Legal
Privacy Policy
What we collect, why we hold it, who else sees it, how long we keep it, and how to make us change or delete it.
Last updated 4 September 2026
1. Who controls your data
TipHub Technologies Limited (RC—————), of —————, Lagos, Nigeria, is the data controller for personal data processed through TipHub. We process it in line with the Nigeria Data Protection Act 2023 (NDPA) and the guidance of the Nigeria Data Protection Commission (NDPC).
For anything in this policy, including access and deletion requests, write to privacy@tiphub.com.ng.
2. What we collect
- Account details
- Your name, username, email address and, if you register with a password, a cryptographic hash of that password. We never store your password itself.
- Sign-in with Google
- If you use Google to sign in, Google tells us your name, email address and Google account identifier. We do not receive your Google password and we do not gain access to anything else in your Google account.
- Creator verification
- Creators supply a National Identification Number (NIN) so that a published performance record belongs to a real, identifiable person. See section 3 — we handle this differently from everything else.
- Content you publish
- Booking codes, the selections behind them, the bookmaker they belong to, any commentary you write, and the settled outcome of each code.
- Purchases and subscriptions
- What you bought, when, the amount, and the reference returned by our payment provider. Card numbers, CVVs and bank credentials are handled entirely by the payment provider and never reach our systems.
- Technical data
- IP address, device and browser type, and the pages you open. This is what lets us keep accounts secure and understand which parts of the product are used.
- Support correspondence
- Messages you send us, and our replies.
3. How we handle creator NINs
A National Identification Number is sensitive, and a platform that publishes performance records has an obvious reason to be careful with it. We designed this deliberately.
We do not store your NIN, and we cannot read it back. When you supply it, we compute a keyed one-way hash and store only that hash together with the last four digits. The original number is discarded. This lets us tell whether two creator applications used the same NIN, and lets you confirm your own by its last four digits, without us ever holding the number itself.
A consequence worth knowing: because the value is irreversible, we cannot show you your NIN, send it to you, or disclose it to anyone else — including on request.
Your NIN is never displayed publicly, never shown to other users, and never shared with bookmakers.
4. Why we hold it, and on what legal basis
- To run your account
- Creating and securing your account, signing you in, and providing what you asked for. Basis: performance of our contract with you.
- To verify codes and settle results
- Reading booking codes at the bookmaker and recording how they settled, so creator records are accurate. Basis: performance of our contract.
- To take payment
- Processing purchases and subscriptions and resolving payment disputes. Basis: performance of our contract, and our legal obligations.
- To verify creators
- Confirming that a creator is a real, identifiable adult before their record is published. Basis: your consent, and our legitimate interest in preventing impersonation and fraud.
- To keep the platform safe
- Detecting fraud and abuse, enforcing our terms, and acting on content reports. Basis: our legitimate interest in a platform that is not used to harm people.
- To meet legal duties
- Tax and accounting records, and responding to lawful requests from authorities. Basis: legal obligation.
- To send you email
- Service messages such as password resets and receipts, which you cannot opt out of while you hold an account, and marketing email, which you can. Basis: contract, and consent for marketing.
5. What is public
TipHub is a discovery platform, so some of what a creator does is public by design. If you hold a creator account, the following can be seen by anyone: your creator name and avatar, the booking codes you publish, the bookmaker each belongs to, and your settled performance history including win rate, return figures and individual results.
Your email address, your NIN, your payment history and your purchases are never public. If you use TipHub only to read and buy content, your activity is not published at all.
7. Transfers outside Nigeria
Some of our providers operate servers outside Nigeria. Where personal data is transferred abroad, we rely on the transfer conditions permitted by the NDPA — an adequacy determination, or contractual terms that hold the recipient to an equivalent standard of protection.
8. How long we keep it
- Account data
- For as long as your account is open.
- After you close your account
- Deleted or anonymised within 90 days, except where a category below requires us to keep something longer.
- Payment records
- Seven years, because tax and accounting law requires it. These records are retained even after account closure.
- Published codes and results
- Retained after account closure but detached from your identity. A settled performance record is what makes historical win rates meaningful, so the results remain while the person behind them does not.
- Creator NIN hash
- Deleted when your creator account is closed, unless we need it for an open fraud investigation.
- Support correspondence
- Two years from the last message.
- Security and access logs
- Twelve months.
9. Your rights
Under the NDPA you have the right to:
- Ask what personal data we hold about you, and get a copy of it.
- Have inaccurate data corrected.
- Have your data deleted, subject to the retention rules in section 8.
- Ask us to restrict how we use your data, or object to a use based on legitimate interest.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time, where we relied on consent.
- Complain to the Nigeria Data Protection Commission if you think we have got this wrong.
Write to privacy@tiphub.com.ng and we will respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.
Deleting your account
Email privacy@tiphub.com.ng from the address on your account and ask us to close it. We will confirm what will be removed, and what has to be retained under section 8, before we act on it.
11. Security
Passwords are stored only as hashes. Creator NINs are stored only as keyed hashes. Traffic is encrypted in transit. Sessions can be revoked centrally, so changing your password immediately invalidates every existing sign-in. Access to production data is limited to the people who need it.
No system is perfectly secure. If a breach ever affects your rights or freedoms, we will notify you and the NDPC as the NDPA requires.
12. Children
TipHub is strictly for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has an account, tell us at compliance@tiphub.com.ng and we will close it and delete the data. Our responsible gambling page explains the other protections we apply.
13. Changes to this policy
We will update this page when our practices change, and the date at the top always reflects the current version. Where a change materially affects how we use data you have already given us, we will tell you directly before it takes effect.