Privacy Policy

1. Data Controller Information

YellowBet Kenya ("we", "us", "our") is the data controller responsible for your personal information on yellowbet-kenya.com. We operate as a licensed sports betting platform regulated by the Betting Control and Licensing Board of Kenya (BCLB). Our operations are subject to the Kenya Data Protection Act 2019, and we apply GDPR-equivalent standards to all user data as best practice.

For any data-related enquiries, contact our Data Protection Officer at: [email protected]

2. What Data We Collect

Category	Data Points	Purpose
Account Data	Full name, date of birth, phone number, email address, national ID/passport number	Account creation, legal identity verification, AML compliance
Financial Data	M-Pesa number, deposit/withdrawal history, transaction amounts, payment method tokens	Processing deposits and withdrawals, fraud prevention
Betting Data	Bets placed, stakes, outcomes, win/loss history, bonus usage	Account management, responsible gambling monitoring, BCLB reporting
Technical Data	IP address, device type, browser type, operating system, session duration, page views	Security, fraud prevention, platform optimisation
Communications	Customer support messages, email correspondence, chat logs	Resolving support queries, record keeping
Marketing Preferences	Opt-in/opt-out status for email and SMS promotions	Sending relevant promotions (only if opted in)

3. How We Use Your Data

To create and manage your betting account and verify your identity as required by BCLB regulations
To process deposits and withdrawals via M-Pesa, Airtel Money, and other approved payment channels
To monitor betting activity for responsible gambling purposes, including detecting potential problem gambling behaviour
To comply with Anti-Money Laundering (AML) laws including file Suspicious Transaction Reports (STRs) with the Kenya Financial Intelligence Centre where legally required
To send you account notifications, transaction confirmations, and security alerts
To send promotional offers, bonus notifications, and marketing communications — only if you have opted in and only by your chosen channel
To analyse platform usage patterns and improve our website and mobile application
To protect against fraud, unauthorised access, and other security threats

4. Legal Basis for Processing

Processing Activity	Legal Basis
Account creation and management	Contract performance
Identity verification (KYC)	Legal obligation (BCLB, AML law)
Financial transactions	Contract performance
Responsible gambling monitoring	Legal obligation / Legitimate interests
Marketing communications	Consent (opt-in required)
Security and fraud prevention	Legitimate interests
Analytics and platform improvement	Legitimate interests

5. Sharing Your Data

We do not sell your personal data. We share it only in the following circumstances:

Payment processors (M-Pesa/Safaricom, Airtel Money) — to process your financial transactions
Identity verification providers — to conduct KYC checks as required by BCLB
BCLB and Kenyan regulatory authorities — when legally required to report betting activity
Kenya Financial Intelligence Centre (KFIC) — for mandatory STR reporting
IT service providers — cloud hosting and platform infrastructure partners operating under data processing agreements
Law enforcement — when required by a valid legal order from a Kenyan court

6. Data Retention Periods

Account data: 7 years after account closure (BCLB and AML requirement)
Financial transaction records: 7 years (Kenyan financial regulations)
Betting history: 5 years after last transaction
Support communications: 3 years from the date of resolution
Marketing preferences: Until you withdraw consent or close your account
Website analytics: 26 months (Google Analytics standard)

7. Cookies Policy

YellowBet Kenya uses cookies and similar tracking technologies to improve your browsing experience. The types of cookies we use:

Cookie Type	Purpose	Duration
Essential / Strictly Necessary	Session authentication, security, CSRF protection	Session
Functional	Remembering your language preference, odds format, and login state	12 months
Analytics (Google Analytics)	Understanding how visitors use our site to improve UX	26 months
Marketing / Tracking	Referral tracking, affiliate partner attribution	30 days

You can manage or disable non-essential cookies through your browser settings or by contacting us. Note: disabling essential cookies may affect site functionality.

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate or incomplete data
Erasure — request deletion of your data (subject to legal retention obligations)
Objection — object to processing based on legitimate interests
Restriction — request that we limit how we process your data in certain circumstances
Portability — request a machine-readable copy of your data
Withdraw consent — withdraw marketing opt-in at any time via account settings or by emailing [email protected]

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

9. Data Security

YellowBet Kenya implements appropriate technical and organisational measures to protect your personal data including: 256-bit SSL/TLS encryption in transit; encrypted storage for sensitive data at rest; multi-factor authentication options for your account; regular security audits and penetration testing; strict access controls ensuring staff only access data necessary for their role; and incident response protocols meeting BCLB standards.

In the event of a data breach that poses a risk to your rights, we will notify the Data Protection Commissioner and affected users within 72 hours of discovery, as required by law.

10. Contact & Complaints

Data Protection Officer: [email protected]
Customer Support: [email protected]
Office of Data Protection Commissioner Kenya: www.odpc.go.ke

This policy was last updated on 1 June 2025. We reserve the right to update this privacy policy at any time. Material changes will be communicated via email or a notification in your account. Continued use of the platform constitutes acceptance of the updated policy.

📋 Table of Contents