NAKO Privacy Policy

Last updated: 4 October 2026

NAKO respects your privacy and is committed to processing personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

POPIA establishes requirements covering matters including accountability, processing limitation, purpose specification, openness, security safeguards and data-subject participation. South African Government

1. Information We Collect

Depending on how you interact with NAKO, we may collect:

• your full name;

• email address;

• cellphone number;

• competition and entry information;

• order and transaction information;

• payment status and transaction references;

• creator or referral codes;

• correspondence with NAKO;

• prize-delivery information where you are a winner;

• technical information such as IP address, browser/device information and website activity where collected through our systems or authorised analytics services; and

• other information reasonably necessary to operate our services or comply with law.

NAKO does not need to store complete card details where payments are handled by an authorised payment provider.

2. Why We Process Your Information

We may process personal information to:

• process competition participation and transactions;

• administer competitions;

• identify and contact winners;

• deliver prizes;

• provide customer support;

• prevent fraud and abuse;

• maintain transaction and competition records;

• measure creator/referral campaign performance;

• improve and secure the website;

• comply with legal and regulatory obligations; and

• send marketing communications where we have an appropriate lawful basis to do so.

3. Legal Basis for Processing

NAKO will process personal information only where permitted under applicable law.

Depending on the circumstances, this may include processing necessary to perform an agreement with you, comply with legal obligations, pursue legitimate operational interests or where you have provided valid consent.

4. Payment Information

Payments may be processed by an independent third-party payment service provider.

Payment providers may process information necessary to authorise, verify, settle, refund or investigate transactions in accordance with their own legal obligations and privacy practices.

The identity of NAKO's payment provider should be inserted here once the final provider has approved NAKO.

5. Service Providers

NAKO may use trusted service providers to assist with:

• website hosting;

• backend/database infrastructure;

• payment processing;

• email and communications;

• analytics;

• fraud prevention;

• cloud infrastructure; and

• prize delivery.

Where those providers process personal information on NAKO's behalf, appropriate safeguards will be used as required by applicable law.

6. International Transfers

Some technology providers used by NAKO may process or store information outside South Africa.

Where personal information is transferred internationally, NAKO will take appropriate steps required under POPIA to ensure that the transfer is lawful and appropriately protected.

POPIA specifically regulates the flow of personal information across South Africa's borders. South African Government

7. How Long We Keep Information

NAKO will retain personal information only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law.

Different categories of records may have different retention periods, particularly where transaction, competition, tax, fraud-prevention or regulatory records must be retained.

Information that is no longer required will be deleted, destroyed or de-identified where appropriate.

8. Security

NAKO will implement reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, interference, alteration or disclosure.

No internet-based service can guarantee absolute security.

9. Your Rights

Subject to POPIA and other applicable laws, you may have the right to:

• request access to personal information NAKO holds about you;

• request correction of inaccurate or outdated information;

• request deletion or destruction where legally applicable;

• object to certain processing;

• withdraw consent where processing depends on consent; and

• complain to the Information Regulator.

POPIA expressly establishes data-subject participation and rights/remedies concerning unlawful processing. Justice

10. Marketing

NAKO will manage direct electronic marketing in accordance with POPIA and other applicable requirements.

Where required, you will be given an opportunity to consent to marketing and to opt out of future marketing communications.

Transactional messages concerning an entry, payment, competition, prize or customer-support request are different from promotional marketing and may still need to be sent to administer the service.

11. Cookies and Analytics

NAKO may use cookies or similar technologies necessary for website functionality, security, analytics and permitted marketing purposes.

Where legally required, appropriate information and choices will be provided regarding non-essential technologies.

12. Children's Information

NAKO competitions are intended for adults aged 18 years and older.

NAKO does not intentionally collect children's personal information for competition participation.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology or legal obligations.

The latest version will always display its effective date.

14. Contact Us

Questions or requests concerning your personal information can be sent to:

NAKO

Email: support@nakoapp.org

You may also lodge a complaint with South Africa's Information Regulator, which is the independent body established under POPIA. eservices.inforegulator.org.za