Effective date: October 17, 2026
Data controller: 18BITS GAMING LTD, RC 9618252, No. 16, Zuwa Dodoma Street, Zone 6, Wuse, FCT, Nigeria (“we”, “us”, “our”)
Contact: support@18bitsgaming.com
This policy explains how we handle personal data when you visit 18bitsgaming.com and its sub-pages (the “Website”). It follows the Nigeria Data Protection Act 2023 (the “NDPA”) and, where they apply to you, other laws such as the GDPR. Our games have their own policies: for the game Don’t Drop, see its privacy policy. Use of the Website is also covered by our Website Terms.
1. Who we are
18BITS GAMING LTD is a game developer registered in Nigeria (RC 9618252). We decide why and how the personal data described here is used, which makes us the “data controller” under the NDPA.
2. What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Technical data sent automatically by your browser: IP address, browser and device type, operating system, pages requested, referring page, date and time. | To deliver the pages, keep the Website secure, spot and stop abuse and attacks, and fix faults. | Legitimate interest |
| Messages you send us (for example by email to support@18bitsgaming.com): your email address, name if you give it, and what you write. | To reply, handle your request, complaint or data request, and keep a record of it. | Legitimate interest; legal obligation where we must keep a record |
| Data-deletion requests made through our delete-data page or by email: the details needed to find and verify your account. | To carry out your request. | Legal obligation; your request |
The Website does not ask you to create an account, does not take payments, and does not ask for sensitive data such as your health, religion, biometrics or government ID. Please do not send us such data. We do not use your data for automated decision-making that has legal or similarly significant effects on you, and we do not sell your personal data.
3. Cookies and similar tools
The Website uses only the cookies strictly needed to work (for example to remember your session or security settings). It does not currently use advertising or tracking cookies. If we add analytics or other optional cookies, we will list them here and ask for your consent before they are set, and you will be able to change your choice at any time. You can also block or delete cookies in your browser settings, though parts of the Website may then not work properly.
4. Who we share data with
We share personal data only with:
- Our hosting and email providers (the Website is hosted by Namecheap, which stores the technical data above and the emails we receive), acting on our instructions;
- Professional advisers (such as lawyers or accountants) where needed and under a duty of confidence;
- Courts, regulators and law-enforcement authorities in Nigeria or elsewhere, where the law requires or allows it.
The Website contains links to other sites and services, such as app stores, Google, Facebook and Unity. Once you follow a link, that site’s own privacy policy applies, not this one.
5. Transfers outside Nigeria
Our hosting provider is based in the United States, so personal data from the Website may be stored and processed outside Nigeria. We make such transfers only where the recipient gives an adequate level of protection, under the safeguards the NDPA allows (such as data-protection contract terms), or with your consent.
6. How long we keep data
- Server logs: normally no more than 90 days.
- Emails and messages: for as long as needed to deal with your matter, then deleted or anonymised, normally within 2 years of the last message, unless the law requires us to keep them longer.
- Deletion-request records: kept for as long as the law requires, so we can show a request was handled.
7. Your rights
Under the NDPA you have the right to:
- be informed about how we use your data, and ask for a copy of it;
- have inaccurate or incomplete data corrected;
- ask us to delete your data where we no longer need it or the law requires it;
- restrict, or object to, our processing, including for direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on it, without affecting what was done before;
- not be subject to solely automated decisions with significant effects.
To use any of these rights, email support@18bitsgaming.com. We may need to confirm who you are first, and we will normally reply within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or to the data-protection authority where you live.
8. Children
The Website is not directed at children under 13 and we do not knowingly collect their personal data. Under the NDPA a person under 18 is a child, so if you are under 18, please ask a parent or guardian before contacting us. If you believe a child has sent us personal data without that permission, tell us and we will delete it.
9. Security
The Website is served over an encrypted (HTTPS) connection, access to our systems is limited to people who need it, and we keep the software up to date. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your data. If a breach is likely to put your rights at risk, we will tell you and the Nigeria Data Protection Commission as the NDPA requires.
10. Changes to this policy
We may update this policy. The new version will carry a new effective date at the top of this page, and if the change is significant we will say so on the Website.
11. Contact us
Questions or requests about your data: email support@18bitsgaming.com or write to 18BITS GAMING LTD, No. 16, Zuwa Dodoma Street, Zone 6, Wuse, FCT, Nigeria.
18BITS GAMING LTD (RC 9618252)
No. 16, Zuwa Dodoma Street, Zone 6, Wuse, FCT, Nigeria
18bitsgaming.com