MoPlay Legal
Privacy Policy
How MoPlay collects, uses, shares, stores and protects personal data.
Version 2026-07-29
Version and controller
MoPlay Tech Ltd is the data controller for personal data processed for its own platform purposes. MoPlay operates a sports and recreational facility discovery, booking, payment, group-funding, provider-management, support and verification platform.
MoPlay Tech Ltd (RC 8673118)
Registered address: No. 4F Kufena Close, Unguwan Rimi, Kaduna, Kaduna State, Nigeria
Website: moplay.app
Support: support@moplay.app
Disputes: disputes@moplay.app
General enquiries: hello@moplay.app
Personal data we collect
- Account and identity data: name, email, phone number, profile image, role, login and authentication records.
- Booking data: facility, sport, date, time, duration, price, status, references, QR or verification records, cancellations, refunds and support history.
- Split Session data: organizer, invite token, funding deadline, share count, payer account, participant names assigned to shares, amounts and payment status.
- Payment records: reference, amount, currency, payment channel, status, refund, reversal, chargeback, settlement and reconciliation information. Complete card details are processed by the payment processor and are not ordinarily stored by MoPlay.
- Provider data: business, facility, contact, staff-role, pricing, availability, KYC, bank, subaccount, settlement, compliance and onboarding information.
- Technical and usage data: device, browser, IP address, timestamps, logs, security events, error records, analytics, cookies, local storage and feature interaction data.
- Communications and content: support requests, feedback, reviews, venue requests, uploaded images and other information submitted to MoPlay.
How we collect data
- Directly from users, organizers, participants, providers, staff members and facility-request forms.
- Automatically through the website, applications, authentication systems, logs, cookies and similar technologies.
- From payment processors, banks, providers, fraud-prevention services, communications providers and other service providers where needed to operate or protect the service.
Why we use personal data and lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Create and secure accounts; authenticate users. | Performance of a contract; legitimate interests in security and abuse prevention. |
| Display facilities, manage availability and complete bookings. | Performance of a contract; steps requested before entering a contract. |
| Create, fund, confirm, expire and refund Split Sessions. | Performance of a contract; legitimate interests in reconciliation and fraud prevention. |
| Process payments, payouts, refunds, chargebacks and accounting records. | Performance of a contract; legal obligations; legitimate interests. |
| Send transactional messages and provide support. | Performance of a contract; legitimate interests in service delivery. |
| Improve features, measure pilot performance and diagnose errors. | Legitimate interests; consent where required for non-essential analytics. |
| Marketing messages. | Consent or another lawful basis permitted by applicable law; users may opt out. |
| Comply with law, prevent fraud and protect legal rights. | Legal obligation; legitimate interests; establishment, exercise or defence of legal claims. |
Split Session visibility
Split Session links are unlisted rather than manually permissioned. Anyone who receives the link may see a limited session summary. Payment requires a MoPlay account.
Unauthenticated visitors do not see the participant ledger, payer identities or full names assigned to shares. Organizers may see payer display names, names assigned to shares, share counts, amounts and status so they can coordinate the session.
Ordinary participants generally see aggregate progress and information connected to their own payment.
Sharing personal data
MoPlay may share personal data only as reasonably required with facility providers, Split Session organizers, payment processors, banks, hosting, database, authentication, storage, email, SMS, maps, analytics, error-monitoring, support, professional-adviser, compliance and fraud-prevention providers.
Providers receive information reasonably necessary to fulfil and verify confirmed bookings. Organizers receive information reasonably necessary to coordinate Split Sessions. MoPlay does not sell personal data to advertisers.
International transfers
Some service providers may process data outside Nigeria. Where required, MoPlay will use lawful transfer mechanisms and reasonable contractual, technical and organisational safeguards appropriate to the data and destination.
Retention
MoPlay retains personal data only for as long as reasonably necessary for account operation, bookings, refunds, disputes, fraud prevention, safety, legal rights, tax, accounting, regulatory and record-keeping obligations.
Retention periods differ by data type. Transaction and accounting records may be kept for the period required by applicable law. Security logs and support records may be retained where reasonably necessary to investigate abuse, protect users or defend legal claims.
Data may be anonymised and retained in non-identifying form for analytics and product improvement.
Data rights
- Request access to personal data held about you.
- Request correction of inaccurate or incomplete data.
- Request deletion, restriction or objection where the legal conditions apply.
- Request portability of eligible data.
- Withdraw consent where processing is based on consent, without affecting earlier lawful processing.
- Object to direct marketing and opt out of promotional messages.
- Complain to MoPlay and, where applicable, to the Nigeria Data Protection Commission.
Security
MoPlay uses reasonable technical and organisational measures such as encryption in transit, secure authentication, access controls, role-based permissions, logging, backups, vendor controls and incident response procedures. No online service can guarantee absolute security.
Users and providers must protect passwords and devices and notify MoPlay promptly about suspected unauthorised access.
Children
MoPlay accounts and payments are intended for adults aged 18 or older. A parent or legal guardian should manage bookings involving minors. MoPlay should not knowingly collect payment-account data directly from a child.
Automated tools and decisions
MoPlay may use automated rules to detect suspicious payments, protect accounts, prevent duplicate bookings, enforce funding deadlines or flag activity for review.
MoPlay does not intend to make a solely automated decision that produces a significant legal effect without an appropriate lawful basis and safeguards.
Marketing and communications
Transactional messages about accounts, payments, bookings, security, refunds and provider operations are part of the service.
Marketing messages will include a reasonable method to opt out where required. Opting out of marketing does not stop essential transactional messages.
Policy updates
MoPlay may update this Policy for legal, technical, operational or product reasons. The revised version and date will be published. Material changes will be communicated through a reasonable channel where required.
Contact and complaints
Privacy requests may be sent to support@moplay.app. Include enough information for MoPlay to verify the request and identify the relevant account or transaction.
Users may also complain to the Nigeria Data Protection Commission where applicable.