MojaBet Casino Privacy Policy — How We Protect Your Data in Nigeria
Last Updated: 1 July 2026 | Data Controller: Medium Rare N.V. | Platform: mojabetcasino.africa
At MojaBet Casino, we take the privacy and security of every Nigerian player seriously. This Privacy Policy explains how Medium Rare N.V., the operator behind mojabetcasino.africa, collects, processes, stores, and protects your personal information when you use our platform. Whether you are placing a bet on the Super Eagles, spinning slots, or withdrawing your winnings to your GTBank account, we want you to fully understand your data rights and how we handle your information. Please read this document carefully before registering or continuing to use our services.
Create Your Secure MojaBet Account

Data Controller Information
Who Is Responsible for Your Data
The data controller responsible for processing your personal information in connection with mojabetcasino.africa is Medium Rare N.V. This company holds the operating license and is legally accountable for all data handling activities associated with the MojaBet Casino platform. Medium Rare N.V. determines the purposes and means of processing personal data collected through our website, mobile application, and all related services.
Company Registration Details
| Detail | Information |
|---|---|
| Company Name | Medium Rare N.V. |
| Platform | mojabetcasino.africa |
| Brand Name | MojaBet Casino |
| Regulatory Body (Nigeria) | National Lottery Regulatory Commission (NLRC) |
| Privacy Contact Email | privacy@mojabetcasino.africa |
| Support Contact | support@mojabetcasino.africa |
Applicable Jurisdiction
This Privacy Policy applies to all users accessing mojabetcasino.africa from Nigeria and any other jurisdiction where our services are available. For Nigerian players, data processing activities are conducted in compliance with applicable Nigerian data protection laws, including the Nigeria Data Protection Regulation (NDPR) issued by the National Information Technology Development Agency (NITDA), as well as international best practices for data security and privacy. By using our platform, you acknowledge that you have read and agree to the terms set out in this Privacy Policy.
Personal Data We Collect
Registration and Identity Information
When you create an account on mojabetcasino.africa, we collect specific personal details that are necessary to verify your identity, comply with anti-money laundering requirements, and provide you with a personalised gaming experience. The information collected at registration includes your full legal name, date of birth, gender, nationality, residential address in Nigeria, email address, and phone number. You may also be required to provide government-issued identification documents such as a National Identity Number (NIN), driver’s licence, or international passport for Know Your Customer (KYC) verification purposes.
Financial and Transaction Data
To process deposits and withdrawals, we collect financial information relevant to your chosen payment method. This includes your bank account details for transfers via GTBank, Access Bank, or Zenith Bank, your wallet information if you use OPay or PalmPay, and your USDT wallet address if you choose crypto transactions via Binance P2P or direct TRC20 transfer. We also record your transaction history, including deposit amounts, withdrawal requests, bonus redemptions, and betting activity. This data is essential for fraud prevention, regulatory compliance, and accurate financial reporting.
Technical and Device Data
We automatically collect certain technical information when you access our platform, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. We also record your session activity such as pages visited, time spent on each page, games played, bets placed, and interactions with our interface. This technical data helps us improve our platform performance, identify suspicious activity, and ensure a seamless experience whether you are accessing MojaBet from Lagos, Abuja, Port Harcourt, or anywhere else in Nigeria.
| Data Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Name, DOB, NIN, address | Registration form / KYC |
| Contact Data | Email, phone number | Registration form |
| Financial Data | Bank details, USDT wallet | Payment processing |
| Technical Data | IP address, device info | Automated collection |
| Usage Data | Games played, bets placed | Platform analytics |
| Cookie Data | Session tokens, preferences | Browser cookies |
Why We Collect Your Data
Account Registration and Service Delivery
The primary reason we collect your personal data is to create and manage your MojaBet Casino account, process your transactions, and deliver the services you have requested. Without collecting your name, email, phone number, and financial details, we would be unable to register your account, process deposits via Flutterwave or Paystack, or send withdrawals to your Nigerian bank account. Your data is essential to fulfilling our contractual obligations to you as a registered player on mojabetcasino.africa.
