Privacy Policy

This Privacy Policy explains how Kadi Online collects, uses, stores, protects and shares personal information when users access or use the Kadi Online website, games, tournaments, ticket services, wallet features, giveaways and related services.

Kadi Online respects users' privacy and is committed to handling personal information responsibly and in accordance with applicable data protection laws, including the Data Protection Act, 2019 of Kenya and its applicable regulations.

By using Kadi Online, users acknowledge that their personal information may be processed as described in this Privacy Policy. Where consent is required by law, Kadi Online will seek that consent separately where appropriate.

Kadi Online is operated by Kizuka Na Michezo Limited, referred to in this Privacy Policy as "Kadi Online," "we," "us" or "our."

For questions about this Privacy Policy or the handling of personal information, users may contact us through:

Operator

Kizuka Na Michezo Limited

Website

https://kadi.online

Email

kadiapponline@gmail.com

Customer care

0182 473 265

WhatsApp

Chat with us

Licence number

BK-0001273

3.1 Account and profile information. This may include usernames, account identifiers, profile pictures, email addresses, registration details and other information users provide when creating or managing an account.

3.2 Gameplay information. This may include game history, player actions, game outcomes, tournament participation, level progression, rankings, tickets used, winnings and records needed to verify gameplay.

3.3 Wallet and M-Pesa transaction information. Kadi Online may collect and maintain information relating to ticket purchases, wallet balances, deposits, winnings, withdrawals and transaction statuses. For M-Pesa transactions, this may include users' mobile phone numbers used to initiate or receive payments, transaction references, payment amounts, timestamps, transaction outcomes and relevant payer details made available through the payment process.

Phone numbers may be used to initiate M-Pesa STK Push payment requests, facilitate wallet deposits and withdrawals, verify transactions, reconcile payment records, credit tickets, process eligible winnings and withdrawals, resolve transaction disputes and detect suspicious activity. Users should ensure that the phone numbers they provide are correct and can be used for the intended transactions. We do not intentionally collect or store users' M-Pesa PINs.

3.4 IP addresses and network information. Kadi Online collects and processes users' IP addresses and relevant network information when they access or use the platform. We use this information to identify and block malicious or suspicious IP addresses and networks, detect and prevent fraud, unauthorized access, abuse and other security threats, investigate suspicious activity, protect our servers and users, and maintain the security and reliability of Kadi Online.

We may also use IP addresses to estimate a user's approximate geographical location, such as their country, region or city, for security monitoring, service analysis and advertising or marketing campaign planning, targeting and measurement, where permitted by applicable law. IP-based location estimates may be inaccurate and do not necessarily identify a user's exact physical location.

Kadi Online may disclose relevant IP address and network information to competent law enforcement agencies, regulatory authorities, courts or other authorized public authorities where required or permitted by applicable law, including for the investigation or prevention of fraud, cybercrime, security threats or other unlawful activities.

3.5 Technical and device information. This may include browser type, device information, connection status, timestamps, error reports, server logs and diagnostic information necessary to operate, secure and troubleshoot the platform.

3.6 Customer support and complaint information. This may include support messages, complaint details, screenshots, screen recordings and other evidence voluntarily submitted or reasonably requested to investigate technical issues, disputed outcomes, transactions or account activity.

3.7 Verification information. Where required for account security, payment verification, prize claims, withdrawals or legal compliance, we may request information reasonably necessary to verify a user's identity or eligibility.

3.8 Information collected through cookies or similar technologies. Where used, these technologies may collect information about sessions, preferences, security, advertising interactions and website usage. Additional notices or consent controls will be provided where required by law.

We aim to collect personal information that is relevant and necessary for the purposes described in this Privacy Policy.

