Privacy policy.

01The short version

• We only collect what we need to place your bets and reply to you on WhatsApp. Phone number, profile name, the messages you send, your bookmaker logins (encrypted), and a record of bets we placed for you.
• We do not sell your data. Ever. There is no advertising business behind SnapBet AI.
• Your bookmaker password is encrypted at rest using AES-256 and is only decrypted in memory when we need to log in to place your bet. We never display it back to you.
• You can delete your account and all your data at any time by sending DELETE MY DATA to the bot, or by emailing privacy@snapbet.app. We complete deletions within 30 days.
• SnapBet AI is for adults only (18+). If you are under 18, do not use this service.
• We comply with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023, and we follow Meta's WhatsApp Business Platform data-handling requirements.

02Who we are

SnapBet AI ("SnapBet", "we", "us", "our") is operated by Snapbet Technologies Ltd, a company registered in Nigeria, with its registered office in Lagos.

Under the Nigeria Data Protection Act 2023, we are the data controller for the personal data described in this policy. You can contact our data protection lead at privacy@snapbet.app.

03What we collect

We collect three buckets of information. Nothing in here is collected silently — every item below corresponds to something you actively send us, or to a message you receive from us.

From WhatsApp, when you message us

From the betting flow itself

From the technical infrastructure

04How we use it

We use your data only for the following purposes:

• To run the bot. Receive your message, understand your intent, place your bet on the bookmaker, send you the receipt.
• To reply to support questions. If you ask "where's my receipt?" we look up your recent activity and answer.
• To send transactional WhatsApp messages. Slip confirmations, expired-session notices, win/loss outcomes, one-time security codes. These are utility and authentication messages — never marketing — unless you've explicitly opted in.
• To improve the service. Find and fix bugs, measure error rates, train our intent-extraction prompts on aggregated and anonymized conversation patterns. We do not use your raw conversations to train third-party AI models.
• To prevent fraud and abuse. Detect attempted account takeovers, multi-account abuse, and fraudulent betting patterns.
• To comply with the law. Including Nigerian gambling regulation (NLRC / state gaming authorities), tax law, and lawful requests from courts or regulators.

We will not use your data for any purpose materially different from the ones above without first asking your consent.

05Legal basis (NDPR / NDPA 2023)

Under the Nigeria Data Protection Act, we rely on the following legal bases:

• Performance of a contract. We process your phone number, your bookmaker credentials, and your bet instructions because that is how we deliver the service you signed up for.
• Legitimate interests. We process logs and aggregated usage data to keep the service running, secure, and free of fraud — interests that we believe do not override your rights.
• Consent. We rely on your explicit consent for any optional marketing messages (e.g. price-drop alerts) and for storing your bookmaker password long-term so you don't have to re-enter it.
• Legal obligation. Where Nigerian regulators or courts require us to retain or disclose information.

You can withdraw consent at any time by replying STOP on WhatsApp (mutes marketing) or FORGET MY LOGIN (deletes your stored bookmaker credentials).

06Who we share with

We share data only with the parties below, only for the reasons listed, and only the data they need to do their job.

07Your bookmaker credentials

This is the most sensitive thing we hold, and we treat it accordingly.

• Encryption at rest. Your bookmaker password is encrypted using AES-256-GCM with a key held outside the application database. The encryption key is never written to the database.
• Decryption only in memory, only at use. We decrypt your password in process memory at the exact moment we are logging into the bookmaker on your behalf, and we discard the cleartext immediately after.
• Never logged. Our server logs explicitly redact credential fields. If a debug log accidentally captured a credential, that is a security incident and we treat it as such.
• Never displayed back to you. Even you, the account owner, cannot read your stored password back from us. If you forget it, reset it on the bookmaker's site and re-enter it with us.
• Deletable on demand. Reply FORGET MY LOGIN on WhatsApp and we wipe your bookmaker credentials within seconds. The rest of your account is unaffected.

If you only want SnapBet to place bets via booking codes (no login required), you do not have to give us a password at all. The browse and build a slip flows require a login; the load a code and stake flow does not.

08WhatsApp & Meta data

SnapBet AI is built on top of Meta's WhatsApp Business Platform. Some specifics that follow from that:

• End-to-end encryption. WhatsApp encrypts messages in transit between your device and ours. Once a message reaches our server (decrypted), we process it under this policy.
• Meta sees the metadata. Phone numbers, timestamps, message types, and delivery statuses are visible to Meta as the platform operator. We do not control that.
• 24-hour customer service window. Meta's policy lets us reply freely for 24 hours after your last inbound message. Outside that window, we can only send pre-approved template messages — typically slip confirmations, login codes, and outcome notices.
• Marketing messages require opt-in. We will not send you promotional templates (e.g. "boosted odds on this match") unless you have explicitly opted in. Reply STOP at any time to mute these. Utility and authentication messages tied to bets you placed will continue, because they are part of the service you asked for.
• Click-to-WhatsApp ads. If you arrived via a Facebook or Instagram ad, Meta may share with us the fact that you clicked from a specific ad campaign, so we know which campaign you came from.

