This Privacy Policy explains how Moyone Ltd, trading as Moyrad ("Moyrad", "we", "us", or "our"), collects, uses, stores, shares, and protects personal data when you use the Moyrad Platform at moyrad.com (the "Platform"). It is issued in compliance with the Nigeria Data Protection Act 2023 ("NDPA") and the Nigeria Data Protection Regulation 2019 ("NDPR").

Please read this Policy carefully. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Platform.

1. Data Controller

Name: Moyone Ltd (trading as Moyrad)
Address: Lagos, Nigeria
Email: legal@moyrad.com
Website: moyrad.com

Moyrad is the Data Controller for all personal data collected through the Platform. Where Moyrad engages third-party service providers to process personal data on its behalf, those providers are Data Processors operating under Moyrad's instruction.

2. Personal Data We Collect

We collect and process the following categories of personal data when you register, use, or interact with the Platform:

Category	Data Elements	Purpose
Account & Identity	Full name, email address, password (bcrypt hashed, cost 12), phone number, gender, date of birth, profile image, email-verification status	Account creation, authentication, age verification, user identification
Financial & Transactional	Wallet balance (Points), referral points balance, deposit records, withdrawal requests, bank account details (name, number, bank), trade history, positions held, transaction ledger	Processing payments, calculating payouts, fraud detection, AML compliance
Forecasting & Performance	Brier accuracy scores, win/loss counts, experience points (XP), level, tier, ranked stats (LP, MMR, division)	Ranked mode computation, skill scoring, leaderboards, platform integrity
Technical & Behavioural	Last login date and IP address, account status and reason, admin action logs, notification records, favourites, marketing email opt-in flag	Security monitoring, account management, fraud detection, product improvement
Authentication Artefacts	OAuth account link (Google), session tokens, email verification tokens	Secure sign-in and session management

We also collect data you provide voluntarily, such as correspondence with our support team (support@moyrad.com or legal@moyrad.com).

We do not knowingly collect special-category data (as defined under the NDPA) such as biometric data, health information, or political opinions, except where explicitly required by applicable law (e.g. certain KYC documents that may reveal national origin).

3. How We Use Your Personal Data

3.1 Legal Bases for Processing

We process personal data under one or more of the following lawful bases under the NDPA:

Performance of a contract: processing necessary to provide you with Platform services, including account management, trade execution, and payment processing;
Compliance with a legal obligation: processing required to meet our AML, KYC, tax, and regulatory duties;
Legitimate interests: processing for fraud prevention, security monitoring, product improvement, and communication with users: where these are not overridden by your rights;
Consent: where we ask for your consent before processing (e.g. marketing emails, analytics cookies). You may withdraw consent at any time.

3.2 Specific Uses

We process your personal data for the following purposes:

Creating and managing your Moyrad account;
Authenticating your identity and securing your account;
Processing deposits, withdrawals, and trade transactions through Payaza;
Verifying your bank account details via Payaza name-enquiry;
Conducting KYC and AML checks as required by Nigerian law;
Calculating and displaying forecasting accuracy scores (Brier Scores), ranked performance, and XP;
Resolving prediction markets and distributing payouts;
Detecting and preventing fraud, collusion, market manipulation, and prohibited conduct;
Responding to your support requests and resolving disputes;
Sending transactional emails including account verification, deposit confirmations, withdrawal notifications, and market resolutions (via Resend);
Sending marketing emails where you have opted in (you may unsubscribe at any time);
Monitoring Platform performance and diagnosing errors (via Sentry);
Analysing user behaviour and improving product features (via PostHog);
Measuring advertising effectiveness and conversion rates (via Meta Pixel);
Complying with legal obligations, court orders, or regulatory requests.

4. Third-Party Data Processors

We share your personal data with the following sub-processors who assist us in operating the Platform. Each processor is bound by data processing agreements and is required to handle your data securely and only for the specified purposes:

Provider	Purpose	Data Shared
Payaza	Payment processing, deposits, withdrawals, bank-account name verification	Name, bank account details, transaction amounts
Google / Firebase	Google OAuth sign-in	Name, email address, Google account identifier
Resend	Transactional and verification email delivery	Name, email address, email content
Sentry	Application error monitoring and debugging	Error logs, device/browser metadata, IP address
PostHog	Product analytics and user-behaviour analysis	Usage events, device metadata, IP address
Meta (Facebook) Pixel	Advertising and conversion tracking	Interaction events, IP address, browser metadata

We do not sell your personal data to third parties. We do not share your data with advertising networks beyond what is described for Meta Pixel conversion tracking above.

We may share your data with law enforcement, regulatory authorities, or courts where we are legally required to do so or where we believe disclosure is necessary to protect the rights, property, or safety of Moyrad, our users, or the public.

5. Cookies and Tracking Technologies

5.1 What We Use

The Platform uses the following tracking technologies:

PostHog analytics: collects usage events, page views, feature interactions, and session metadata to help us understand how users navigate the Platform. PostHog may set first-party cookies or use session identifiers. This processing is based on legitimate interests (product improvement) or, where required, consent.
Meta (Facebook) Pixel: a tracking script loaded on our public-facing pages (including the /thankyou landing page) that reports user interactions and conversions to Meta for advertising measurement purposes. This processing is based on consent obtained via our cookie consent mechanism.
Essential cookies: strictly necessary session and authentication cookies required for the Platform to function. These cannot be disabled without impairing your use of the Platform and do not require consent.

5.2 Cookie Consent

On your first visit to the Platform, you will be presented with a cookie consent notice allowing you to accept or decline non-essential cookies (PostHog analytics and Meta Pixel). You may update your preferences at any time through the Platform settings or by contacting us at support@moyrad.com.

5.3 Managing Cookies

You may also control cookies through your browser settings. Blocking all cookies may prevent some parts of the Platform from functioning correctly. For information on how to manage cookies in your browser, visit your browser provider's help pages.

6. Marketing and Communications

We send marketing communications (including promotional offers, new market announcements, and campaign updates) only where you have opted in during registration or subsequently through your account settings. Every marketing email includes an unsubscribe link. Clicking unsubscribe will remove you from our marketing list within a reasonable period.

We operate a WhatsApp community for Platform updates and community engagement. Joining the WhatsApp community is voluntary and is made available via a link on our marketing pages. WhatsApp is operated by Meta Platforms and its own privacy policy governs data processed within WhatsApp.

We do not send unsolicited commercial communications and do not share your email or phone number with third parties for their marketing purposes.

7. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are:

Account and identity data: retained for the duration of your account and for 7 years after closure (to satisfy AML, tax, and financial record-keeping obligations);
Transaction records: retained for 7 years in accordance with financial record-keeping requirements;
Error logs (Sentry): typically retained for 90 days;
Analytics data (PostHog): retained subject to PostHog's standard retention schedule (typically 12 months for raw event data);
Marketing opt-in records: retained until you withdraw consent and for a reasonable period thereafter as evidence of consent;
Support correspondence: retained for 3 years after the matter is resolved.

On account closure, we anonymise or delete personal data that is no longer required, except where retention is necessary to comply with applicable law.

8. International Data Transfers

Some of our sub-processors (including Google/Firebase, Sentry, PostHog, and Meta) may process your data outside Nigeria. Where data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with the NDPA, including by implementing standard contractual clauses or using processors that operate under recognised data protection frameworks.

Payaza is a Nigerian-based payment processor and processes your payment data within Nigeria.

9. Your Rights Under the NDPA 2023

Under the Nigeria Data Protection Act 2023, you have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you;
Right to rectification: you may request correction of inaccurate or incomplete data;
Right to erasure: you may request deletion of your personal data where it is no longer necessary, or where you withdraw consent (subject to legal retention obligations);
Right to restrict processing: you may request that we limit processing of your data in certain circumstances;
Right to data portability: you may request your data in a structured, commonly used, and machine-readable format;
Right to object: you may object to processing based on legitimate interests, including profiling;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing;
Right to lodge a complaint: you may file a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated.

To exercise any of these rights, please email legal@moyrad.com with your name, registered email address, and the specific right(s) you wish to exercise. We will respond within 30 days. We may request verification of your identity before processing the request.

10. Data Security

We implement technical and organisational security measures to protect your personal data, including:

Passwords are stored using bcrypt hashing at cost factor 12; plaintext passwords are never stored;
HTTPS encryption for all data in transit between your browser and the Platform;
Access controls limiting staff access to personal data to those with a legitimate need;
Sentry error monitoring to detect and address security incidents promptly;
Rate-limiting on authentication and registration to prevent brute-force attacks;
Regular platform security reviews.

Despite our measures, no internet transmission or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the NDPC in accordance with the NDPA's notification requirements.

11. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. Our registration system enforces a minimum age of 18 through date-of-birth validation and a mandatory age-confirmation checkbox.

If you believe a minor has registered an account, please notify us immediately at legal@moyrad.com. We will promptly close the account and delete associated data.

12. Third-Party Links

The Platform may contain links to third-party websites or services (such as WhatsApp). This Privacy Policy applies only to Moyrad's Platform. Moyrad is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or the Platform's features. Material changes will be notified to you via email to your registered address at least 14 days before taking effect. The "Effective Date" at the top of this document will be updated accordingly.

Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes. Where changes require fresh consent, we will seek this separately.

14. How to Contact Us

For general data queries or to exercise your rights: legal@moyrad.com
For general support: support@moyrad.com
Platform: moyrad.com
Operating company: Moyone Ltd, Lagos, Nigeria

If you are not satisfied with our response to a privacy complaint, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

Last updated: 13 June 2026 | Version 2.1