This Privacy Policy explains what personal information Sportswin Predictions ("Sportswin", "we", "us") collects when you use sportswin.co.ke, why we collect it, how we handle it, and what rights you have over it. It applies to our website, SMS delivery, and M-Pesa payment processing.
We handle personal data in line with the Kenya Data Protection Act, 2019 and its regulations.
1. Who we are
Sportswin Predictions is an independent sports analysis service based in Nairobi, Kenya. We publish SportPesa Mega Jackpot and Midweek Jackpot predictions. We are not a betting operator, and we are not affiliated with SportPesa, Safaricom, or M-PESA.
For privacy matters, contact us at tips@sportswin.co.ke or on WhatsApp at +254 718 981 122.
2. What we collect
We only collect the personal information we need to deliver the service. In practice, that means:
2.1 Information you give us
- Your M-Pesa phone number — when you pay for a slip, we receive the Safaricom number you used. This is the number we send the predictions to.
- Messages you send us — if you contact us via WhatsApp, email, or phone, we keep a record of that conversation to help resolve your query.
2.2 Information we receive from payment processing
- Payment confirmation details — from our payment gateway (namex.co.ke) and Safaricom M-Pesa, we receive confirmation that a payment of KSh 99 was received, along with the paying number and a transaction reference. We do not receive or store your M-Pesa PIN.
2.3 Information collected automatically
- Analytics data — we use Google Analytics (Google Analytics 4) to understand how visitors use the site. This includes approximate location (country/city level), device type, browser, pages viewed, and time on page. Google Analytics does not receive your name or phone number from us.
- Server logs — our hosting provider (Netlify) records standard request data such as IP address, browser user-agent, and requested URL. These logs are used for security and troubleshooting.
3. How we use your information
We use the information we collect to:
- Deliver your predictions — the primary purpose. When you pay, we send the SMS slip to your M-Pesa number.
- Handle support requests — if the SMS does not arrive, or you have a question about a slip, we use your number to look up the payment and re-send or assist.
- Improve the service — aggregate analytics data helps us see which pages are useful and which are not.
- Comply with the law — where Kenyan law requires us to keep records (for example, tax or accounting), we retain the minimum required.
4. Legal basis for processing
Under the Kenya Data Protection Act, we process your personal data on the following bases:
- Performance of a contract — you paid KSh 99 for a prediction slip, and we need your number to deliver it.
- Legitimate interests — security, fraud prevention, and site analytics.
- Legal obligation — where Kenyan law requires us to retain certain records.
- Consent — where you have explicitly agreed to something (for example, if you opt in to a WhatsApp support conversation).
5. Who we share your information with
We do not sell your personal data. We share it only where it is necessary to run the service:
- Safaricom M-Pesa — processes your payment and delivers the STK prompt.
- namex.co.ke — our payment gateway and SMS delivery provider. They process the payment instruction and dispatch the SMS.
- Netlify — our hosting provider. They serve the website and log standard request data.
- Google Analytics — anonymised analytics on site usage.
- Legal authorities — if required by a valid court order or Kenyan law.
6. How long we keep your information
We keep your data only as long as we need it:
- Phone number and payment confirmation — retained for as long as needed to deliver the slip and handle any follow-up support query. In practice, this means weeks to months, not years.
- Support conversations — retained until the issue is resolved and for a reasonable period afterwards.
- Analytics data — retained per Google Analytics' default retention settings (currently 14 months).
- Server logs — retained per Netlify's standard log retention.
7. Your rights
Under the Kenya Data Protection Act, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correct — ask us to fix any inaccurate data.
- Delete — ask us to remove your personal data, subject to any legal retention requirements.
- Object — object to processing in certain circumstances.
- Restrict — ask us to limit how we use your data.
- Complain — lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
To exercise any of these rights, contact us at tips@sportswin.co.ke. We will respond within 30 days.
8. Security
We take reasonable technical and organisational measures to protect your data. The site is served over HTTPS. Payment processing is handled by namex.co.ke over encrypted connections. We do not store M-Pesa PINs. Access to your phone number and payment records is limited to the people who need it to deliver the service and provide support.
No system is perfectly secure. If you become aware of a security issue affecting your data, please contact us immediately.
9. Cookies and analytics
We use minimal cookies and similar technologies. Google Analytics sets a small number of cookies to distinguish unique visitors and measure site usage. These are not used for advertising. You can block cookies in your browser settings without losing access to any part of the site.
10. Children
Our service is for adults 18 years and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has used our service, contact us and we will delete the record.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page will reflect any changes. Material changes will be noted at the top of the page for a reasonable period.
12. Contact
For any privacy-related question or request:
- Email: tips@sportswin.co.ke
- WhatsApp: +254 718 981 122