LEGAL

Privacy Policy

Effective Date: August 2025

At Ndoto Media, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our streaming platforms, gaming services, and mobile applications.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our services.

1. Information We Collect

1.1 Personal Information

we may collect the following personal information:

  • Phone number (for subscription and authentication)
  • Email address (when provided)
  • Name and demographic information
  • Payment information (processed through secure third-party providers)
  • Location data (country/region for service availability)

1.2 Usage Information

  • Content viewing history and preferences
  • Game scores and leaderboard participation
  • Device information (model, operating system, browser type)
  • IP address and connection information
  • App usage patterns and feature interactions

1.3 Technical Information

  • Cookies and similar tracking technologies
  • Log files and server data
  • Performance and diagnostic data

2. How We Use Your Information

We collect and use personal information for the purposes outlined below. All usage is in accordance with applicable laws and aimed at providing, improving, and securing our services.

2.1 Service Provision

  • Process subscriptions, manage accounts, and maintain service access
  • Deliver content, gaming experiences, and other core services
  • Authenticate users and prevent unauthorized access or fraudulent activity
  • Process payments, including carrier billing and other secure payment methods

2.2 Personalization and Improvement

  • Personalize content, recommendations, and user experiences
  • Analyze usage patterns, trends, and service performance
  • Improve our services, user interfaces, and overall user experience
  • Develop new features, content, and offerings based on anonymized insights

2.3 Communication

  • Send service-related notifications, alerts, and updates via SMS or other channels
  • Provide responsive customer support and service assistance
  • Send promotional content, newsletters, or offers, only with your explicit consent
  • Distribute prize notifications and information related to gaming services and rewards

3. Information Sharing and Disclosure

3.1 Service Partners

we may share your personal information with trusted service partners to provide and improve our services. These partners include, but are not limited to:

  • Mobile Network Operators: MTN, Telkom, Safaricom, Vodacom for billing, authentication, and service delivery
  • Payment Processors: For secure processing of transactions and payment verification
  • Content Delivery Networks (CDNs): To deliver content efficiently and reliably
  • Analytics Providers: For service improvement and usage analysis, using anonymized or aggregated data where possible

3.2 Legal Requirements

we may disclose personal information when required by applicable law, regulation, legal process, or governmental request, or to:

  • Comply with court orders, subpoenas, or other legal obligations
  • Protect and defend our rights, property, or safety, as well as that of our users
  • Prevent fraud, security breaches, or other unlawful activities
  • Enforce our Terms of Service and policies

3.3 Business Transfers

In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of the business transaction. Any such transfer will be subject to the same privacy protections described in this Privacy Policy.

We do not sell your personal information to third parties for marketing purposes. Any sharing of information is limited to the purposes outlined above.

4. Data Security

We implement industry-standard technical, administrative, and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption of personal data both in transit and at rest
  • Secure server infrastructure with strict access controls
  • Regular security audits, monitoring, and vulnerability assessments
  • Employee training on data protection, confidentiality, and security practices
  • Established incident response and breach notification procedures

While we strive to protect your information using reasonable and appropriate measures, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security of your data.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, enforce our agreements, and improve our services.

  • Provide and maintain our services for you
  • Comply with applicable legal, regulatory, or contractual obligations
  • Resolve disputes, enforce agreements, and protect our rights
  • Conduct analytics and improve our services in a secure and privacy-respecting manner

Account-related information is generally retained for the duration of your subscription plus an additional three (3) years to satisfy legal and business requirements. Usage data, activity logs, and analytics information may be retained longer in anonymized or aggregated form for research, statistical, and service improvement purposes.

6. Your Rights and Choices

Depending on your location and applicable laws, you may have certain rights regarding your personal information. We respect these rights and provide mechanisms to exercise them as outlined below:

6.1 Access and Portability

  • Request access to the personal information we hold about you
  • Receive a copy of your data in a structured, commonly used, and machine-readable format
  • Transfer your data to another service provider where technically feasible

6.2 Correction and Deletion

  • Request correction or update of inaccurate or incomplete information
  • Request deletion of personal information where legally permitted
  • Withdraw consent for data processing where applicable, without affecting prior processing

6.3 Communication Preferences

  • Opt out of promotional emails, SMS, or other marketing communications
  • Manage notification settings within our services
  • Control cookie and tracking preferences through your browser or device settings

7. International Data Transfers

Your personal information may be collected, processed, and stored in countries other than your own, including jurisdictions that may have data protection laws that differ from those in your country. We take appropriate measures to ensure that such international transfers are conducted securely and in compliance with applicable data protection regulations. These safeguards may include:

  • Implementation of standard contractual clauses approved by relevant data protection authorities
  • Transfers to countries recognized as having adequate data protection standards
  • Adherence to certification schemes, codes of conduct, or binding corporate rules

8. Children‘s Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

For users between 13-18 years old, we recommend parental guidance and supervision when using our services.

9. Third-Party Links and Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any information.

10. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience and provide our services more effectively. These technologies may be used to:

  • Remember your preferences, settings, and login information
  • Analyze site traffic, usage patterns, and user behavior to improve our services
  • Deliver personalized content, recommendations, and advertisements
  • Enhance security, prevent fraud, and detect unauthorized activity

You have the ability to manage and control cookie settings through your browser or device preferences. Please note that restricting or disabling certain cookies may affect the functionality of our services and limit access to some features.

11. Changes to This Privacy Policy

we may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Such updates may include clarifications, additional disclosures, or modifications necessary to comply with applicable laws and regulations.

We will notify you of any material changes by one or more of the following methods:

  • Posting the updated Privacy Policy on our website, with the effective date clearly indicated
  • Sending a notification via SMS, email, or other direct communication channels
  • Displaying a notice or prompt within our applications or services

We encourage you to review this Privacy Policy periodically to stay informed of any updates. Your continued use of our services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material changes, you should discontinue your use of our services.

This Privacy Policy was last updated on August 2025. We reserve the right to make non-material changes at any time without prior notice.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Ndoto Media Privacy Team

Email: info@ndotomedia.com

For data protection inquiries specific to your region, you should also contact your local data protection authority.

13. Regional Compliance

13.1 South Africa (POPIA)

We comply with the Protection of Personal Information Act (POPIA). You have specific rights under POPIA, including the right to access, correct, and delete your personal information.

13.2 Kenya (Data Protection Act)

We adhere to Kenya‘s Data Protection Act requirements, ensuring lawful processing and protection of your personal data.

13.3 Nigeria (NDPR)

We comply with the Nigeria Data Protection Regulation (NDPR) and respect your rights as a data subject under Nigerian law.

13.4 Tanzania

We follow applicable Tanzanian laws and regulations regarding data protection and privacy.