Kadi Online may use personal information to:

• Create, maintain and secure user accounts.
• Operate games, tournaments, tickets, leaderboards and level progression.
• Maintain wallet and M-Pesa transaction records.
• Process and verify eligible winnings, prize claims and withdrawals.
• Detect cheating, collusion, fraud, unauthorized activity and manipulation of game outcomes.
• Investigate software bugs, synchronization failures, disputed games and incorrect results.
• Respond to customer support requests and complaints.
• Enforce our Terms and Conditions and applicable game rules.
• Maintain system performance, troubleshoot errors and improve platform reliability.
• Understand website usage and platform performance through internal analytics.
• Measure advertising performance, understand campaign effectiveness and support internal advertising and marketing activities.
• Communicate important account, transaction, security and service information.
• Send promotional communications where permitted by law and subject to applicable consent and opt-out requirements.
• Comply with applicable legal, regulatory, accounting and recordkeeping obligations.
• Investigate suspicious activity and protect Kadi Online, its users and other persons against fraud, abuse and security threats.

We will process personal information for purposes that are lawful and consistent with this Privacy Policy, subject to applicable data protection requirements.

5.1 Retention of information. Kadi Online retains personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including operating accounts, maintaining gameplay and transaction records, processing payments and withdrawals, resolving complaints, preventing fraud, enforcing our Terms and Conditions and meeting legal obligations.

5.2 Transaction and gameplay records. Certain wallet, payment, gameplay, security and verification records may need to be retained after a user stops using Kadi Online to support audits, investigations, dispute resolution, financial reconciliation and applicable legal or regulatory requirements.

5.3 Deletion of information. Users may request the deletion of personal information by contacting Kadi Online. We will assess such requests in accordance with applicable law. We may retain information where a lawful reason exists, including legal recordkeeping requirements, ongoing disputes, fraud prevention, security investigations or the establishment, exercise or defence of legal claims.

5.4 Secure disposal. When personal information is no longer required and there is no lawful reason to retain it, Kadi Online will take reasonable steps to delete, anonymize or securely dispose of the information.

5.5 Backups and technical records. Information may remain in secure backups or technical records for a limited period as part of ordinary system maintenance, subject to applicable retention and security requirements.

6.1 Service providers. Kadi Online may share relevant information with service providers that support essential operations, including hosting, technical infrastructure, security, payment processing, communications and customer support. Information will be shared where reasonably necessary for the relevant service and subject to applicable data protection requirements.

6.2 M-Pesa and payment processing. We may exchange relevant transaction information with Safaricom and applicable M-Pesa service infrastructure to initiate or verify payments, process supported transactions, reconcile payment records, confirm transaction outcomes and investigate payment disputes.

6.3 Internal analytics and advertising. Kadi Online processes relevant technical information, device information, usage events, identifiers and advertising interaction data internally to understand platform usage, improve our services, measure advertising performance and plan marketing campaigns. These activities are managed internally by Kadi Online, and we do not share this information with external analytics or advertising providers for those purposes.

6.4 Legal and regulatory requirements. We may disclose information where required or permitted by applicable law, a lawful court order or a competent regulatory or law enforcement authority. Relevant authorities may include the Gaming Regulatory Authority (GRA), the Betting Control and Licensing Board (BCLB) where applicable, courts, law enforcement agencies and other competent Kenyan authorities.

6.5 Security and dispute resolution. Information may be disclosed where reasonably necessary and legally permitted to investigate suspected fraud, cheating, security incidents, disputed transactions, technical incidents or violations of our Terms and Conditions.

6.6 Business and legal requirements. Information may be disclosed where reasonably necessary for a lawful corporate transaction, legal claim or other legitimate legal requirement, subject to applicable data protection laws and appropriate safeguards.

6.7 Limits on disclosure. Kadi Online aims to limit disclosures to information relevant and necessary for the applicable purpose. We do not sell users' personal information to advertisers.

7.1 Cookies and similar technologies. Kadi Online may use cookies, local storage and similar technologies to maintain user sessions, support security, remember preferences, understand platform usage, measure advertising performance and improve our services.

