Skip to content
Legal

Privacy Policy

What we collect when you play, why we need it, who we share it with, and how to get it back or deleted. Short version: we collect what the game needs to work, and nothing we can't justify.

Last updated 12 August 2026 About 9 minutes to read NDPR & GDPR aligned

The short version

We collect three kinds of information: what you give us when you register, what the game generates as you play, and basic technical data about the device you play on. We use it to run matches, keep the tables fair, and fix things that break.

We do not sell your personal data. We do not run ads inside matches. Local Wi-Fi and offline games never leave your device.

What we collect

CategoryExamplesWhere it comes from
Account Username, email address, country, avatar choice, password hash You, at sign-up
Gameplay Matches played, results, rank, coin balance, club membership, house-rule settings Generated as you play
Device Device model, OS version, app version, language, crash logs, approximate region from IP Collected automatically
Communications In-game chat, support tickets, feedback and reports you submit You, when you write to us or others
Purchases Which coin pack you bought and when — never your card number Google Play

Payment details are handled entirely by Google Play. We receive a confirmation that a purchase succeeded, and nothing more.

How we use it

  • To create your account, match you with opponents, and save your progress across devices.
  • To operate Fair Play Guard — spotting bots, collusion and disconnect abuse.
  • To answer your support tickets and investigate player reports.
  • To fix crashes and understand which features are actually used.
  • To send service messages such as security alerts and material changes to these policies.

We only send marketing email if you opt in, and every one of those has an unsubscribe link that works immediately.

Our legal bases

Where the NDPR or GDPR applies, we rely on:

  • Contract — to give you the account and matches you signed up for.
  • Legitimate interests — to keep games fair, prevent fraud, and improve the app.
  • Consent — for optional analytics and marketing email. You can withdraw it at any time.
  • Legal obligation — where we must keep records, for example for tax on purchases.

Who we share it with

We share the minimum needed, with:

  • Other players — your username, avatar, rank and club are visible in lobbies and leaderboards. Your email never is.
  • Infrastructure providers — hosting, crash reporting and email delivery, all under contract and bound to our instructions.
  • Google Play — for purchases and subscription status.
  • Authorities — only where we're legally required to, and we'll tell you unless we're barred from doing so.

Local & offline play

Matches played over a local hotspot or against the offline AI run entirely on the devices at the table. Moves, chat and results from those games are not sent to our servers, and they don't count toward global rankings.

When your device next reconnects, we sync only your coin balance and unlocked cosmetics — not the contents of offline matches.

Cookies & analytics

The app itself doesn't use cookies. This website uses one essential cookie to remember whether you have dismissed banners, and nothing else by default.

In-app analytics are aggregated and pseudonymous — we look at how many people finished a tutorial, not at what any one player did. You can turn analytics off in Settings → Privacy → Share usage data.

How long we keep it

  • Account data — while your account is active, then 30 days after deletion.
  • Match history — 24 months, so leaderboards and season records make sense.
  • Chat and reports — 12 months, so we can investigate patterns of harassment.
  • Purchase records — as long as tax law requires, typically 7 years.
  • Crash logs — 90 days.

Your rights

Wherever you live, you can ask us to:

  • Give you a copy of your data in a portable format.
  • Correct anything that's wrong.
  • Delete your account and the data attached to it.
  • Restrict or object to a particular use, including profiling for matchmaking.
  • Withdraw consent you previously gave.

Most of this is self-service in Settings → Privacy. For anything else, write to hello@ossaispace.com — we respond within 30 days. If you're not satisfied, you can complain to the Nigeria Data Protection Commission or your local supervisory authority.

Children

NaijaGamez is not intended for children under 13. We don't knowingly collect their data. If you believe a child has created an account, contact us and we'll remove it promptly.

Accounts registered as under 18 have chat restricted to friends by default and are excluded from public leaderboards.

Security

  • Traffic between the app and our servers is encrypted in transit (TLS 1.3).
  • Passwords are stored hashed and salted — we can never read yours.
  • Access to production data is limited to staff who need it, and is logged.
  • We'll notify you and the regulator within 72 hours of confirming a breach that affects you.

International transfers

Our servers are in Nigeria and the European Union. If your data moves outside your country, we rely on standard contractual clauses or an equivalent safeguard, and we keep a copy available on request.

Changes

When we change this policy materially, we'll tell you in-app at least 30 days beforehand and update the date at the top. Older versions are available on request.

Contact us