Privacy Policy

1. Data Controller

Moyrad is the data controller responsible for your personal data collected through this Platform. We are accountable for how that data is processed, stored, and shared.

Contact: privacy@moyrad.com | moyrad.com | Lagos, Nigeria

3. How We Collect Your Data

We collect personal data through the following means:

• Directly from you — during registration, deposit, withdrawal, and trading activity
• Automatically — via server logs, cookies, and analytics tools when you interact with the Platform
• Third-party providers — where you authenticate using Google OAuth or other supported providers, we receive profile data from those providers in accordance with their terms
• Payment records — from bank transfer confirmations and our payments infrastructure providers

4. Legal Basis for Processing

We process your personal data under one or more of the following lawful bases under the NDPA 2023:

• Contract performance — processing necessary to provide you with Platform services, including account management, trade execution, and payouts
• Legal obligation — processing required for KYC/AML compliance, tax reporting, or regulatory obligations
• Legitimate interests — processing for fraud prevention, security monitoring, and improving Platform functionality, where not overridden by your rights
• Consent — where you have expressly consented to a specific processing activity, such as marketing communications

5. How We Use Your Data

We use your personal data to:

• Register and maintain your Moyrad account
• Facilitate trades, deposits, withdrawals, and payouts
• Calculate and display your ranked position, XP, badges, and leaderboard ranking
• Process and attribute referral bonuses
• Send transactional emails — including trade confirmations, event resolutions, withdrawal processing, level-up alerts, badge awards, inactivity reminders (at 7 and 30 days), and low-balance notifications
• Conduct KYC/AML verification as required by law
• Detect, investigate, and prevent fraud, manipulation, and abuse
• Comply with applicable Nigerian law and regulatory requirements
• Improve Platform features, fix errors, and analyse user behaviour (using anonymised or aggregated data where possible)
• Send marketing and promotional communications — only where you have consented, and always with an opt-out mechanism

6. Cookies & Tracking

The Platform uses cookies and similar technologies to:

• Maintain your authenticated session
• Remember your preferences
• Collect anonymised analytics on Platform usage
• Monitor Platform performance and errors (via Sentry error monitoring)

You may control cookie settings through your browser. Please note that disabling certain cookies may impair Platform functionality. We do not use cookies to serve third-party advertisements.

7. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with:

• Payment processors and banking partners — to facilitate deposits and withdrawals (for example, Monnify and our banking partners)
• Identity verification providers — for KYC compliance purposes
• Email service providers — including Resend, for transactional email delivery
• Error monitoring services — including Sentry, for Platform stability
• Hosting and infrastructure providers — including Vercel and our cloud database providers
• Regulatory authorities and law enforcement — where required by law, court order, or regulatory directive
• Successors in business — in the event of a merger, acquisition, or restructuring of Moyrad, subject to appropriate data transfer agreements

All third-party service providers are required to handle your data in accordance with applicable data protection law and our data processing agreements.

8. International Data Transfers

Some of our infrastructure and service providers (including Vercel, Sentry, and Resend) may process data outside of Nigeria. Where such transfers occur, we take appropriate steps to ensure adequate protection of your data, including reliance on Standard Contractual Clauses or equivalent safeguards, consistent with the NDPA 2023 transfer requirements.

9. Data Retention

We retain your personal data for as long as necessary to:

• Provide you with Platform services while your account remains active
• Comply with applicable legal and regulatory obligations (minimum 5 years for financial transaction records under Nigerian law)
• Resolve disputes and enforce our agreements

Following account closure or deletion, we will anonymise or securely delete your data within a reasonable period, except where retention is required by law.

10. Your Rights Under the NDPA 2023

As a data subject under the NDPA 2023, you have the right to:

• Access — request a copy of your personal data held by Moyrad
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data, subject to our legal retention obligations
• Restriction — request that we limit how we process your data in specified circumstances
• Data Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw Consent — where processing is consent-based, withdraw your consent at any time

To exercise any of these rights, contact us at: privacy@moyrad.com. We will respond within 30 days. Some rights may be limited where we have overriding legal obligations.

11. Security

We implement technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted storage of passwords using industry-standard hashing (bcrypt)
• JWT-based session authentication with configurable expiry
• HTTPS/TLS encryption for all data in transit
• Role-based access controls for administrative functions
• Real-time error and anomaly monitoring via Sentry

Notwithstanding these measures, no data transmission over the internet is entirely secure. We cannot guarantee the absolute security of data transmitted to or from the Platform. You accept this risk by using the Platform.

12. Children's Privacy

The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered on the Platform, please contact us at privacy@moyrad.com and we will take immediate steps to delete the account and associated data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. Where changes are material, we will notify registered users by email at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy. We will always maintain the current version of this Policy at moyrad.com/privacy.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, contact our Data Protection Officer at:

• Email: privacy@moyrad.com
• Website: moyrad.com
• Address: Lagos, Nigeria

If you are unsatisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.