09How long we keep it

10Your rights

Under the Nigeria Data Protection Act 2023 you have the following rights. We honor each one of them, free of charge, within 30 days of your request.

• Right to access. Ask us for a copy of the personal data we hold about you.
• Right to correction. Ask us to fix anything inaccurate.
• Right to deletion. Ask us to delete your account and your data — see the next section for how.
• Right to portability. Ask us to export your data in a machine-readable format (JSON).
• Right to object. Object to processing based on legitimate interests, or to marketing.
• Right to withdraw consent. Where we rely on consent (marketing, long-term credential storage), you can withdraw at any time.
• Right to lodge a complaint. With the Nigeria Data Protection Commission if you believe we have mishandled your data.

To exercise any of these, message the bot or email privacy@snapbet.app from the phone number registered with your account. We may ask one verification question to confirm it is you.

11Deleting your data

You can delete your SnapBet AI account and all the personal data we hold about you, at any time, in two ways:

• On WhatsApp: reply DELETE MY DATA. The bot will confirm and process the deletion.
• By email: send a message from the address on file (or the registered phone number, via WhatsApp) to privacy@snapbet.app with the subject "Delete my data".

We complete deletions within 30 days. The only data we retain after deletion is the minimum we are legally required to keep — for example, records of bets we placed for you may be retained for 5 years to comply with Nigerian gaming and tax recordkeeping. Those records are isolated and access-restricted.

Deleting your SnapBet AI account does not delete your bookmaker accounts (SportyBet, Bet9ja, 1xBet). To close those, contact each bookmaker directly.

12Security

We take security seriously because we have to — bookmaker credentials are not data we get to leak.

• Encryption in transit. All HTTP traffic to and from our servers is HTTPS only, TLS 1.2+, with HSTS enabled. WhatsApp traffic is end-to-end encrypted on top.
• Encryption at rest. Bookmaker credentials are AES-256-GCM encrypted with a key held outside the application database.
• Least privilege. Production database access is restricted to a small number of named operators with multi-factor authentication. We do not have a "support panel" that lets staff browse user records on a whim.
• Secrets management. API tokens and encryption keys are held in a secret manager, not in source code or configuration files.
• Logging discipline. Application logs explicitly redact credentials, OTPs, full phone numbers, and bookmaker session tokens.
• Backups. Encrypted, retention capped at 35 days, restoration drilled.
• Incident response. If we discover a breach affecting your data we will notify you within 72 hours, as required by NDPA 2023.

No system is perfectly secure. If you believe you have found a vulnerability in SnapBet AI, please email security@snapbet.app — we appreciate responsible disclosure.

1318+ only

SnapBet AI is for adults only. By using the service, you confirm you are at least 18 years old. Nigerian gaming law and Meta's WhatsApp Business policy both require this.

We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we delete their account and data immediately. Parents or guardians who believe a minor has used the service should contact privacy@snapbet.app and we will act within 24 hours.

If you or someone close to you is struggling with gambling, contact BACTA Nigeria or call 0800-3232-TALK.

14International transfers

Your data is stored on servers operated by our hosting provider, which may be located outside Nigeria. Where we transfer data internationally — for example, to Meta's data centres or to Anthropic's API endpoints — we rely on the receiving party's adequate-protection commitments and on the contractual safeguards required by the NDPA 2023.

We do not transfer data to jurisdictions that lack reasonable data protection law without your explicit consent or another lawful basis.

15Cookies on this site

This website (snapbet.app) does not set advertising or tracking cookies. We do not embed Facebook Pixel, Google Analytics, or third-party ad trackers. The only state we set in your browser is what is necessary for the page to function (for example, remembering whether you chose dark or light mode).

The WhatsApp bot itself does not use cookies — it is a messaging service, not a website.

16Changes to this policy

We may update this policy as the service evolves or as the law changes. When we do, we will:

• Update the "Effective" date at the top.
• Increment the version number.
• For any change that materially affects your rights, send a notice on WhatsApp and require you to acknowledge the new policy before continuing to use the service.

The current version of this policy is always at snapbet.app/privacy.html.

17Contact us

For any privacy question, request, or complaint:

• Email our data protection lead: privacy@snapbet.app
• Security disclosures: security@snapbet.app
• General: hello@snapbet.app
• WhatsApp: send HELP to the bot
• Post: Snapbet Technologies Ltd, Lagos, Nigeria

If we do not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Nigeria Data Protection Commission.