Privacy Policy

1. Introduction

Sofabet Kenya ("we", "us", "our") is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your data when you use the sofabet-kenya.com website and its associated services. By registering an account or using our services, you agree to the terms of this Privacy Policy.

We comply with the Kenya Data Protection Act 2019 and all applicable data protection regulations.

2. Information We Collect

We collect the following categories of personal information:

• Registration data: Full name, email address, mobile phone number, date of birth, and copies of identity documents required for Know Your Customer (KYC) verification.
• Financial data: M-Pesa payment details, transaction history, deposit and withdrawal records.
• Usage data: Pages visited, bets placed, time on site, device information, IP address, browser type, and referral source.
• Communications data: Emails and messages sent to our customer support team.
• Cookies and tracking data: Session and persistent cookies used for site functionality and analytics (see Section 7).

3. How We Use Your Information

We use your personal data for the following purposes:

• To provide, operate, and maintain your Sofabet Kenya account
• To process deposits, bets, withdrawals, and bonus claims
• To verify your identity and comply with BCLB regulatory requirements
• To detect and prevent fraud, money laundering, and underage gambling
• To send you account notifications, transaction confirmations, and security alerts
• To provide customer support when you contact us
• To send promotional communications if you have opted in to receive them
• To improve our website, products and services through analytics
• To comply with Kenyan legal obligations and regulatory reporting requirements

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds: (a) Performance of a contract — to provide the services you have registered for; (b) Legal obligation — to comply with BCLB, anti-money laundering (AML), and tax regulations; (c) Legitimate interests — to prevent fraud and improve our services; (d) Consent — for marketing communications, which you may withdraw at any time.

5. Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following limited circumstances:

• Payment processors: M-Pesa / Safaricom for payment processing.
• Regulatory bodies: The BCLB and relevant Kenyan government authorities when required by law.
• Service providers: Trusted third-party technology providers operating under strict data processing agreements.
• Legal requirements: Courts, law enforcement, or regulatory agencies when legally compelled.

6. Data Retention

We retain your personal data for the duration of your account and for a minimum of 7 years after account closure, as required by BCLB and Kenyan AML regulations. Transaction records are retained for 10 years.

7. Cookies

We use the following types of cookies: Essential cookies (required for site functionality), Analytics cookies (Google Analytics anonymised usage data), and Marketing cookies (if you opted in during registration). You may manage cookie preferences via your browser settings. Disabling essential cookies may impair site functionality.

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion (subject to regulatory retention obligations)
• Right to restrict processing — in certain circumstances
• Right to data portability — receive your data in a structured format
• Right to object — to processing based on legitimate interests
• Right to withdraw consent — for marketing at any time

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days.

9. Security

We implement industry-standard security measures including SSL/TLS encryption for all data transmissions, AES-256 encryption for stored data, regular penetration testing, restricted employee data access controls, and two-factor authentication for administrative systems.

10. International Transfers

Some of our service providers may process data outside Kenya. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses governing data protection.

11. Minors

Our services are strictly limited to persons 18 years of age and over. We do not knowingly collect personal data from minors. If we discover an account belongs to a minor, it will be immediately suspended and all funds returned.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified to registered users via email at least 14 days before taking effect. The current version is always published at sofabet-kenya.com/privacy-policy/.

13. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer:
Email: [email protected]
Post: Data Protection Officer, Sofabet Kenya, Westlands, Nairobi, Kenya
Phone: +254 700 SOFABET