Regulatory Compliance and Security
As a licensed gaming operator regulated by the National Lottery Regulatory Commission (NLRC) in Nigeria, Medium Rare N.V. is legally obligated to verify the identity of all players, prevent underage gambling, detect and prevent money laundering, and report suspicious transactions to relevant authorities. Your identity and financial data are collected and processed specifically to meet these legal obligations. We conduct KYC checks and ongoing transaction monitoring to ensure our platform remains safe, secure, and compliant with all applicable Nigerian gaming regulations.
Platform Improvement and Personalisation
We use your usage data and browsing behaviour to improve our website performance, personalise your gaming experience, and develop new features that Nigerian players will enjoy. For example, if our data shows that many players in Nigeria enjoy NPFL betting and Aviator games, we can prioritise improving those features. We also use data analytics to identify technical issues, optimise loading speeds on mobile devices, and test new promotional offers like our 100% welcome bonus up to ₦100,000 with promo code MJ100.
Marketing and Communications
With your consent, we may use your contact information to send you promotional emails, SMS notifications, and push notifications about new bonuses, game launches, and special offers relevant to Nigerian players. You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by updating your communication preferences in your account settings. Note that opting out of marketing communications does not affect the delivery of essential service-related notifications such as withdrawal confirmations and security alerts.
Legal Basis for Processing
Contractual Necessity
Much of our data processing is necessary to perform the contract we have with you when you register an account on mojabetcasino.africa. Processing your registration details, verifying your identity, handling deposits and withdrawals via Flutterwave, Paystack, or bank transfers, and maintaining your account records are all actions required to deliver the services you have signed up for. Without this processing, we simply cannot provide you with access to our casino and sports betting platform.
Legal Obligation
As a regulated gaming operator, we are subject to various legal and regulatory requirements that necessitate the collection and retention of certain data. These include anti-money laundering (AML) laws, counter-terrorism financing (CTF) regulations, and NLRC licensing requirements. We process your identity and financial data to comply with these obligations, regardless of whether you provide separate consent for this processing. Compliance with Nigerian law and our licensing conditions is a mandatory basis for certain types of data processing we carry out.
Legitimate Interests
In some cases, we process your data on the basis of our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include preventing fraud and cheating on our platform, detecting and investigating suspicious betting patterns, improving our services based on user behaviour analytics, ensuring the security and integrity of our systems, and managing our business operations effectively. We always carry out a careful balancing test before relying on this legal basis for processing.
Consent
Where we rely on your consent to process your personal data, such as for sending marketing communications or placing non-essential cookies on your device, we will always ask for your explicit agreement before doing so. You have the right to withdraw your consent at any time, and doing so will not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications or cookies, please update your preferences in your account settings or contact us at privacy@mojabetcasino.africa.
Third-Party Data Sharing
Payment Processors and Financial Partners
To process your deposits and withdrawals, we share necessary financial data with our payment processing partners. These include Flutterwave and Paystack for card and bank transfer transactions, Nigerian commercial banks including GTBank, Access Bank, and Zenith Bank for direct bank transfers, and cryptocurrency processors for USDT transactions via TRC20. We also share relevant data with OPay and PalmPay for mobile wallet transactions. These partners receive only the minimum data necessary to complete your transactions and are contractually bound to handle your information securely and in accordance with applicable data protection laws.
Regulatory and Law Enforcement Authorities
We are legally required to share certain information with regulatory and law enforcement authorities under specific circumstances. This includes sharing player identity and transaction data with the National Lottery Regulatory Commission (NLRC) as required by our operating license, reporting suspicious transactions to the Nigerian Financial Intelligence Unit (NFIU) as required under anti-money laundering regulations, and responding to lawful requests from Nigerian law enforcement agencies, courts, or other government authorities. We will always seek to verify the legality of such requests before disclosing your data.
Technology and Service Providers
We work with carefully selected third-party technology providers to deliver our platform services. These include game software providers whose titles appear in our casino lobby, cloud hosting and infrastructure providers who store platform data securely, customer support software providers who power our live chat system, email marketing platforms for delivering promotional communications, and analytics providers such as Google Analytics who help us understand platform usage patterns. All third-party service providers are contractually obligated to process your data only on our instructions and to maintain appropriate security standards.