7.2 Usage and analytics information. We may collect information such as pages visited, interactions with platform features, device and browser details, referral sources, timestamps and technical events to understand how users interact with Kadi Online and improve the platform.

7.3 Advertising and marketing analytics. Kadi Online may process advertising-related information, such as advertisement interactions, campaign visits and referral information, to measure the performance of advertisements and plan and improve marketing campaigns. These activities are managed internally by Kadi Online.

7.4 Account and service communications. Kadi Online may use the phone numbers and email addresses provided by users to communicate with them about their accounts, payments, wallet transactions, tickets, winnings, withdrawals, security alerts, technical issues, customer support, service updates and other relevant platform-related matters.

7.5 Third-party communication services. To deliver communications, Kadi Online may use third-party services and technologies that we do not own or directly operate, including mobile network operators such as Safaricom, SMS service providers, email service providers, telephone services and application programming interfaces (APIs). These providers may process relevant contact details and communication information as necessary to deliver calls, SMS messages, emails, verification codes, payment prompts and other communications on our behalf.

7.6 Marketing communications. Where permitted by applicable law, Kadi Online may send users information about new features, games, tournaments, giveaways, offers, events and other Kadi Online activities. Where consent is required, we will obtain it before sending marketing communications. Users may opt out through available unsubscribe instructions or by contacting Kadi Online. Opting out will not prevent essential account, security, transaction-related or legally required communications.

7.7 Protection of information shared with service providers. Kadi Online will take reasonable steps to limit information shared with communication service providers to what is necessary to deliver the relevant service and to handle personal information in accordance with applicable data protection laws.

7.8 Cookie controls and consent. Where required by applicable law, Kadi Online will provide appropriate notice and obtain consent before using non-essential cookies or similar tracking technologies. Users may be able to manage certain cookies through their browser or device settings. Disabling some technologies may affect certain platform features or our ability to measure usage and advertising performance.

7.9 Disclosure to law enforcement and regulatory authorities. Kadi Online may disclose relevant user information, including account details, phone numbers, email addresses, IP addresses, gameplay records, transaction information and communication records, to competent law enforcement agencies, courts, regulators or other authorized public authorities where required or permitted by applicable law. Such authorities may include the Gaming Regulatory Authority (GRA), the Betting Control and Licensing Board (BCLB) where applicable, and other relevant Kenyan authorities. Disclosures may be made to comply with legal obligations, respond to lawful requests or court orders, investigate suspected fraud or cybercrime, prevent unlawful activities, and protect the rights, security and property of Kadi Online, its users or other persons.

8.1 Use of contact information. Kadi Online may use the phone numbers and email addresses provided by users to communicate with them about their accounts, payments, wallet transactions, tickets, winnings, withdrawals, security alerts, technical issues, customer support, changes to our services and other relevant platform-related matters.

8.2 Third-party communication services. To communicate with users, Kadi Online may use third-party service providers and communication platforms, including mobile network operators such as Safaricom, SMS service providers, email service providers, telephone service providers and communication APIs. These providers may process relevant contact details and communication information as necessary to deliver messages, calls, notifications, verification codes, payment prompts and other communications on our behalf.

8.3 Technology operated by third parties. Kadi Online may use communication systems and technologies that we do not own or directly operate. Where these services are used, the relevant providers may process information in accordance with their own technical processes, applicable terms and privacy obligations. Kadi Online will take reasonable steps to use such services appropriately and in accordance with applicable data protection laws.

8.4 Marketing communications. Where permitted by applicable law, Kadi Online may use users' contact information to send information about new features, games, tournaments, giveaways, offers, events and other Kadi Online activities. Where consent is required, we will obtain it before sending such communications. Users may opt out of marketing communications using available unsubscribe instructions or by contacting Kadi Online. Opting out will not prevent essential service, security, transaction-related or legally required messages.

