Privacy Policy
We are committed to handling your personal data transparently, securely, and in full compliance with the Nigeria Data Protection Act (NDPA) and NDPR.
1. Information We Collect
To deliver utility value and enroll you in weekly reward draws, Win-Bundle collects only the minimum necessary information:
- Phone Number (MSISDN): Used as your unique account identifier (created automatically upon your first successful purchase), for sending utility delivery confirmations, ticket statements, and winner alerts.
- Utility Information: Meter numbers, customer account IDs, and cellular network operator details needed to fulfill airtime and electricity purchases.
- Transaction & Ticket Records: Purchase timestamps, amounts, utility percentages, and cryptographic ticket hashes entered into weekly draws.
- Payout Banking Details: Bank account numbers and designated bank names provided when initiating withdrawals from your Win wallet.
2. How We Use Your Information
- Processing airtime top-ups with MTN, Airtel, Glo, and 9mobile.
- Generating electricity recharge tokens via Nigerian DisCos.
- Allocating and verifying weekly draw tickets in an auditable lottery system.
- Crediting prize funds directly to your Win wallet and facilitating bank payouts.
- Complying with regulatory obligations under the FCCPC, CBN, and NDPC.
3. Data Security & Masking
We implement bank-grade encryption across all API transactions and database storage.
When publishing weekly draw winners on our website or social media channels, all telephone numbers are permanently masked (e.g., 0803***1234) to ensure customer privacy while maintaining public transparency.
4. Data Sharing & Third Parties
We never sell, rent, or trade your personal data. We only share transaction data with:
- Telecommunications companies and Electricity Distribution Companies (DisCos) strictly to credit utility purchases.
- Licensed payment gateways (Interswitch, NIBSS, OPay, banks) to clear withdrawals.
- Official regulatory bodies where required by statutory Nigerian law.
5. Your Data Subject Rights
Under the Nigeria Data Protection Act (NDPA), you hold the right to:
- Request a copy of your stored transactional and ticket history.
- Request rectification of incorrect account records.
- Request account deactivation and data purging, subject to statutory audit retention periods.
- Opt out of non-essential promotional SMS communications.
6. Contact the Data Protection Officer (DPO)
For questions regarding data processing or to exercise your rights, email our Data Protection Officer at support@winbundle.africa or write to SaltinGStein Limited, No. 177a Moshood Olugbani Street, Off Ligali Ayorinde, Victoria Island, Lagos, Nigeria.