VimBet

Legal

Privacy Policy

Last updated 18 September 2026. This policy explains what personal data VimBet collects, why, and the choices you have.

1. Who we are

The data controller is VimBet Ltd, registered in Ghana. We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843). Questions about this policy go to [email protected].

2. What we collect

  • Account details — name, phone number, email address, date of birth, gender (optional), city/region, profile photo (optional), and your password or PIN, which we store only as a one-way hash.
  • Play data — the tickets you buy, your picks, wallet balance and every wallet transaction (deposits, ticket purchases, prizes, refunds, withdrawals).
  • Payment data — the amount, reference, channel (mobile money) and status of each deposit as reported by Paystack, and the mobile money network, number and account name you give for withdrawals.
  • Verification data — if we ask you to prove your age or identity, the document or details you send us.
  • Technical data — IP address, browser and device type, pages visited and the time of each request, collected in server logs.
  • Support messages — anything you send to support and our replies.

3. How we use it

  • to run your account, take deposits, sell tickets, settle pools and pay prizes and withdrawals;
  • to confirm you are 18 or older and that the account and payment methods are yours;
  • to detect fraud, multiple accounts, money laundering and abuse of the service;
  • to publish pool results — settlement reports show the number of winning lines per tier and prize amounts, never the names of winners;
  • to answer support requests and tell you about changes to the service or these terms;
  • to meet legal obligations, including record-keeping, tax and any requirements of the Gaming Commission of Ghana;
  • to improve the service using aggregate, non-identifying statistics.

We do not sell personal data and we do not send marketing messages unless you have opted in; you can opt out at any time by replying STOP or emailing support.

We process your data to perform our contract with you (running your account and pools), to comply with legal obligations (age verification, anti-money-laundering, tax), for our legitimate interests in keeping the service secure and fair, and with your consent where the law requires it (for example marketing).

5. Who we share it with

  • Paystack (Paystack Payments Limited) — to process deposits and, where used, transfers to mobile money. Paystack's own privacy policy applies to the data it handles.
  • Mobile money operators (MTN, Telecel, AirtelTigo) — the number and name needed to send a withdrawal.
  • Hosting and infrastructure providers — our servers and content delivery network, which process data on our instructions.
  • Regulators, courts and law enforcement — where we are legally required to, or to investigate fraud or match-fixing.
  • A buyer or successor if VimBet Ltd is sold or merged, under the same protections.

Data is stored on servers operated for us under written data-processing terms. Where data leaves Ghana we ensure the recipient provides an adequate level of protection as required by Act 843.

6. Payments

When you deposit, you are redirected to Paystack's secure checkout. Mobile money approvals happen on Paystack's pages and on your phone, not on ours. We receive only the outcome of the payment, its reference and amount, which we keep as part of your wallet history.

7. Cookies & storage

  • Session cookie (vb_session) — keeps you signed in. Strictly necessary; expires when you sign out or after the session period.
  • Browser storage — remembers your light/dark theme choice and, while you build a ticket, your unsaved picks so they survive a sign-in. Nothing in it identifies you to third parties.
  • We do not use advertising or third-party analytics cookies.

8. How long we keep it

  • Account and wallet records: for as long as your account is open and for 6 years after it closes, as required for financial and gaming record-keeping.
  • Verification documents: until verification is complete and then for the period the law requires, after which they are deleted.
  • Server logs: 90 days.
  • Support messages: 2 years.

9. Security

Passwords and PINs are hashed (PBKDF2-SHA256) and cannot be read by staff. All traffic is encrypted with HTTPS. Access to production data is limited to staff who need it. No system is perfectly secure; if we discover a breach that affects you we will tell you and the Data Protection Commission as the law requires.

10. Your rights

Under Act 843 you can ask us to:

  • access the personal data we hold about you;
  • correct inaccurate data — most account details can be changed in Account settings;
  • delete your data, subject to the retention we are legally required to keep;
  • object to or restrict processing, and withdraw consent where processing is based on it;
  • receive a copy of your data in a portable format.

Email [email protected]; we respond within 30 days. You also have the right to complain to the Data Protection Commission of Ghana (dataprotection.org.gh).

11. Under-18s

VimBet is for adults only. We do not knowingly collect data from anyone under 18; if we learn we have, we close the account, refund any unstaked deposits and delete the data.

12. Changes

We may update this policy; the date at the top shows the current version. Significant changes will be announced on the site before they take effect.

13. Contact

VimBet Ltd · [email protected] · [email protected]. See also our Terms & Conditions.