8.5 Protection of contact information. Kadi Online will limit the contact information shared with communication service providers to what is reasonably necessary to deliver the relevant service. We will take reasonable steps to ensure that such information is handled appropriately and subject to applicable data protection requirements.

For questions, requests or complaints relating to personal information, users may contact Kadi Online through:

Operator

Kizuka Na Michezo Limited

Website

https://kadi.online

Email

kadiapponline@gmail.com

Customer care

0182 473 265

WhatsApp

Chat with us

Licence number

BK-0001273

Users may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya where appropriate.

10.1 Available rights. Subject to applicable law, users may have the right to request access to their personal information, be informed about how it is used, request correction of inaccurate or misleading information, request deletion of information where legally appropriate, object to certain processing, request restriction of processing, or exercise other rights available under Kenyan data protection law.

10.2 Withdrawal of consent. Where processing is based on consent, users may withdraw that consent subject to applicable law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10.3 How to submit a request. Users may submit data protection requests through the official Kadi Online contact details provided in this Privacy Policy. We may request reasonable information to verify the identity of the requester and protect the account holder against unauthorized disclosure.

10.4 Responding to requests. Kadi Online will assess and respond to requests in accordance with applicable law. Some requests may be limited or refused where a lawful exception applies, including where information must be retained for legal obligations, security, fraud prevention or the resolution of claims.

10.5 Complaints to the regulator. Users may lodge a complaint with the Office of the Data Protection Commissioner of Kenya where they believe their personal information has been handled unlawfully.

11.1 Security safeguards. Kadi Online takes reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, disclosure or destruction. These measures may include access controls, system monitoring, security logging, network protection, restricted access to sensitive information and investigation of suspicious activity.

11.2 Limits of security. No website, network, storage system or method of electronic transmission can be guaranteed to be completely secure. Users should protect their account credentials, avoid sharing confidential account information and promptly report suspected unauthorized access or suspicious account activity.

11.3 Security incidents. If a personal data breach occurs, Kadi Online will assess the incident and take reasonable steps to contain it, investigate its effects, reduce potential harm and comply with applicable notification and reporting obligations.

12.1 Processing outside Kenya. Some technical infrastructure or third-party services used by Kadi Online, including hosting, communication or payment-related services, may process or store information outside Kenya, depending on the providers and their infrastructure.

12.2 Applicable safeguards. Where personal information is transferred outside Kenya, Kadi Online will take steps to ensure that the transfer and subsequent processing comply with applicable Kenyan data protection requirements, including any required safeguards, conditions or consent.

12.3 Information about transfers. Users may contact Kadi Online using the details provided in this Privacy Policy to request further information about relevant international transfers, subject to applicable law and security considerations.

13.1 Age requirements. Kadi Online is intended only for users who meet the minimum age and eligibility requirements applicable to the platform and its activities. Where a game, tournament, giveaway or other activity is subject to an age restriction, users must meet that restriction before participating.

13.2 Information relating to minors. Kadi Online does not knowingly seek to collect personal information from individuals who are not legally eligible to use the relevant service. Where we become aware that information has been collected unlawfully from an ineligible minor, we will take appropriate steps in accordance with applicable law.

13.3 Verification and account action. Where reasonably necessary and legally permitted, Kadi Online may request age or eligibility verification and may restrict, suspend or close an account that does not meet applicable requirements.

14.1 Updates. Kadi Online may update this Privacy Policy from time to time to reflect changes in our services, data handling practices, technology, legal requirements or regulatory guidance.

14.2 Publication of changes. The latest version will be published on the Kadi Online website, together with its effective date or last-updated date.

14.3 Material changes. Where required by law, or where appropriate due to the nature of a material change, Kadi Online will provide additional notice or obtain consent before applying the change.

14.4 Continued use. Users are encouraged to review this Privacy Policy periodically to understand how their personal information is handled. Any consent required for a new or changed processing activity will be obtained where applicable law requires it.