Privacy Policy

Last updated: 12 October 2026

This policy explains what information Betman360 ("we", "us") collects when you use betman360.com, how we use it, and the choices you have. Analytics starts when you visit unless you have chosen Don't accept in our cookie panel. You can stop it at any time using Cookie preferences in the footer.

Information We Collect

  • Phone number — collected when you pay via M-Pesa, subscribe to a VIP plan, or verify access with an access code. Used to initiate M-Pesa STK push requests, match your subscription/purchase to you, and — where you've opted in — deliver tips by SMS.
  • M-Pesa transaction data — checkout request IDs, transaction amounts, M-Pesa receipt numbers, and payment status, received from Safaricom's Daraja API when you complete an M-Pesa payment. We use this solely to confirm and reconcile your purchase.
  • Email address — collected if you pay by card, for receipts and to identify your subscription with our card processor.
  • Card payment data — we do not collect or store your card number, expiry date, or CVV. Card payments are processed entirely by Paystack, a PCI-DSS compliant payment processor; Betman360's servers never see your full card details.
  • Usage data — unless you decline analytics, our own marketing statistics record anonymous visits, campaign codes and referring website hostnames. When Google Analytics is enabled, it also measures pages viewed, navigation, filters, tabs, offer views, checkout steps, verified purchases and access outcomes. Google may process standard device/browser and approximate location information. We exclude phone numbers, emails, passwords, access codes, payment receipt/reference values, raw search text and arbitrary URL query strings from our analytics payloads. Verified payment values, currencies and a separate analytics transaction identifier may be included.
  • Cookies and browser storage — essential storage supports site functionality; analytics storage supports usage measurement unless you decline. The choices and storage categories are explained below.

Cookie and Browser Storage Policy

The cookie panel offers Accept and Don't accept. Analytics starts by default; Don't accept stops new collection. A saved refusal is respected on later visits. Both choices let you browse, pay and access purchased tips. You can reopen Cookie preferences in the footer at any time. We remember this choice in your browser's local storage until you change it or clear that storage.

  • Essential cookies — session and security cookies support sign-in and protect forms against forged requests. A purchase-access cookie remembers access to paid tips. These are used to provide the features you request and remain available when you decline analytics.
  • First-party analytics — unless you decline, a signed betman_analytics_visitor cookie stores a random identifier for up to 180 days from its latest renewal. It lets us count returning browsers without storing your name or contact details in marketing visit records. This reporting works independently of Google.
  • Google Analytics — when enabled and not declined, Google may set _ga and related analytics cookies. Our tag requests an expiry of 180 days, renewed by use. Google Analytics loads on arrival unless you have declined.
  • Other preferences — browser storage may remember your display theme. Clearing cookies or browser storage can reset preferences and require you to verify purchase access or sign in again.

Declining analytics stops new collection for that browser and suppresses pending server analytics events. We remove our analytics visitor cookie and attempt to clear the Google analytics cookies available to this site. Events already transmitted or included in historical statistics are not automatically erased by changing this preference; contact us for a deletion request.

Marketing Sources and Campaign Links

Free-tip coupon links grant access to one published slip while the link is active. We count successful coupon-page loads in daily totals without storing IP addresses or browser identifiers in those counters. These totals include repeat loads and automated link previews, and continue when analytics is declined. Separate unique-visitor and campaign-visit reports use the analytics choice described above.

Marketing links may contain utm_source, utm_medium, utm_campaign, utm_content and utm_term. Unless you decline analytics, we record approved campaign codes, a public landing-page path, an arrival time and an anonymous browser identifier. We also record an external referrer's hostname when available, without its path or query string. Please do not put personal information in campaign codes.

Our staff marketing panel compares recorded visits from links we generated, other tagged links visitors use, external referrals and direct or unknown arrivals. Internal navigation does not create extra visits within a 30-minute visit window. A new campaign source or external referrer can start another visit. These statistics describe browsers and link labels, not verified identities. Declined analytics, blocked scripts, cleared cookies and missing referrers can limit the figures.

How We Use Your Information

We use the data above to: process and verify payments; activate and manage VIP subscription access; deliver purchased tips (including by SMS, where applicable); respond to support requests; detect and prevent fraud or abuse; and improve the site and our prediction models. We do not sell your personal data to third parties for marketing purposes.

Who We Share Data With

We share the minimum data necessary with the service providers who help us run Betman360: Safaricom (M-Pesa/Daraja API) to process mobile-money payments, Paystack to process card payments, our hosting/infrastructure providers, and Google for usage statistics when Google Analytics is enabled and you have not declined analytics. Our first-party marketing reports do not require sending visit records to Google. Providers process data under their own privacy terms. We may also disclose information if required by law, court order, or a lawful request from a Kenyan regulatory authority.

Data Retention

We retain phone numbers, transaction records, and subscription history for as long as needed to provide the service, resolve disputes, and meet our accounting and tax obligations under Kenyan law. You can request deletion of data we're not otherwise required to keep — see "Your Rights" below.

Marketing visit records and analytics data are kept while needed to assess campaigns and improve the service, subject to periodic review and deletion requests. Cookie expiry does not itself delete historical server records. Google Analytics retention is controlled separately in our Analytics property settings.

Data Security

We apply reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to production systems. No method of transmission or storage is 100% secure, so we can't guarantee absolute security, but we treat any suspected breach seriously and will notify affected users where required by law.

Your Rights

You can ask us to access, correct, or delete the personal data we hold about you, or to stop using your phone number for SMS delivery, by contacting us through the channels below. We'll respond within a reasonable time and may need to verify your identity (e.g. via the phone number or email on file) before acting on a request.

Children's Privacy

Betman360 is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will remove it.

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements and will post an updated date here. Changes that require a new analytics choice will be presented through the cookie controls.

Contact Us

Questions about this policy or your data can be sent via X (Twitter) or Telegram.