OnimoLotto Privacy Policy
This policy explains what personal data OnimoLotto collects, why, and what you can do about it. It follows the Nigeria Data Protection Act 2023 (NDPA).
Who we are
Visual Lotto Board (“we”), registered with the Corporate Affairs Commission (CAC) as a business name, BN 9726460, Lagos, Nigeria, is the controller of the personal data described here. Data protection contact: [email protected] .
What we collect
| Data | When | Why |
|---|---|---|
| Email address, sign-in provider, a user ID (and your name and photo if Google provides them) | You sign in | Create and secure your account |
| Guest sessions: a user ID only (no email or name) | You use OnimoLotto as a guest | Run the chat |
| Chats: your messages and our replies | You use the chat | Show your history and run the service |
| Credit balance and ledger, payments (reference, pack, amount, status, time) | You buy or spend credits | Record credits and payments |
| Technical data: IP address, request logs, request counts | Every request | Security, abuse prevention, fixing faults |
We do NOT collect your card or bank details. Payments are made on Paystack’s page. We receive the payment reference, amount and status, and the email on the payment.
How we use it and who else handles it
We use your data to provide the chat, results and forecasts; to keep your balance and payments right; to send your payment receipt; to prevent abuse and fraud; and to meet legal duties. We do NOT sell your data and do NOT use your chats for advertising.
Our chat replies are produced by OnimoLotto’s own software from lottery results data. Your messages are not sent to any third-party artificial intelligence service.
Companies that process data for us:
- Google: sign-in and results data.
- Cloudflare: hosting, our database, security and email delivery.
- Paystack: payment processing.
These providers operate outside Nigeria, so your data is transferred abroad. We use providers that apply their own security and data protection terms. We may also share data when the law or a court requires it.
How long we keep it
- Chats: until you delete them or your account.
- Deleted chats: erased from your account at once. A private copy is kept for 15 days, only so we can review abuse, then permanently erased.
- Payment and credit records: kept for six (6) years following the end of the relevant financial year, in compliance with statutory obligations under the Companies and Allied Matters Act (CAMA 2020) and Federal Inland Revenue Service (FIRS) regulations. They hold your user ID, payment references and amounts, and no messages. After your account is deleted they are kept in this form, and we cannot link them to you by name.
- Request counters and logs: short-lived, for security.
Email fingerprint after deletion (90 days). When you delete your account we keep a one-way fingerprint (a scrambled value) of your email address for 90 days, then erase it. We use it only to recognise the same address if it signs up again, so deleting and re-registering cannot be used to collect the free monthly credits repeatedly. This is our legitimate interest in preventing abuse. The fingerprint cannot be turned back into your email address, and it is not used for anything else.
Deleting your account: use Settings, then Delete account. It erases your chats, their 15-day copies and your login. Remaining credits are lost and are not refunded. Payment and credit records are kept as described above.
Security
Connections are encrypted, sign-in tokens are checked on every request, and each user can only read their own chats and balance. No system is perfectly secure. If a breach puts your rights at risk we will tell you and the NDPC as the law requires.
Children
OnimoLotto is for people 18 and over. You must be 18 or older to use it, create an account or buy credits. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will erase it.
Cookies and storage
OnimoLotto does not set its own cookies. To keep you signed in, our sign-in service (Firebase) saves a session in your browser’s storage on your device. This applies to guests too. If you clear your browser’s site data you will be signed out, and a guest will lose access to the guest chats.
We do not use advertising or tracking cookies in OnimoLotto. When you pay, you go to Paystack’s page, which may set its own cookies under its own policy. If we add advertising or analytics later, we will update this policy first.
Our separate results websites and apps have their own policies, listed in the policy center.
Changes
If we change this policy we will post the new version here and change the date at the top. For a change that affects you materially, we will also tell you in the app.
Contact
Questions or requests: [email protected]. Help with payments and your account: [email protected].