Privacy Policy.

Ridim Solution Networks Ltd. (RC 9482453), a company registered in Nigeria at 292 Dakata Kawaji, Nasarawa LGA, Kano State, Nigeria, is the data controller for the personal data described in this policy. We operate the Ridim platform at www.useridim.app.

This policy covers everyone who touches Ridim — account holders running campaigns, events or payroll, and the far larger group of people who never sign up at all: reward claimants, game players, ticket holders and voucher recipients.

Where you use Ridim to reach your own audience — running a campaign, selling tickets, issuing vouchers — you are the controller of the personal data you collect through it, and Ridim processes it on your behalf. You are responsible for having a lawful basis to hold it and for telling those people how you use it.

If you hold an account

• Identity and contact: name, email, phone number, password (stored hashed, never in readable form), profile photo, date of birth, state and city, and interests where you provide them.
• Verification (KYC/KYB): government ID, selfie, BVN-linked details, business registration documents, directors and business address, where the service you use requires it.
• Financial: bank account name, number and bank; your wallet balance and its full transaction history. We never see or store your card PIN or your online banking password.

If you claim a reward or play a game

• The phone number, network or bank details you enter so the reward can be delivered, plus the nickname you choose in a game.
• Gameplay data: answers, scores, timings and chat messages. Live game data carries nicknames and scores — not phone numbers or bank details.

If you buy a ticket or attend an event

• Your name and email, your order and ticket references, what you paid, your check-in record, and your answers to any questions the Organiser added at checkout.

Everyone

• Technical: IP address, device and browser type, approximate location derived from IP, pages visited, and referral parameters in the links you arrive from.
• Support: the content of chats, emails and WhatsApp messages you send us, and the page you were on when you started.
• Cookies and similar: see the cookies section below.

Most of it comes from you. The rest comes from:

• the person who invited you — a Campaign Manager, Organiser or business that uploaded your details to pay or invite you;
• payment and verification partners, who confirm bank account names, resolve identity data and report transaction outcomes;
• your device and network, automatically, when you load a page.

We process personal data under the Nigeria Data Protection Act 2023 (NDPA). The lawful basis depends on what we are doing:

We do not sell personal data. We do not use your data to train third-party AI models.

We share only what a recipient needs to do its job, under contract, and never for their own marketing.

Service providers

• Licensed payment processing — to fund wallets, take ticket payments, confirm bank account names and pay out.
• Airtime and data delivery — the recipient's phone number and network are passed to the delivery gateway and the mobile network operator so the reward can arrive.
• Cloud infrastructure — hosting, authentication, databases, caching and scheduled jobs.
• Email and SMS delivery — ticket confirmations, receipts, payslips, voucher codes and one-time codes.
• Support tooling — support conversations are relayed to our team, and an AI assistant drafts answers to common questions before a person takes over.
• Analytics — only if you accept analytics cookies.

Every one of them is named on our sub-processor list — all 25 of them, with what each receives and whether the data leaves Nigeria. You don't have to ask us for it.

Operations alerts

When a reward is claimed or a payout is made, our system posts an alert to a private Telegram channel that only the Ridim team can read. Those alerts carry real identifying detail — the recipient's name, phone number, bank name and bank account number — so that a person can spot a problem before you have to report it.Telegram is a third-party messaging service and its servers are outside Nigeria.

Other users

• An Organiser sees the attendee data for their own event: name, email, tier, order reference, check-in status and the answers to their own questions.
• A Campaign Manager sees claim records for their own campaign, and the delivery details needed to prove a reward was paid.
• Other players see only your chosen nickname and your score.

Legal and corporate

We disclose data where the law, a court, a regulator or a payment partner requires it, and where necessary to establish or defend legal claims. If the business is reorganised or acquired, data may transfer with it under the same protections.

Ridim is a Nigerian business serving Nigeria, but some of our providers host or process data outside the country. Where personal data is transferred out of Nigeria, we do so on the basis permitted by the NDPA — an adequate destination, appropriate contractual safeguards, or another lawful ground — and we require the provider to protect it to the standard set out in this policy.

Which providers those are is not a secret: the sub-processor list marks each one with where it sits. The short version is that money, SMS and reward delivery stay in Nigeria, while hosting, our database, email and AI do not.

We keep personal data only as long as we need it, and longer only where the law says we must.

• Traffic is encrypted in transit; personal data is stored server-side with access controls, not exposed to other users.
• Passwords are hashed. We never store card PINs, CVVs or banking passwords — card payments happen on the processor's side.
• Sensitive actions are rate-limited, payouts are checked for duplicates before money moves, and administrative access is restricted and logged.
• Live game data is deliberately thin: nicknames and scores, never phone numbers or bank details, so a shared screen never leaks anyone's identity.

No system is perfectly secure. If a breach affects your rights, we will notify the Nigeria Data Protection Commission and, where required, you — describing what happened and what to do about it.

Under the NDPA you have the right to:

• Access — a copy of the personal data we hold about you.
• Correct — fix anything inaccurate or incomplete.
• Delete — have data erased where we have no overriding legal reason to keep it.
• Restrict or object — including to processing based on legitimate interest.
• Portability — receive your data in a usable format.
• Withdraw consent — at any time, where consent was the basis. Withdrawing does not undo what was lawful beforehand.
• Complain — to us, or directly to the Nigeria Data Protection Commission.

To exercise any of these, email hello@ridim.com.ng from the address on your account, or use the contact page. We may need to verify your identity first. We aim to respond within one month.

If the data was collected by an Organiser or Campaign Manager through Ridim, ask them directly — they control it. We will help you reach them.

We use two kinds:

• Necessary — signing you in, keeping your session, remembering a game you joined, protecting against abuse. These cannot be switched off without breaking the product.
• Analytics — a third-party analytics service, to understand which pages work. These load only after you accept them in the cookie banner, and they are deliberately loaded late so they never slow a page down on a 2G or 3G connection.

Decline and nothing analytics-related loads. You can change your mind by clearing the site's stored preference in your browser.

We run automated fraud and abuse checks — duplicate-claim detection, rate limiting, and risk checks on payouts. These can delay or block a transaction. They are not used to make legal decisions about you without a human able to review, and you can ask us to look again.

Our support chat drafts answers to common questions with an AI assistant before handing over to a person. Anything you type into it is sent verbatim to DeepSeek, whose service is operated in China, to produce that answer. Don't put your PIN, password or card details into any chat — we will never ask for them.

Event and campaign drafting assistants generate page copy from the description you type. That description goes to the same provider, in the same place, for that purpose only. See the sub-processor list for what each AI provider receives.

Ridim is not for children. You must be 18 or older to hold an account or receive a cash payout. We do not knowingly collect data from children. If you believe a child has given us personal data, email hello@ridim.com.ng and we will delete it.

We update this policy as the product and the law change; the effective date at the top always reflects the current version. Where a change materially affects your rights, we will give notice in the product or by email before it takes effect.

Ridim Solution Networks Ltd. (RC 9482453), registered in Nigeria. Email hello@ridim.com.ng — put “Data request” in the subject line and we will route it properly.

Registered office: 292 Dakata Kawaji, Nasarawa LGA, Kano State, Nigeria

If you are not satisfied with how we handle your data, you can complain to the Nigeria Data Protection Commission. We would rather you came to us first, but that right is yours either way.

Every other way to reach us is on the contact page.