Privacy Policy

1. Introduction

Blackstars WorldCup Fundraiser (“Platform,” “we,” “us,” or “our”) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Platform.

This Policy is prepared in accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana and aligns with internationally recognised data protection principles.

By using our Platform, you acknowledge that you have read and agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect personal data necessary to provide our services, including:

• Information you provide: Your name and phone number, as submitted when making a sponsorship. For Organisations, we may collect the organisation name and representative contact details.
• Payment information: Sponsorship details, mobile money transaction references, and payment confirmation status. We do not store your mobile money PIN or sensitive financial credentials; all payments are handled by trusted third-party mobile money providers.
• Automatically collected information: IP address, browser type, device information, pages visited, and usage patterns. We also use cookies to enhance your experience.
• From third parties: Payment confirmation and status from mobile money operators, and SMS delivery reports from communication providers.

3. How We Use Your Information

We use your personal data to process your sponsorships and issue receipts, generate raffle tickets and conduct draws, notify winners and process prize claims, send transactional communications (confirmations, winner notifications), send promotional messages about upcoming raffles (with your consent), comply with anti-money laundering (AML) and regulatory requirements, detect and prevent fraud, maintain audit trails, and improve our Platform through anonymised analytics.

We will not process your data beyond these purposes without your consent, unless required by law.

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share it with trusted payment processors, SMS providers, email service providers, and cloud hosting providers — all contractually bound to protect your data. We may also disclose data to the National Lottery Authority (NLA), Data Protection Commission (DPC), Bank of Ghana, Ghana Revenue Authority, or law enforcement where required by law.

When raffle winners are announced, we display the winner’s first name and last initial, prize won, winning ticket number, and draw date. Winners may request anonymised announcements by contacting us beforehand.

5. Data Retention

We retain your data only as long as necessary for the purposes it was collected or as required by law. Financial, sponsorship, raffle, and audit records are retained for 7 years for regulatory compliance. Communication logs are retained for 3 years. After the retention period, data is securely deleted or anonymised.

6. Your Rights

Under the Data Protection Act, 2012 (Act 843), you have the right to access the personal data we hold about you, request correction of inaccurate data, object to processing including for direct marketing, withdraw your consent at any time, request that we stop processing your data if it causes unwarranted damage or distress, seek compensation for damages resulting from a breach, and object to solely automated decision-making.

To exercise your rights, contact us using the details at the end of this Policy. We will respond within 30 days. You may also lodge a complaint with the Data Protection Commission at https://dataprotection.org.gh.

7. Data Security

We implement appropriate measures to protect your data, including HTTPS/TLS 1.3 encryption for data in transit, AES-256 encryption for sensitive data at rest, role-based access controls on our administrative platform, secure payment processing with no financial credentials stored by us, and comprehensive audit trails for all administrative actions.

In the event of a data breach, we will notify the DPC and affected individuals as required by Act 843.

8. International Data Transfers

Your data is primarily stored in Ghana. Where data is processed by third-party providers outside Ghana, we ensure adequate data protection safeguards are in place in accordance with Sections 47–52 of Act 843.

9. Cookies

We use strictly necessary cookies (for security), performance cookies (anonymised usage analytics), and functional cookies (to remember your preferences). You can manage cookies through your browser settings. We do not use cookies for third-party advertising.

10. Children’s Privacy

Our Platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If discovered, associated raffle entries will be voided.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via SMS, email, or a notice on the Platform. Continued use after changes constitutes acceptance.

12. Contact Us

For questions or requests regarding this Privacy Policy, contact the Blackstars WorldCup Fundraiser Data Protection Office via the contact information provided on our website.

This Privacy Policy is governed by the laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843).