Privacy Policy - Nibcard Games

Last Updated: January 20, 2026

1. Introduction

Welcome to NIBCARD Games (a subsidiary of NIBCARD Nig Ltd.). We are Nigeria’s premier tabletop game studio and cafe, committed to creating an inclusive community for gamers. Your trust is our most valuable asset. This Privacy Policy outlines how we collect, process, and protect your personal data when you visit our website (www.nibcardgames.com), shop at our online store, visit our Game Café in Abuja, or attend the African Boardgames Convention (AB Con).

2. The Types of Data We Collect

We categorize the information we collect to be transparent about its purpose:

Identity Data: Full name, title, and date of birth (collected to ensure age-appropriate game recommendations and legal capacity for transactions).
Contact Data: Physical billing and delivery addresses, email addresses, and mobile phone numbers.
Financial Data: While we do not store full card numbers, we collect details related to your payment method via our PCI-DSS compliant processors (e.g., Paystack/Flutterwave).
Transaction Data: Comprehensive details about the games you’ve purchased, payments made, and order history.
Technical & Usage Data: Your IP address, browser type, time zone settings, and information on how you navigate our store and blog.
Marketing & Communications Data: Your preferences in receiving updates about new game launches, tabletop events, and community news.

3. Methods of Data Collection

Direct Interaction: Information you provide by filling in forms, creating an account, or communicating with us via WhatsApp, email, or social media.
Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment and browsing patterns using cookies and server logs.
In-Person Collection: Information collected at our physical Game Café or during AB Con registration.

4. Purpose and Legal Basis for Processing

Under the Nigeria Data Protection Act (NDPA), we only process your data when we have a legal basis.

Purpose/Activity	Type of Data	Legal Basis
To register you as a new customer	Identity & Contact	Performance of a contract
To process/deliver orders & manage payments	Identity, Contact, Financial	Performance of a contract
To manage our relationship (notifying you of policy changes)	Identity, Contact, Profile	Legal Obligation
To enable participation in AB Con or game tournaments	Identity, Contact, Usage	Consent & Performance of a contract
To protect our website (fraud prevention)	Technical, Identity	Legitimate Interest

5. Data Retention: How Long We Keep Your Info

We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (usually 6 years following a transaction for Nigerian tax compliance).

If you request that your account be deleted, we will anonymize your data so it can no longer be associated with you for analytical purposes.

7. Disclosure of Your Personal Data

We do not sell, rent, or trade your data. We share it only with:

Logistics Providers: Third-party couriers for game delivery within Nigeria and internationally.
IT & System Administrators: Service providers who support our website hosting and security.
Regulators: The Nigeria Data Protection Commission (NDPC) or law enforcement if required by law.

8. International Data Transfers

Some of our service providers (like email marketing tools or cloud storage) may be located outside of Nigeria. We ensure these providers offer a level of protection equivalent to the NDPA by using “Standard Contractual Clauses” or ensuring they are in jurisdictions with adequate data protection laws.

9. Your Legal Rights

You have extensive rights under the NDPA:

Request Access: Get a copy of the data we hold about you.
Request Correction: Fix incomplete or inaccurate data.
Request Erasure: Ask us to delete your personal data where there is no good reason for us to continue processing it.
Object to Processing: Especially regarding direct marketing.
Data Portability: Request the transfer of your data to you or a third party in a structured, machine-readable format.

10. Security Protocols

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

All online transactions are encrypted using SSL (Secure Sockets Layer).
Access to your data is limited to employees and partners who have a business “need to know.”
We have procedures to deal with any suspected personal data breach and will notify you and the NDPC where we are legally required to do so.

11. Contact Information & Complaints

If you have any questions or wish to exercise your rights, please contact our Data Protection Officer:

NIBCARD Nig Ltd.

Address: Plot 505B, 46th Crescent, 4th Avenue, Gwarimpa, Abuja, Nigeria.

Email: info@nibcardgames.com

Phone: +234 703 817 0881

You also have the right to lodge a complaint at any time with the Nigeria Data Protection Commission (NDPC).