Privacy Policy

1. Scope

This policy explains how Utabiri collects, uses, stores and shares your personal data when you use our website and services. We process personal data in accordance with the Kenya Data Protection Act, 2019.

2. Data we collect

Account data: full name, email address and password (stored only as a salted hash).

Payment data: the M-Pesa phone number you provide for deposits and withdrawals, transaction amounts and payment references from our payment provider. We never see or store your M-Pesa PIN.

Trading data: your positions, trades, wallet balance and market activity.

Technical data: IP address, device and browser information, and security logs used to protect your account.

3. Why we process it

To operate your account and wallet, execute trades, resolve markets and pay out winnings; to verify your email; to detect fraud, market manipulation and abuse; to meet legal obligations including anti-money-laundering and tax requirements; and to send service notifications such as deposit receipts and resolution alerts.

4. Sharing

We share data only with: our payment provider (to process M-Pesa transactions), our email delivery provider (to send service messages), and regulators or law enforcement where the law requires. We do not sell your personal data.

5. Retention

Account and transaction records are kept for as long as your account is active and thereafter for the period required by Kenyan financial-record and tax laws. Security logs are kept for up to 12 months.

6. Security

Passwords are hashed with a modern memory-hard algorithm; traffic is encrypted in transit; payment webhooks are signature-verified; and sensitive actions are audit-logged. No system is perfectly secure — protect your password and report any suspicious activity immediately.

7. Your rights

Under the Data Protection Act you may request access to, correction of, or deletion of your personal data; object to certain processing; and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any right, email privacy@utabiri.co.ke — we respond within the statutory timelines.

8. Cookies

We use strictly necessary cookies and local storage to keep you logged in and remember preferences. We do not use third-party advertising cookies.

9. Changes

We may update this policy as the service evolves; material changes will be announced in the app before they take effect.