Data Sharing Principles
- We never sell your personal data to third parties for their own marketing purposes
- We share data only on a need-to-know basis, limited to what is strictly necessary
- All third-party processors are bound by data processing agreements
- We conduct due diligence on all partners before sharing any player data
- International data transfers are protected by appropriate safeguards
- We maintain a register of all third parties who process data on our behalf
Data Retention Period
Active Account Data
While your MojaBet Casino account remains active, we retain all personal data associated with your account for as long as necessary to provide you with our services and comply with our legal obligations. This includes your registration details, KYC documents, transaction history, gaming records, and communication history. We regularly review and update the data we hold to ensure it remains accurate and relevant to the services we are providing to you.
Retention After Account Closure
When you close your account or request the deletion of your data, we do not immediately erase all information associated with your account. Certain categories of data must be retained for specific periods to comply with legal and regulatory requirements. The table below sets out our standard data retention periods following account closure or cessation of the relevant activity.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Identity and KYC Documents | 5 years after account closure | AML regulatory requirement |
| Financial Transaction Records | 5 years after transaction | Tax and AML compliance |
| Betting and Gaming History | 3 years after account closure | Dispute resolution, NLRC requirements |
| Customer Support Communications | 2 years after last interaction | Dispute resolution |
| Marketing Consent Records | 3 years after consent withdrawal | Legal proof of consent |
| Cookie and Analytics Data | Up to 24 months | Platform improvement |
Secure Deletion Procedures
When data reaches the end of its retention period, we ensure it is securely deleted or anonymised in a manner that prevents reconstruction or identification. Our data deletion procedures follow industry best practices and are applied consistently across all systems and backup storage. If you have requested deletion of your data and believe we are retaining it beyond the applicable retention period without legal justification, please contact our privacy team at privacy@mojabetcasino.africa and we will investigate your request promptly.
Your Rights as a Data Subject

Right of Access
You have the right to request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). Upon receiving your request, we will provide you with a comprehensive summary of the personal data we process, the purposes for which it is being processed, the categories of data involved, any third parties with whom your data has been shared, and how long we intend to retain your data. We will respond to Subject Access Requests within 30 days of receipt. There is no charge for submitting a SAR, although we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
Right to Rectification and Erasure
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain information directly through your account settings on mojabetcasino.africa. For changes that cannot be made through your account settings, such as corrections to KYC documents, please contact our support team. You also have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected, you withdraw consent on which processing is based, or you object to processing and there are no overriding legitimate grounds for us to continue.
Right to Data Portability and Restriction
Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another data controller where technically feasible. You also have the right to request that we restrict the processing of your data in certain circumstances, such as when you contest the accuracy of the data, when processing is unlawful but you oppose erasure, or when you have objected to processing and we are verifying whether our legitimate grounds override yours.
How to Exercise Your Rights
-
Step 1: Prepare Your Request
Identify clearly which right you wish to exercise and gather any relevant information, such as your registered email address and account username, to help us locate your data quickly.
-
Step 2: Submit Your Request
Send your data rights request to privacy@mojabetcasino.africa with the subject line “Data Rights Request.” Include your full name, registered email address, account ID, and a clear description of the right you wish to exercise.
-
Step 3: Identity Verification
To protect your privacy and prevent unauthorised access to your data, we may ask you to verify your identity before processing your request. This typically involves confirming details associated with your registered account.
-
Step 4: Receive Our Response
We will acknowledge your request within 5 business days and provide a full response within 30 days. Complex requests may take up to 90 days, in which case we will notify you of the extension and the reason for it.
How We Secure Your Data
Technical Security Measures
Medium Rare N.V. implements a comprehensive range of technical security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocol with a minimum of 256-bit encryption. Our platform is protected by enterprise-grade firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation infrastructure. Sensitive data such as passwords are stored using strong cryptographic hashing algorithms, meaning that even our own staff cannot access your plain-text password.
