PlayMates is committed to protecting your personal data. This policy explains how we collect, use, and protect your information in compliance with the Kenya Data Protection Act, 2019.
1. Introduction
PlayMates ("we", "our", "us") operates the platform at www.playmates.co.ke. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform. By using PlayMates, you consent to the collection and use of your information as described in this policy.
2. Information We Collect
2.1 Information You Provide
- Full name or username
- Email address
- M-Pesa phone number
- Password (stored in encrypted form — we never see your actual password)
2.2 Information Collected Automatically
- Device type and browser information
- IP address
- Login timestamps
- Game history (scores, outcomes, stake amounts)
2.3 Financial Information
- Deposit and withdrawal transaction records
- M-Pesa transaction references
- Coin balance history
We do not collect or store your M-Pesa PIN or any full payment card details. Payment processing is handled securely by IntaSend.
3. How We Use Your Information
- Create and manage your account.
- Process deposits and withdrawals via M-Pesa.
- Run and record game outcomes fairly.
- Prevent fraud, cheating, and money laundering.
- Send important account notifications (password resets, transaction confirmations).
- Comply with legal and regulatory obligations under Kenyan law.
- Improve the PlayMates platform based on usage patterns.
We do not use your information for advertising and we do not sell your data to any third party for marketing purposes.
4. How We Share Your Information
4.1 Service Providers
- IntaSend — our payment processor, for processing M-Pesa deposits and withdrawals. IntaSend receives your phone number and transaction amount only.
- Google Firebase — our cloud infrastructure provider, for authentication, database storage, and hosting. Firebase processes your data in accordance with Google's Privacy Policy.
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government authority, including:
- The Office of the Data Protection Commissioner (Kenya)
- Kenya Revenue Authority (KRA) for tax compliance
- Law enforcement agencies in the case of fraud or criminal investigation
5. Data Retention
| Data Type |
Retention Period |
| Account data (name, email, username) |
While account is active + 90 days after deletion |
| Transaction records (deposits, withdrawals, games) |
7 years (Kenya Tax Procedures Act requirement) |
| Login and activity logs |
12 months |
After the applicable retention period, your data is securely deleted or anonymised.
6. Data Security
- All data is transmitted over HTTPS (encrypted connection).
- Passwords are hashed using industry-standard encryption — we cannot see your password.
- Access to your financial data is restricted to authorised personnel only.
- Firebase security rules ensure that users can only access their own data.
- We regularly review our security practices.
If you suspect your account has been compromised, contact us immediately at puzzlesplay@zohomail.com.
7. Your Rights
Under the Kenya Data Protection Act, 2019, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Request correction of inaccurate or incomplete data.
- Right to deletion: Request deletion of your account and personal data, subject to our legal retention obligations.
- Right to withdraw consent: Stop using PlayMates and request deletion of your data at any time.
- Right to lodge a complaint: Lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.
To exercise any of these rights, contact us at puzzlesplay@zohomail.com. We will respond within 21 days as required by law.
8. Cookies
PlayMates uses essential cookies and browser storage to keep you logged in during your session and remember your preferences. We do not use advertising cookies or tracking cookies that follow you across other websites.
9. Children's Privacy
PlayMates is strictly for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we discover that a user under 18 has registered, we will immediately delete their account and all associated data. If you believe a minor has registered, please contact us at puzzlesplay@zohomail.com.
10. Third-Party Links
PlayMates may contain links to third-party websites such as M-Pesa or IntaSend. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by displaying a notice on the platform when you log in. The updated policy will show the new "Last Updated" date at the top.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us: