Privacy Policy
Data we collect and why
PlayCo Technology Ltd, the operator of Shabiki Kenya, collects personal data that is necessary to provide a licensed betting and gaming service under BCLB Licence BK00000671 and Public Gaming Licence PG0000428. The categories of data collected are set out below.
Registration data includes your full legal name, date of birth, national ID or passport number, mobile phone number and M-Pesa registered number. This data is required to verify your identity, confirm you are aged 18 or above and comply with Kenya's Betting, Lotteries and Gaming Act. Without this data your account cannot be activated.
Transaction data covers all deposits, withdrawals, bet placements and game activity associated with your account. This includes M-Pesa transaction references, Paybill 290063 payment records, Visa or Mastercard card tokenisation references and Tether USDT wallet addresses where applicable. Transaction records are retained for a minimum of five years as required by the BCLB and the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA).
Technical data includes your IP address, device type, browser version, operating system and session timestamps. This data is used for fraud detection, account security and platform performance monitoring. It is not used for third-party advertising profiling.
How your data is used and shared
Your personal data is used exclusively for account management, transaction processing, regulatory compliance and responsible gaming obligations. Shabiki Kenya does not sell your data to third-party marketers. Data may be shared with the following categories of third parties where legally required or operationally necessary.
| Recipient category | Purpose | Legal basis |
|---|---|---|
| BCLB (Kenya) | Regulatory reporting and licence compliance | Legal obligation |
| Safaricom (M-Pesa) | Payment processing via Paybill 290063 | Contract performance |
| KYC verification provider | Identity document verification | Legal obligation |
| Game content providers | Game session data for fairness auditing | Legitimate interest |
| Fraud detection services | Transaction risk scoring | Legitimate interest |
No data is transferred outside Kenya to countries that do not provide an adequate level of data protection without your explicit consent, except where required by a BCLB regulatory instruction.
Your rights and data retention
Under Kenya's Data Protection Act 2019, you have the right to access the personal data held about you, request corrections to inaccurate data, object to processing for certain purposes and request erasure of data that is no longer required. Requests can be submitted by contacting Shabiki Kenya support through your registered account.
Account data is retained for the full duration of your account and for five years following account closure. Transaction data is retained for five years from the date of each transaction. Data held solely for responsible gaming monitoring is retained for three years after the monitoring event.
Cookies placed on your device when you visit this website are limited to functional and analytical categories. No advertising or tracking cookies from third-party networks are placed without your consent. You can review and withdraw cookie consent at any time using the cookie settings accessible from the footer of this site.
Contact and updates
The data controller is PlayCo Technology Ltd, the operator of Shabiki Kenya. For data protection queries, account data requests or complaints about data handling, contact Shabiki Kenya support through the registered account portal at Paybill 290063. The BCLB is the supervisory authority for data matters related to licensed gambling activity in Kenya.
This policy may be updated when regulatory requirements change or new data processing activities are introduced. Material changes will be communicated to registered account holders by SMS to their registered mobile number at least 14 days before the change takes effect.