Last updated 28 September 2026.
Who is responsible for your data
Cointrivio is operated by Trivet Labs (RC 3164913), a company registered in Nigeria, which decides how your personal data is used. This policy is written with the Nigeria Data Protection Act 2023 in mind.
For anything about your data, write to privacy@cointrivio.com.
What we collect
We collect only what the app needs to work.
- When you register: your name, username, email address and password. The password is stored scrambled, so nobody at Trivet Labs can read it.
- To confirm it is you: one time codes sent to your email, and codes used to reset a password. These expire quickly.
- If you add one: a profile photo.
- When you play: the rounds you play, the questions you were served, the answers you gave, your scores, coins and tickets.
- When you buy tickets: the amount, and the reference our payment provider gives us. We never see or store your card details.
- When you withdraw: your bank name, bank code and account number. We need these to pay you.
- When we have to verify you: a government issued identity document such as your National Identification Number, passport, driver's licence or voter's card, and for a large withdrawal or a risky-looking account, a live photograph or short video used to check that you are the person on the document. Where the size or pattern of your play calls for it, we may also ask where the money you paid in came from.
- From your device: a device identifier, the platform you are on, and the IP address a request came from.
Why we collect it
- To run your account and the game. Without this the app cannot work.
- To pay you. Bank details are used to send withdrawals and for nothing else.
- To keep the game fair. We look at device identifiers, IP addresses and how rounds were played to spot one person running several accounts, or answers arriving faster than a person could give them. This protects the prize money of everyone playing honestly.
- To stop fraud and money laundering, and because the law requires it. Identity documents and any live photograph are used to confirm you are who you say you are before money leaves, and to meet obligations under Nigerian anti-money laundering law. What we do and why is set out in our AML and fraud control policy.
- To tell you things. Notices about contests, prizes and your account appear in the app.
- To meet our obligations, including keeping financial records.
Who else sees it
We do not sell your data. We share only what is necessary with:
- Paystack, which takes your payment when you buy tickets, and holds the card details we never receive
- Cloudinary, which stores images used in the app, including a profile photo if you add one
- Our email provider, which delivers verification and password emails
- Any identity verification provider we use to check an identity document or a live photograph
- Your bank, when we send a withdrawal
- The authorities, where the law requires it, including where we must report a transaction or an account under anti-money laundering law
Some of these operate outside Nigeria, so your data may be handled abroad by them.
How long we keep it
We keep your account data while your account is open. Records of payments and withdrawals are kept longer, because financial records have to be. Identity documents and verification records are kept for as long as anti-money laundering law requires and no longer than we can justify. Some internal logs are cleared automatically after six months.
Please read this carefully. When you close your account from the app, we mark it closed and stop it being used. We do not at present erase the underlying records, including your email address, bank details and game history. If you want your data actually erased, write to us and we will do it by hand, except where we must keep a record for financial or legal reasons.
Your rights
Under Nigerian data protection law you may ask us to:
- tell you what data we hold about you, and give you a copy
- correct anything that is wrong
- erase your data, subject to records we are required to keep
- stop using your data for a particular purpose
Write to privacy@cointrivio.com and we will respond within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission.
Keeping it safe
Passwords are stored scrambled and cannot be read by us. Connections to our servers are encrypted. Identity documents and any live photograph are encrypted and are used for verification and fraud prevention only. Access to player data inside Cointrivio is limited to staff whose role requires it, and what they do is recorded.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the Commission as the law requires.
Children
Cointrivio is for adults of 18 and over. We do not knowingly collect data from children. If we learn that a child has registered, we will close the account and remove the data.
Changes
If we change this policy, the date above changes and we will tell you in the app where the change matters.