TushindeBet Privacy Policy

Last updated: 5 October 2026

This policy explains what personal data we collect when you use TushindeBet, why we use it, who we share it with, how long we keep it and what your rights are. We follow Kenya's Data Protection Act, 2019. Words such as "we" and "the Service" mean the same as in our User Agreement.

1. Who we are

1.1 TushindeBet is operated by Greatech Technologies Limited, a company based in Nairobi, Kenya and licensed by the Gambling Regulatory Authority of Kenya (licence GRAK/2026/BG365772). Greatech Technologies Limited is the data controller of your personal data.

1.2 For any question or request about your data, contact us at info@greatechtechnologies.com.

2. The personal data we collect

2.1 Data you give us

• Account details: your mobile number, password, email address (if you add one) and any promo code you enter.
• Identity details, when we verify your account: your name, date of birth, ID number, copies of your ID, and other documents we ask for, such as proof that the M-Pesa account is yours or of where your money comes from.
• What you tell us: support chats, emails and complaints.
• Your choices: deposit and loss limits, time-outs, self-exclusion, and whether you want offers by SMS or browser notification.

2.2 Data created when you use the Service

• Payments: your deposits and withdrawals, with amounts, times, deductions, status and M-Pesa transaction codes.
• Play: your bets, wins, game rounds, balance, bonuses, free spins, points, VIP level and tournament results.
• Device and technical data: your IP address, a device identifier kept in a cookie (section 9), your browser and device type, log-in and session records, and error logs.
• Notifications: if you allow browser notifications, the subscription details your browser gives us.
• Messages we send you, and whether they were delivered.

2.3 Data from others

• Safaricom (M-Pesa) and our payment partners: payment confirmations, transaction codes and, where M-Pesa provides it, the name registered on the M-Pesa account.
• Game providers: the results of rounds you play on their games.
• Identity-check and fraud-prevention services, where we use them, and public records.
• Regulators, law-enforcement agencies and courts, and any self-exclusion register we must use.
• People who contact us about you, for example a family member worried about your gambling.

2.4 Sensitive personal data

Some data may be sensitive personal data under the Act, for example health information that comes up when we talk with you about gambling harm, or biometric data if we compare a photo of you with your ID. We use it only where the Act allows, such as to meet our legal duties or to protect you, and we limit who can see it.

3. Why we use your data, and our legal bases

The Data Protection Act, 2019 allows us to use personal data only where we have a lawful basis. Ours are:

• To provide the Service under our contract with you: registering you and confirming your number; taking deposits, settling bets and paying withdrawals; running games; giving you the bonuses, points and prizes you earn; sending service messages such as codes and payment messages; and answering support requests.
• To meet our legal duties: checking your age and identity; anti-money-laundering and counter-terrorism-financing checks; reporting suspicious transactions to the Financial Reporting Centre; deducting tax and reporting to the Kenya Revenue Authority; reporting to the Gambling Regulatory Authority; keeping records; honouring self-exclusions; and answering lawful requests from courts and authorities.
• For our legitimate interests, balanced against your rights: preventing fraud, duplicate accounts and bonus abuse; keeping accounts and systems secure; looking after players who show signs of gambling harm; showing tournament leaderboards with masked phone numbers; improving the Service and fixing problems; and handling legal claims.
• With your consent: sending you offers by SMS, email or browser notification. You can withdraw consent at any time. This does not affect what we did before.
• To protect someone's vital interests: in an emergency, for example if we believe someone is at risk of serious harm.

If you do not give us data that the law or our contract needs, such as your ID when we ask for it, we may not be able to open your account, pay withdrawals or keep the account open.

4. Automated decisions and profiling

We use automated checks to protect players and the Service. For example, our systems may stop a registration when a device has reached its account limit, hold a withdrawal for a person to review, flag accounts that look linked or that show signs of gambling harm, and decide which offers you can get based on your play. You can ask for a decision made only by our systems that significantly affects you to be reviewed by a person, and you can give us your side.

5. Who we share your data with

We do not sell your personal data. We share it only as needed, with:

• payment providers: Safaricom (M-Pesa) and the payment partners that collect deposits and send withdrawals for us;
• messaging providers: SMS providers and mobile networks for codes and messages, an email provider for email codes and messages, and WhatsApp if you talk to a VIP manager (WhatsApp's own terms also apply);
• technology providers: hosting, cloud, data storage, security and IT support companies;
• game providers and game platforms: an account identifier (which may be based on your phone number), your bets and results, and the balance information they need to run their games in your account;
• identity-check and fraud-prevention services, where we use them;
• companies in our group, or related companies that provide services to us such as payment processing or technology;
• professional advisers, auditors and insurers;
• authorities, when the law requires it or to prevent or detect crime: the Gambling Regulatory Authority, the Kenya Revenue Authority, the Financial Reporting Centre, the Office of the Data Protection Commissioner, the police and the courts; and
• a company that takes over our business, which must protect your data in the same way.