Organisational Security Measures
Beyond technical controls, we maintain strict organisational policies to ensure your data is handled responsibly. Access to player data is granted on a strict need-to-know basis, with role-based access controls ensuring that staff members can only access the data required to perform their specific job functions. All staff with access to personal data receive mandatory data protection training and are bound by confidentiality obligations. We conduct regular internal security audits and work with independent security specialists to conduct penetration testing and vulnerability assessments of our systems and infrastructure.
Incident Response and Breach Notification
Despite our best efforts, no digital system can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we have established incident response procedures to contain the breach, assess its severity, and notify affected individuals and relevant authorities as required by law. We will notify you of any breach affecting your data without undue delay if the breach is likely to result in a high risk to your rights and freedoms. Notifications will be sent to the email address registered on your account and will include details of the breach, the data affected, and the steps you can take to protect yourself.
| Security Measure | Details |
|---|---|
| Data Encryption | 256-bit TLS encryption for all data in transit |
| Password Security | Cryptographic hashing — no plain-text storage |
| Access Controls | Role-based access with least-privilege principle |
| Fraud Detection | Automated transaction monitoring and anomaly detection |
| Security Audits | Regular internal and independent third-party assessments |
| DDoS Protection | Enterprise-grade mitigation infrastructure |
| Backup Procedures | Encrypted offsite backups with regular testing |
Contact Us About Privacy
Privacy Enquiries and Data Rights Requests
If you have any questions, concerns, or complaints about how we handle your personal data, or if you wish to exercise any of your data rights, you can contact our dedicated privacy team directly. We are committed to responding to all privacy-related enquiries promptly and transparently. Our privacy team is available Monday to Friday during business hours and will acknowledge your message within 5 business days.
| Contact Method | Details |
|---|---|
| Privacy Email | privacy@mojabetcasino.africa |
| Support Email | support@mojabetcasino.africa |
| Live Chat | Available 24/7 on mojabetcasino.africa |
| Data Controller | Medium Rare N.V. |
| Response Time | Acknowledgement within 5 business days; full response within 30 days |
Complaints to Regulatory Authorities
If you are not satisfied with our response to your privacy enquiry or believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the relevant regulatory authority. In Nigeria, the primary data protection supervisory authority is the National Information Technology Development Agency (NITDA), which oversees compliance with the Nigeria Data Protection Regulation (NDPR). You may contact NITDA through their official website at nitda.gov.ng. You also retain the right to seek judicial remedies through the Nigerian court system if you believe your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. When we make material changes to this policy, we will notify registered players by email, display a prominent notice on mojabetcasino.africa, and update the “Last Updated” date at the top of this document. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Continued use of our platform after any changes to this policy constitutes your acceptance of the updated terms. For a full history of changes, you may contact our privacy team at privacy@mojabetcasino.africa. You can also review our related policies by visiting our Terms and Conditions, Responsible Gambling page, and License Information page.
For more information about registering your account securely or making deposits and withdrawals, please visit our Registration Page, Payment Methods guide, and Withdrawal information page.
Frequently Asked Questions — MojaBet Privacy Policy
What personal information does MojaBet collect when I register in Nigeria?
When you register on mojabetcasino.africa from Nigeria, we collect your full legal name, date of birth, email address, phone number, and residential address. For KYC verification, you may also be required to submit a government-issued ID such as your National Identity Number (NIN), driver’s licence, or international passport. Financial details such as your bank account information or USDT wallet address are collected when you make deposits or request withdrawals.
Does MojaBet sell my personal data to third parties?
No. MojaBet Casino and its operator Medium Rare N.V. do not sell your personal data to any third parties for their own commercial or marketing purposes. We share data only with payment processors such as Flutterwave, Paystack, GTBank, Access Bank, Zenith Bank, OPay, and PalmPay to process your transactions, and with regulatory authorities as required by Nigerian law. All third-party data processors are bound by strict data processing agreements.
How can I request deletion of my personal data?
You can submit a data deletion request by sending an email to privacy@mojabetcasino.africa with the subject line “Data Deletion Request.” Please include your full name, registered email address, and account ID. Note that we may be legally required to retain certain categories of data for up
