Legal
Privacy Policy.
Last updated April 2026
What we collect
- Account: username, email, phone number, country.
- KYC: National ID number, a liveness selfie, date of birth.
- Gameplay: match history, moves, scores, disputes.
- Device: IP address, user-agent, device fingerprint (hashed).
What we do with it
- Verify you're a real, unique human (KYC + anti-fraud).
- Match you against players at your skill level.
- Pay you out, and the tax authorities where required.
- Detect and prevent fraud, multi-accounting and match fixing.
Who we share with
- M-Pesa / Daraja (for STK and B2C payouts).
- Our KYC provider (Smile Identity / Sumsub).
- Payment-card processors (Stripe / Flutterwave) if you top up by card.
We do not sell your data.
Your rights
Export, correction and deletion requests: privacy@shanz.ke. We respond within 30 days per Kenyan DPA.