Privacy Policy
Last updated: October 2026
At Surebets, we take your privacy seriously. This policy explains what data we collect when you use our website and services, why we collect it, and how we keep it safe. We comply with the Kenya Data Protection Act (2019).
1. Who We Are
Surebets ("we", "us", "our") is an independent sports data analysis service operating in Kenya since 2016. We are not affiliated with SportPesa, Betika, or Safaricom M-Pesa. Our website address is surebets.co.ke.
For any privacy-related questions, you can contact us at info@surebets.co.ke.
2. What Data We Collect
We collect only the data necessary to provide our services:
- Phone Number (M-Pesa): When you purchase a betslip, we collect your Safaricom phone number to process the M-Pesa payment and to deliver the betslip via SMS.
- Transaction Code (Optional): If you contact us via WhatsApp or email about a payment issue, you may provide your M-Pesa transaction code. We use this solely to verify the payment and resend your slip.
- Usage Data (Cookies): We use basic cookies and local storage to remember your preferences (like dark mode) and to track anonymous analytics (e.g., which pages are most visited). We do not use invasive tracking pixels.
- Technical Logs: Our web servers automatically log your IP address, browser type, and the time of your visit for security and debugging purposes.
3. How We Use Your Data
We use your data for the following specific purposes:
- To process payments: Your phone number is passed to the M-Pesa STK push system to prompt you for payment.
- To deliver your betslip: Your phone number is used to send the betslip via SMS.
- To provide customer support: If you contact us, we use the information you provide to resolve your issue.
- To improve our service: Anonymous usage data helps us understand which features are useful and which need fixing.
- To comply with the law: We may be required to retain records for tax or regulatory purposes.
4. Data Sharing & Third Parties
We do not sell your personal data to third parties. However, we do share data with trusted service providers to operate our service:
- Safaricom M-Pesa: To process your payment, we send your phone number and the transaction amount to Safaricom's Daraja API.
- SMS Gateway Providers: We share your phone number with an SMS provider to deliver the betslip.
- Web Hosting Provider: Our site is hosted on Netlify, which processes standard web traffic data.
All third-party providers we use are contractually obligated to keep your data secure and to use it only for the specific purpose we request.
5. How Long We Keep Your Data
We retain your phone number for as long as it is needed to provide the service (e.g., resending slips) and for as long as legally required. If you request deletion, we will delete your phone number from our active records, though some financial records may be retained for tax compliance.
6. Your Rights (Under the Kenya Data Protection Act)
You have the following rights regarding your personal data:
- The right to be informed: To know what data we collect and why.
- The right of access: To request a copy of the data we hold about you.
- The right to rectification: To correct any inaccurate data.
- The right to erasure: To request that we delete your data.
- The right to object: To object to how we use your data.
To exercise any of these rights, email info@surebets.co.ke. We will respond within 30 days.
7. Cookies
Cookies are small text files stored on your device. We use a minimal number of cookies:
- Functional Cookies: To remember your preferences (e.g., dark mode toggle).
- Analytics Cookies: To understand basic page traffic (we prefer privacy-first analytics).
You can disable cookies in your browser settings at any time, though this may affect your experience on the site.
8. Security
We take security seriously. All traffic to and from our site is encrypted using HTTPS (SSL/TLS). We do not store your M-Pesa PIN. Our payment integration uses the official Safaricom Daraja API, meaning your PIN is entered directly into the M-Pesa menu on your phone, never on our website.
While we strive to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security, but we work hard to keep your information safe.
9. Children's Privacy
Our services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law or our practices. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
11. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
Email: info@surebets.co.ke
WhatsApp: +254 718 981 122 ↗