Privacy Policy

Last updated September 2026

This Privacy Policy explains what information Ibile Hub (“Ibile Hub”, “we”, “us”) collects when you use our games, the Ibile Hub app and this website (the “Service”), why we use it, who we share it with, and the rights you have over it under the Nigeria Data Protection Act 2023 (NDPA). We are the data controller for the information described here.

Information we collect

Account information: the email address you sign in with; the display name you choose; your avatar (one of our preset avatars, or a photo you upload); and, if you add one, a backup email address and whether it has been verified.
Sign-in and device information: a device identifier and session records, used to keep you signed in and to alert you when a new device signs in. We store sign-in codes only in scrambled (hashed) form, and they expire after a few minutes.
Gameplay information: the matches you play and their results, your ratings for each game, statistics, achievements, daily-reward streak and missions, saved games, and the items you own and equip.
Wallet and transaction information: your Coins, Gems and Cowries balances and a record of every change to them (top-ups, purchases, conversions, rewards and gifts). For top-ups we keep the amount, the result and the payment reference. Paystack collects your payment details directly. We never receive or store your full card number.
Social information: your friends and friend requests, the messages you send and receive from friends, gifts, and referral codes you share or use.
Responsible-play settings: any spending limit, time reminder or break you set, and when it changes.
Usage events: the app sends us events about how it is used, such as screens viewed, matches started and ended, store purchases, and top-ups started and finished. They include your account identifier, your platform (Android, iOS or web) and the time, so we can understand and fix problems. They never include your email address, phone number or card details. We check every event for these and reject any that contain them.
Push notification tokens: if you allow notifications, a token that lets us send notifications to your device.
Communications: messages you send us by email.

How we use it

To provide the Service (performing our contract with you): signing you in, running matches, calculating ratings and leaderboards, saving games, keeping your wallet and inventory, and powering friends, messages and gifts.
To process top-ups through Paystack and credit your Coins, and to investigate failed or disputed payments.
To send you service messages: sign-in codes, new-device security alerts, receipts, confirmations of limit changes, gift and referral notices, and your data export. We don't send marketing emails.
To send push notifications you've allowed, such as when it's your turn. You can switch these off in the app or your device settings.
To keep play fair and safe (our legitimate interests, and legal obligations): preventing cheating, fraud and abuse, enforcing our Terms, and enforcing the responsible-play limits you set.
To improve the Service (our legitimate interests): using usage events to see what works, what breaks and where players get stuck.
To meet legal obligations, such as keeping financial records and responding to lawful requests.

What other players see

Your display name, avatar, the cosmetics you've equipped, your ratings, game statistics, achievements and match results can be seen by other players on leaderboards, public profiles and friend suggestions. Your email addresses, balances and transactions are never shown to other players. Messages are visible only to you and the friend you are talking to.

How we share it

We share information only as needed to run the Service, with providers that process it on our behalf:

Paystack, to process top-ups.
Google Firebase, to deliver push notifications (Firebase Cloud Messaging) and to store uploaded avatar photos (Firebase Storage).
Our email delivery provider, to send sign-in codes and other service emails.
Hosting and infrastructure providers that run our servers and databases.

We may also disclose information where the law requires it, to protect players or the Service, or as part of a sale or restructuring of the Service under equivalent protections. We do not sell your personal information, and we don't share it with advertisers.

Some of these providers may process information outside Nigeria. Where they do, we rely on the safeguards the NDPA requires for international transfers.

Cookies & local storage

This website doesn't use advertising or analytics cookies. The app stores a few things on your device, such as your sign-in session, preferences, offline saved games and any top-up that is waiting to be confirmed, so it works as you expect. You can clear them by signing out or uninstalling the app.

How long we keep it

We keep your account information for as long as your account is open.
When you delete your account, we immediately erase your display name, avatar, backup email, settings and achievements. The account is shown as “Deleted account”, and you are signed out on every device.
Your wallet transaction record is not erased on deletion. It is an append-only financial record we must keep for accounting, fraud-prevention and legal purposes. Payment records are kept for as long as the law requires.
Past match results and ratings remain part of other players' match histories and leaderboards, attributed to “Deleted account”.
We keep the link between your sign-in address and the deleted account so that the account can't be reopened or taken over.
Usage events are kept only for as long as we need them to operate and improve the Service.

Your rights

Under the NDPA you have the right to:

Access the personal information we hold about you;
Rectification: correct information that is wrong or incomplete;
Erasure: have your information deleted, subject to the records we must keep;
Portability: receive your information in a structured, machine-readable form;
Object to processing based on our legitimate interests, and to restrict certain processing;
Withdraw consent at any time where we rely on it, for example for push notifications;
Complain to the Nigeria Data Protection Commission (NDPC) if you think we've mishandled your information.

You can use the main rights directly in the app under Settings → Account:

Download my data emails you an export of your profile, settings, statistics, ratings, achievements, match history, missions, balances and transaction history. It is sent to your verified backup email, so add and verify one first.
Delete account erases your profile and signs you out everywhere, as described above. We email a code to your sign-in address to confirm it's you. Deletion is immediate and permanent, and any remaining balances and items are forfeited.

You can change your display name, avatar and backup email in the app at any time. For any other request, email hello@ibile.games. We may need to confirm your identity first.

Children

Ibile Hub is only for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has created an account, contact us and we will close it and delete their information.

Security

We protect your information with measures including encrypted connections, hashed sign-in codes, device-bound sessions, alerts when a new device signs in, and hosted payment pages, so card details never reach our servers. No system is perfectly secure. We'll notify you and the NDPC of a serious breach where the law requires.

Changes

We may update this policy as the Service evolves. We'll post the new version here and update the date above. We'll tell you about significant changes in the app or by email.

Contact

Questions about privacy, or want to exercise your rights? Email us at hello@ibile.games.