← Back to 30BG Fan Passport

Privacy Policy

Compliant with the Nigeria Data Protection Act (NDPA 2023) | Effective Date: October 2026

1. Overview & Data Protection Principles

This Privacy Policy outlines how 30BG Fan Passport ("we", "our", or "the Community Platform") collects, uses, stores, and protects personal data in strict compliance with the Nigeria Data Protection Act (NDPA 2023) and applicable global data protection standards.

2. Data We Collect

When you register and engage with the 30BG Fan Passport, we collect only data strictly necessary for passport issuance, community interaction, and clipper rewards:

• Identity & Profile Data: Full Name, Nickname, and generated Passport ID.
• Contact Information: Email address and Phone number (used for SMS OTP verification).
• Location Data: City and Country of residence (used for local chapter leaderboards and event check-ins).
• Linked Social Accounts: Social media handles and profile links (TikTok, Instagram, YouTube Shorts, X) submitted by content clippers for campaign view verification.
• Engagement & Points Ledger Data: Points accrued, referral relationships, event check-in records, and view snapshot audits.

3. Why We Collect Your Data (Legal Basis & Purposes)

Under the NDPA 2023, we process personal data under legitimate community interests and explicit user consent:

• To issue, manage, and verify unique cryptographic 30BG Fan Passport IDs and QR codes.
• To authenticate users via one-time SMS passwords (OTP) to prevent automated bot activity and spam.
• To track and audit community points, leaderboards, and referral bonuses in a tamper-proof ledger.
• To review, verify, and allocate points/rewards for Davido Clip & Earn submissions.
• To communicate crucial chapter news, concert ticketing drops, and leaderboard announcements.

4. Data Retention & Security Measures

All sensitive information, including passwords and authentication tokens, are encrypted with industry-standard cryptographic hashing (Bcrypt & SHA-256). We enforce strict security policies, HTTPS encryption in transit, and firewalled database storage hosted on secure cloud infrastructure.

5. Your Rights Under the NDPA 2023

As a data subject under Nigerian law, you possess enforceable rights:

• Right to Access: You can request a digital copy of all personal data held about you at any time.
• Right to Rectification: You may correct inaccurate or incomplete profile information through your in-app passport settings.
• Right to Erasure (Deletion): You have the legal right to delete your account and erase your personal records from our active systems.
• Right to Object & Restrict Processing: You can revoke consent for social account linkage or marketing communications.

6. How to Delete Your Account

Users can permanently delete their account at any time:

• In-App: Navigate to Profile Settings → Account → Tap "Delete My Account & Personal Data".
• By Email: Send a formal data deletion request from your registered email address to [email protected] with the subject "Data Erasure Request". All personal identifiers will be completely sanitized within 72 hours.