Privacy policy
Last updated: 20 October 2026
Draft for legal review — replace with counsel-approved text before launch.
This policy explains what personal data Realpundit collects when you use our apps and websites, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. We collect only what we need to run a fair, verified community of pundits and to handle payments safely.
1. Who we are
Realpundit is the data controller for personal data processed through the Realpundit apps, the web app at bets.realpundit.com and the website realpundit.com (together, the “Service”).
For any privacy question or request, contact our privacy team at privacy@realpundit.com. You can also reach support at support@realpundit.com.
We process personal data in line with the Nigeria Data Protection Act 2023 and, where they apply to you, other data protection laws such as the Kenya Data Protection Act 2019, the Ghana Data Protection Act 2012 and the EU and UK General Data Protection Regulation.
2. Personal data we collect
| Category | What it includes |
|---|---|
| Sign-in details | Phone number (and its country), email address, password (stored only as a secure hash), and — if you use Google or Facebook — the name, email address and profile picture they share with us. |
| Identity and age | Legal first and last name, confirmation that you are 18 or older, the date you confirmed it, and any referral code you used. |
| Profile | Usernames, display names, avatars, bio, country, currency, favourite sports and bookmakers, subscription prices. |
| Content | Betcodes, betslip screenshots and the text we read from them, captions, comments, reactions, quotes, rebets, chat messages and attachments, reports you make. |
| Activity | Who you follow, codes you copy, unlock or rebet, groups you join, AI votes, notifications and how you use features. |
| Payments and wallet | Payment records (amount, currency, purpose, provider reference, status), subscription and renewal status, a provider token for renewals (never your full card number), wallet ledger, withdrawals, bank name, account number (encrypted) and the account holder name returned by the bank, and a hash of your wallet PIN. |
| Device and technical | IP address and the country it indicates, device type and operating system, app version, push-notification token, sign-in method, language, and error logs. |
| Communications | Messages you send to support and the official @realpundit account, and records of emails and WhatsApp messages we send. |
We do not collect your precise location. We do not knowingly collect sensitive data (such as health or religious data); please do not include it in posts or chats.
3. Where the data comes from
- From you, when you sign up, complete your profile, post, chat, pay or contact us.
- Automatically from your device and how you use the Service.
- From Google or Facebook, if you sign in with them.
- From payment providers (payment and bank-account verification results) and from people who refer you.
- From other users, for example when someone mentions you, adds you to a group or reports content.
4. How we use it and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and secure your account; sign you in with one-time codes, email links or Google/Facebook | Contract |
| Verify betslips (automated text recognition), match selections to fixtures, settle results and show them | Contract |
| Calculate grades and rankings and decide what appears in your timeline and Explore | Contract; legitimate interests (a fair, useful community) |
| Process purchases, subscriptions and renewals; credit earnings; pay referral rewards; process withdrawals | Contract; legal obligation (accounting and tax) |
| Check that bank-account names match your legal name, prevent fraud, money laundering, chargebacks and fake accounts | Legal obligation; legitimate interests (protecting users and the Service) |
| Confirm you are 18+ and keep minors off the Service | Legal obligation; legitimate interests |
| Deliver chats, service messages and notifications | Contract |
| Push notifications and optional WhatsApp or email updates | Consent (you can withdraw it at any time) |
| Moderate content, handle reports and appeals, enforce our Terms | Legitimate interests; legal obligation |
| Understand usage, fix errors and improve the Service | Legitimate interests |
| Respond to support requests and legal requests | Contract; legal obligation |
5. Automated decisions
Some features rely on automated processing:
- Slip reading and settlement — text recognition reads your screenshot and results are settled from match data. You review selections before publishing and can report errors.
- Grades — a formula based on your settled results, accuracy, posting volume and consistency. It affects how prominently your profile appears in Explore.
- Bank-name matching — we compare the name your bank returns with your legal name. A mismatch blocks the account until a person reviews it.
- Fraud signals — for example a code that does not appear in its screenshot is flagged for review.
You can ask for a person to review any automated decision that significantly affects you, and give your point of view, by writing to privacy@realpundit.com.
6. What other people can see
Your username, display name, avatar, bio, public posts, results, grade, tier and follower counts are public — including on share pages and link previews that people without an account can open. Paid and subscriber-only codes are shown only to people with access. Messages are visible to the members of the conversation. Your legal name, phone number, email, wallet, bank details and PIN are never public.
8. International transfers
Our main servers are in the European Union, and some providers process data in other countries, including the United States. When personal data leaves your country we use safeguards the law recognises — such as transfers to countries with adequate protection, standard contractual clauses or the provider’s binding commitments — and we only transfer what is needed for the purposes above.
9. How long we keep data
- Account and profile data: while your account is open, then deleted or anonymised within 30 days of closure.
- Settled posts and results: kept as part of the community record and other users’ purchases and rebets; when you close your account they are anonymised or shown under a deleted-user label.
- Payment, wallet, payout and referral records: at least six years, or longer where tax, accounting or anti-money-laundering law requires.
- Betslip screenshots: for as long as the post exists, and up to 12 months for drafts that are never published.
- Chat messages: while the conversation exists or until deleted, subject to legal holds.
- Security, fraud and moderation records: up to 3 years, or longer if needed for a dispute or legal claim.
- Backups are overwritten on a rolling basis, normally within 30 days.
10. How we protect data
We use encryption in transit (HTTPS/TLS), encryption of bank account numbers at rest, hashed passwords and PINs, PIN lock-outs after failed attempts, row-level access controls in our database, short-lived signed links for private files, and staff access limited to those who need it, with admin actions logged. No system is completely secure; if a breach affects your rights we will notify you and the regulator as the law requires.
11. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate or incomplete data;
- have data deleted, unless we must keep it (for example payment records);
- restrict or object to processing based on legitimate interests, including profiling;
- receive your data in a portable format and have it sent to another service;
- withdraw consent at any time (for example to notifications) without affecting earlier processing;
- not be subject to a decision based solely on automated processing that significantly affects you, and ask for human review.
To delete your account, use Settings → Delete account in the app: we review the request and delete your account within 7 days (signing in again before then cancels it), and it cannot be recovered afterwards. To use your other rights, or if you can’t use the app, email privacy@realpundit.com from the email address or with the phone number on your account. We may ask you to verify your identity. We reply within 30 days (one month in the EU and UK), and tell you if we need more time. You can edit most profile details yourself in the app’s settings.
If you are not happy with our response, you can complain to your data protection authority — in Nigeria the Nigeria Data Protection Commission (ndpc.gov.ng), in Kenya the Office of the Data Protection Commissioner, in Ghana the Data Protection Commission, or the supervisory authority in your EU country or the UK ICO.
12. Children
Realpundit is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that a minor has an account, we close it and delete their data except what we must keep by law. If you believe a minor is using Realpundit, tell us at privacy@realpundit.com.
14. Messages from us
We send service messages (sign-in codes, receipts, results, payouts, security alerts) because they are needed to run your account. We send promotional emails or WhatsApp messages only if you agree, and every one includes a way to opt out. You can turn off push notifications in your device settings at any time.
15. Changes to this policy
We will update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant we will tell you in the app or by email before it takes effect. See also our Terms of service.