Effective date: 1st June, 2025
The data controller responsible for your personal data is:
DUKAMNETI ONLINE SHOPS
Business Name: BN-RPC2MXMX
Republic of Kenya
Email: support@dukamneti.co.ke
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our services and the choices you have associated with that data. Unless otherwise defined in this Privacy Policy, terms used have the same meanings as in our Terms and Conditions.
We collect the following categories of personal data:
When you register, we collect:
Lawful basis: Performance of a contract — necessary to create and manage your account and provide subscription access.
When you subscribe, payment transactions are processed by our payment providers (PayPal, M-Pesa/Safaricom). We do not store your full card details. We retain records of transaction IDs, subscription status, and payment amounts.
Lawful basis: Performance of a contract; legal obligation (financial record-keeping).
We automatically collect information about how you use our website, including:
Lawful basis: Legitimate interests — to maintain, improve, and secure the website.
If you opt in to browser push notifications, we store your browser's push subscription token (endpoint URL and encryption keys) to deliver match alerts and tip updates. No personally identifiable information is contained in the token itself.
Lawful basis: Consent — you explicitly enable notifications via the opt-in prompt. You can withdraw consent at any time by disabling notifications in your browser settings.
We use the following types of cookies:
You can configure your browser to refuse all cookies. Disabling strictly necessary cookies will prevent you from logging in or using subscription features.
Lawful basis: Strictly necessary cookies — legitimate interests. Analytics and marketing cookies — consent (where required by applicable law).
| Purpose | Data used | Lawful basis |
|---|---|---|
| Provide and maintain the website | Account, Usage | Contract performance |
| Process subscription payments | Account, Payment | Contract performance |
| Send match alerts and tip updates | Push subscription, Email | Consent |
| Customer support | Account, correspondence | Contract performance / Legitimate interests |
| Improve our services | Usage, Analytics | Legitimate interests |
| Fraud prevention and security | Usage, Account | Legitimate interests / Legal obligation |
| Comply with legal obligations | Account, Payment | Legal obligation |
We share data with the following processors, who are contractually bound to use it only for the purposes we specify:
Your data may be transferred to and processed in countries outside your own, including the United States, where data protection laws may differ from those in your country. Where we transfer data from the European Economic Area (EEA) or the United Kingdom to third countries, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), or we transfer to countries with an adequacy decision.
AWS stores data in the EU (eu-central-1, Frankfurt) where possible. For further information on the safeguards in place, contact us at support@dukamneti.co.ke.
We may disclose your Personal Data where required to:
We do not sell your personal data to third parties.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including HTTPS encryption, access controls, and regular security reviews. However, no method of internet transmission or electronic storage is 100% secure.
Depending on your jurisdiction, you have the following rights regarding your personal data. To exercise any of them, email support@dukamneti.co.ke or use our contact form. We will respond within 30 days.
Our website may contain links to third-party sites. We have no control over and assume no responsibility for the content or privacy practices of those sites. We encourage you to review the privacy policy of every site you visit.
Dukamneti Sports does not address anyone under the age of 18. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or a prominent notice on our website at least 14 days before they take effect, and will update the effective date at the top of this page. Continued use of the website after the effective date constitutes acceptance of the updated policy.