Privacy Policy

NDAKUBET ("NDAKUBET", "we", "our", or "us") operates a football prediction platform that aggregates fixture, statistical, and market data from multiple licensed sources and produces probabilistic forecasts. This Privacy Policy describes the categories of personal information we collect, how we use it, with whom we share it, and the choices and rights available to you.

By accessing or using https://ndakubet.com, our Android/iOS applications, or any related service (collectively, the "Service"), you acknowledge that you have read and understood this Policy.

NDAKUBET is the data controller for the personal information processed under this Policy. For privacy-specific inquiries, you can reach us at privacy@ndakubet.com.

We collect the following categories of information:

a. Information you provide

• Account data: email address, display name, hashed password, and (optional) WhatsApp number when you opt in to broadcasts.
• Preferences: favourite leagues and teams, notification settings, and language/region preferences.
• Saved betslips and bookmarks: custom betslip selections and other content you choose to save inside the Service.
• Support communications: messages you send to our support channels.

b. Information collected automatically

• Device & technical data: IP address, device model, operating system, browser type, screen resolution, locale, and crash logs.
• Usage data: pages visited, features used, clicks on fixtures or predictions, session duration, and referral URL.
• Performance & analytics: aggregated performance metrics such as page load time and API latency.

c. Information from third parties

• Football data feeds (fixtures, statistics, odds) from our licensed data partners. These feeds do not contain personal data about you.
• Authentication data from OAuth providers if you sign in via a third-party login (only the email and name associated with that account).

We do not knowingly collect special categories of personal data (e.g., race, religion, biometric data, health data, or precise geolocation).

• To create and maintain your account and authenticate your sessions.
• To deliver the core Service: prediction lists, halftime betslips, accuracy analytics, and historical track records.
• To send service notifications (e.g., your daily double drop on WhatsApp) when you explicitly opt in.
• To improve our prediction models by aggregating outcome data and calibration signals — never using personally identifiable information.
• To detect, prevent, and respond to abuse, fraud, automated scraping, and security incidents.
• To comply with applicable laws, regulations, and lawful requests.

If you are in the European Economic Area, United Kingdom, or other jurisdictions that require a legal basis for processing, we rely on:

• Contract — to provide the Service you requested by creating an account.
• Legitimate interests — to operate, secure, and improve the Service, provided your rights do not override these interests.
• Consent — for optional features such as WhatsApp broadcasts and marketing communications, which you may withdraw at any time.
• Legal obligation — to comply with tax, accounting, or law-enforcement requirements.

We do not sell your personal information. We share data only as described below:

• Service providers (sub-processors) who host infrastructure, send transactional messages, or perform analytics on our behalf, under written contracts that restrict them to processing data only for our purposes.
• Legal & safety: when required by law, court order, or to protect our rights, users, or the integrity of the Service.
• Business transfers: if NDAKUBET is involved in a merger, acquisition, or asset sale, your information may transfer as part of that transaction, subject to the same protections.
• With your consent: any other sharing is done only with your explicit authorisation.

The following sub-processors help us run the Service. We have entered into data-processing agreements with each.

• MongoDB Atlas — managed database hosting.
• Cloud infrastructure providers — server, CDN, and storage hosting.
• API-Sports / RapidAPI — football fixture and statistics feeds (no personal data is sent).
• Twilio — WhatsApp delivery (only for users who opt in and only the phone number you provide).
• Emergent LLM / OpenAI / Google AI — language and image generation used for player cutouts and editorial summaries (input is limited to public match metadata).

The current list of sub-processors may evolve. We will update this section when we add or remove a provider.

We use first-party cookies and browser localStorage to:

• Keep you signed in across sessions.
• Remember UI preferences such as theme and selected leagues.
• Persist user-generated content such as manually regenerated daily-double betslips (stored locally on your device, not on our servers).
• Measure aggregated, non-identifying usage to debug performance issues.

You can clear cookies and local storage at any time via your browser settings, but doing so will sign you out and reset your preferences.

• Account data: retained while your account is active and for up to 24 months after deletion to satisfy legal, accounting, or fraud-prevention obligations.
• Operational logs: retained for up to 90 days, then automatically purged or anonymised.
• Aggregated analytics & model-calibration data: may be retained indefinitely in fully anonymised form.
• Support communications: retained for up to 36 months for service quality and dispute resolution.

We apply industry-standard technical and organisational safeguards including:

• TLS 1.2+ encryption for all data in transit.
• Passwords stored using a salted bcrypt hash; never in plaintext.
• Role-based access controls and audit logging for internal staff.
• Regular dependency scanning and security patching.

No system is perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours, as required by law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time for processing that relies on consent.
• Lodge a complaint with your local data protection authority (e.g., the Information Commissioner's Office in the UK, your national DPA in the EEA, or the Office of the Privacy Commissioner in your jurisdiction).

To exercise any of these rights, email privacy@ndakubet.com. We respond within 30 days; complex requests may take longer and we will inform you if so.

The Service is intended for users who are at least 18 years old (or the legal age of majority in their jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at privacy@ndakubet.com and we will delete it promptly.

We operate globally, and your information may be processed in countries outside your own. When we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to a country that has not received an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses or equivalent measures.

NDAKUBET provides statistical predictions and educational content. We are not a bookmaker and do not accept bets, wagers, or stakes. Football outcomes are uncertain and past performance does not guarantee future results.

If you choose to use third-party betting operators, please bet responsibly and only with money you can afford to lose. Help is available at GamCare, BeGambleAware, or your local responsible-gambling helpline.

Our Android and iOS applications request only the permissions strictly necessary to operate the Service:

• Internet access to fetch fixtures, predictions, and live updates.
• Notifications (optional) to deliver score alerts and your daily double drop.
• Storage (optional) to cache content for offline viewing.

We do not collect contacts, SMS, call logs, microphone, camera, or precise location data through the mobile app. Crash diagnostics are limited to anonymised stack traces and device model information.

If you uninstall the app, locally cached data is removed by your operating system. Account data on our servers persists until you request deletion.

We may update this Policy to reflect changes in our practices, legal obligations, or the Service itself. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app message before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: