Privacy policy

1Who we are

BetVibe operates betvibe.co.ke and is the data controller for the personal data described in this policy. We process personal data in line with the Kenya Data Protection Act, 2019 and applicable gambling regulations.

2Data we collect

We collect only what we need to run your account, keep the platform safe and meet our legal duties.

• Identity and contact data: name, date of birth, mobile number, and identity documents where verification is required.
• Account data: username, hashed password, verification status and account preferences.
• Financial data: deposits, withdrawals, M-Pesa transaction references, wallet balances and bonus history. We never see or store your M-Pesa PIN.
• Betting and gaming data: bets placed, stakes, game rounds, results and session activity.
• Technical data: IP address, device and browser type, operating system and approximate location derived from IP.
• Communications: support chats, emails and SMS exchanges with us.

3Why we process it

Each purpose has a lawful basis under the Data Protection Act:

• Performance of a contract: opening your account, accepting bets, processing payments and paying winnings.
• Legal obligation: age verification, anti-money-laundering checks, record keeping and regulatory reporting.
• Legitimate interests: fraud prevention, platform security, service improvement and analytics.
• Consent: marketing SMS and promotional messages, which you may withdraw at any time.
• Vital and public interest: responsible-gambling interventions and self-exclusion enforcement.

4Marketing communications

We only send promotional SMS to players who have opted in. Every promotional message includes a way to stop, and you can also ask support to remove you from marketing at any time.

Service messages — OTPs, deposit and withdrawal confirmations, bet settlement and security alerts — are part of running your account and continue regardless of marketing preferences.

5Who we share data with

We do not sell your personal data. We share it only where necessary, and under contract:

• Payment providers, including Safaricom M-Pesa, to process deposits and payouts.
• Game and odds suppliers, to deliver the games and markets you play.
• Identity verification and fraud-prevention partners.
• SMS and communications providers, to deliver OTPs and alerts.
• Regulators, law enforcement and courts where we are legally required to disclose.

6International transfers

Some of our suppliers process data outside Kenya. Where that happens we require appropriate safeguards — adequacy, contractual protections or equivalent measures — so your data keeps a comparable level of protection.

7How long we keep it

Account, transaction and betting records are retained for at least seven years after account closure, as required by gambling and anti-money-laundering rules. Marketing preferences are retained until you withdraw consent. Technical logs are kept for a shorter period unless needed for an investigation.

8How we protect it

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Passwords are hashed and never stored in readable form. Access to player data is limited to staff who need it, and privileged actions are logged and audited.

No system is perfectly secure. Never share your password or one-time codes — BetVibe staff will never ask for them.

9Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you logged in and to secure your session. We also use limited analytics to understand how the site is used and to fix problems. You can clear or block cookies in your browser, but essential ones are required for the site to work.

10Your rights

Subject to legal limits, you may:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data we no longer have a lawful reason to keep.
• Object to or restrict certain processing, including direct marketing.
• Request your data in a portable format.
• Lodge a complaint with the Office of the Data Protection Commissioner.

11Children

Our services are strictly for adults aged 18 and over. We do not knowingly collect data from minors, and any account found to belong to a minor is closed immediately with stakes returned and winnings voided.

12Contact us

For any privacy question or to exercise your rights, contact our support team through the live chat or WhatsApp links in the footer, or use the helpline number listed there. We respond to data requests within the statutory timeframe.