Companies that process data for us may use it only on our instructions, under contracts that require them to keep it safe.

6. Data stored outside Kenya

Some of our servers and service providers are outside Kenya, in Germany and the United States. We transfer personal data out of Kenya only as the Data Protection Act allows, with safeguards such as contracts that protect your data. You can ask us for details.

7. How long we keep your data

• Account, identity, payment and play records: while your account is open, and for at least 7 years after it closes, because anti-money-laundering, tax and gambling laws require us to keep them.
• Self-exclusion records: for as long as the exclusion lasts, and afterwards for as long as the law requires.
• Support messages and complaints: as long as we need them to handle the matter and any follow-up.
• Device, IP and log data: as long as we need them for security and fraud prevention, including any investigation.
• Marketing choices: while you are opted in, and a record of your choice afterwards.
• Registrations never confirmed with the SMS code: as long as we need them to prevent repeated sign-up abuse.

When we no longer need data, we delete it or make it anonymous.

8. Keeping your data safe

8.1 We protect your data with encrypted connections (HTTPS), access controls and staff confidentiality, and only people who need your data can see it.

8.2 You can help by keeping your password and codes secret. You can log out of all other devices from Settings.

8.3 If a data breach puts you at real risk, we will tell the Office of the Data Protection Commissioner within 72 hours of becoming aware of it, and tell you as the Act requires.

9. Cookies and browser storage

We use a small number of cookies and browser storage items, all needed for the Service to work or to keep it secure. We use analytics cookies to understand how the site is used. We do not use advertising cookies at present. If we start, we will update this policy and ask for your consent where the law requires.

• hb_did (cookie, up to 400 days): a device identifier set when you register or log in. It helps us prevent duplicate accounts and fraud and keep accounts secure.
• Login and session cookies: keep you logged in until you log out.
• Browser storage on your device: remembers small settings such as your language and which notices you have already seen.
• Google Analytics cookies: tell us, in aggregate, how the site is used so we can improve it.

Games from third-party providers may use their own cookies or storage while they run. You can clear cookies and storage in your browser settings, but you will be logged out and the Service may not work properly.

10. Marketing

10.1 We only send you offers by SMS, email or browser notification if you have agreed, for example by tapping "Notify me" or allowing notifications.

10.2 You can stop at any time: contact support, use the opt-out in a message where there is one, or turn off notifications in your browser settings.

10.3 Service messages (such as codes, payment messages, security notices and notices about bonuses already in your account) are not marketing. We send them while your account is open.

10.4 We never send marketing to self-excluded players, or to anyone we know is under 18.

11. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be told how we use your personal data;
• get a copy of the personal data we hold about you;
• have wrong or misleading data corrected;
• have data deleted where we no longer need it or have no lawful basis to keep it;
• object to our use of your data, and to direct marketing at any time;
• ask us to restrict our use of your data while a concern is checked;
• receive the data you gave us in a common, machine-readable format, or have it sent to another organisation, where this is technically possible;
• withdraw your consent at any time;
• ask for a person to review a decision made only by automated means; and
• complain to the Office of the Data Protection Commissioner.

To use your rights, contact info@greatechtechnologies.com. We will confirm your identity first and reply within the time the Act and its regulations set. This is usually free. Some rights have legal limits: for example, we cannot delete records the law requires us to keep, or a self-exclusion record while the exclusion lasts.

12. Children

TushindeBet is for adults only. We do not knowingly collect data about anyone under 18. If we learn that we have, we close the account and delete the data, except what the law requires us to keep.

13. Other websites and services

Other websites we link to, and services such as WhatsApp, have their own privacy policies. We are not responsible for them.

14. Changes to this policy

We may update this policy. We will publish the new version with a new date and, if a change is significant, tell you by SMS, email or in-app message.

15. Contact and complaints

• Email: info@greatechtechnologies.com
• Location: Chelezo Apartments, Unit 15C, Kindaruma Road, Kilimani, Nairobi, Kenya
• Tel: +254 111 050 420

If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).