identity verification service providers operating under confidentiality agreements
• Regulatory authorities: the Gaming Board of Tanzania when required by law or licence conditions
• Game providers: Spribe, Evolution, Pragmatic Play and others — anonymised session data only

Account data is retained for a minimum of 5 years after account closure as required by Tanzanian anti-money laundering regulations. KYC documents are retained for the same period. Technical logs are deleted after 12 months. If you opt out of marketing communications, your preference is recorded and honoured within 5 business days.

4. Your rights and contact

As a data subject under Tanzanian law and in line with our licence obligations, you have the right to request access to your personal data, correction of inaccurate data, deletion of data we are not legally required to retain, and restriction of processing in specific circumstances. To exercise any right, contact us at privacy@wasafibet-tanzania.com. We respond to all data requests within 30 days. For complaints about data handling, you may also contact the Gaming Board of Tanzania at gamingboard.go.tz.