1. Overview
This policy explains what personal data Creative Gaming Entertainment ("CGE") collects, why, and your rights — in line with the Nigeria Data Protection Act 2023 (NDPA). It applies to the CGE website and the CGE Lounge on Bonny Island.
2. What we collect
- Account data: name, email, phone number, gamertag, avatar, and optional location (state/city) you provide.
- Bookings & payments: booking details and payment references. Card details are processed by Paystack — we never see or store your full card number.
- Esports payouts: bank account name, bank, and last 4 digits of your account number (the full number is held by Paystack as a transfer recipient).
- ID verification (optional): if you apply for a verified badge, the ID document you upload is stored in a private bucket and reviewed by our admins.
- Content you post: listings, posts, comments, and messages on the platform.
- Technical data: IP address and basic device info used for security and rate limiting.
3. How we use it
- To run bookings, tournaments, payouts, the marketplace, and community features.
- To process payments and prevent fraud and abuse.
- To contact you about your bookings, vouchers, or account (including via SMS/WhatsApp where you provide a phone number).
- To moderate content and keep the community safe.
- We do not sell your personal data.
4. Who we share it with
- Paystack — payment processing and prize transfers.
- Supabase — our database, authentication, and file storage provider.
- SMS/notification providers — to deliver booking confirmations where applicable.
- Other members see your public profile (name, gamertag, avatar, listings, posts). Your phone number is only shared where you choose to share it (e.g. WhatsApp contact on a trade).
- Authorities, where Nigerian law requires it.
5. Retention & security
- We keep account data while your account is active. Booking and payment records are kept as required for accounting and dispute resolution.
- ID verification documents are retained only as long as needed to review your application and maintain the verified status.
- Data is protected with encryption in transit, row-level security in our database, and access controls on admin functions.
6. Your rights (NDPA)
You can request access to, correction of, or deletion of your personal data, withdraw consent, or object to certain processing. To exercise any of these rights, contact us — we respond within 30 days. You can also lodge a complaint with the Nigeria Data Protection Commission (NDPC).
7. Children
The platform is intended for users aged 13 and above. Lounge visitors aged 10–15 must be accompanied by a guardian, and accounts for online features should be created by users 13+. If you believe a child has created an account, contact us and we will remove it.