House rules
Privacy Policy
Last updated: 21 September 2026
REAAL HOUSE ("we", "us", "the desk") is the data controller for the personal information collected through this platform. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have under the Nigeria Data Protection Act 2023 ("NDPA"). It should be read together with our Terms of Use.
1. What we collect
- Account information: your email address, display name, and profile photo when you sign in with Google, or the information you provide directly.
- Order information: your name, phone number, and delivery address, collected only at checkout, and used only to fulfil and deliver your order.
- Activity information: your wallet balances (Reaal Coin and Reaal Stake), prediction and poll entries, comments, and the messages you send or receive on the platform.
- Prize information: if you win a prize, we may ask for extra details, such as identity verification or delivery information, so we can release it to you.
- Payment information: we do not store your card or bank details. All payments are processed directly by Paystack, and we only receive confirmation that a payment succeeded, along with a transaction reference.
- Technical information: basic server and security logs, such as IP address and browser type, created when you use the site.
- Uploads: images or files you or our administrators upload to the platform.
Your display name, profile photo, and comments may be visible to other visitors on the public site. Do not put anything in them that you do not want to be public.
2. Why we collect it, and our legal basis
| What we do | Legal basis under the NDPA |
|---|---|
| Create and manage your account | Performance of our agreement with you |
| Process and deliver orders and operate your wallet | Performance of our agreement with you |
| Run Reaal Coin, Reaal Stake, predictions, polls, and prize distribution | Performance of our agreement with you |
| Send in-platform messages about your orders, prizes, or account | Performance of our agreement with you |
| Prevent fraud and abuse, keep the platform secure, and handle disputes | Our legitimate interests, and legal obligations |
| Keep records we are legally required to keep | Legal obligation |
| Optional communications | Your consent, which you can withdraw at any time |
3. Who we share it with
- Google: for sign-in only, under Google's own privacy policy.
- Paystack: for payment processing only, under Paystack's own privacy policy.
- Supabase: our database and file storage host, which stores your account, order, and upload data on our behalf.
- Vercel: our website hosting provider, which serves the platform and processes technical request data on our behalf.
- Delivery partners: we share your name, phone number, and delivery address with the couriers who deliver your order, only as needed to deliver it.
- Authorities and legal requests: we may disclose information where the law requires it or to protect our rights and users from fraud or abuse.
We do not sell your data to anyone, ever. We do not give sponsors your personal data.
4. Transfers outside Nigeria
Some of our providers, including Google, Paystack, Supabase, and Vercel, may process data on servers outside Nigeria. Where this happens, we use providers that apply appropriate data protection safeguards, as the NDPA requires.
5. How long we keep it
We keep account and order data for as long as your account is active, and for a reasonable period after deletion for fraud and dispute review, as described in our Terms of Use. We also keep transaction and order records for as long as the law requires for accounting and tax purposes. When data is no longer needed, we delete it or make it anonymous.
6. How we protect it
We use measures such as encrypted connections (HTTPS), access controls on our database, rate limiting on sign-in routes, and payment signature verification, to protect your data from unauthorized access, loss, or misuse. No system is completely secure, but we work to keep yours safe. If a breach affects your personal data in a way that puts you at risk, we will notify you and the Nigeria Data Protection Commission as the law requires.
7. Your rights
Under the NDPA, you have the right to:
- Ask for a copy of the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your account and associated data, subject to the retention described above.
- Ask us to restrict how we use your data, or object to certain uses, including uses based on our legitimate interests.
- Receive your data in a commonly used format, where that applies.
- Withdraw consent for optional communications at any time.
- Not be subject to a decision made solely by automated means that significantly affects you.
To use any of these rights, email us at cfcreaalsupport@gmail.com. We may need to confirm your identity first, and we will respond within a reasonable time. If you believe we have handled your data unlawfully, you also have the right to complain to the Nigeria Data Protection Commission.
8. Cookies
We use only the minimum cookies necessary to keep you logged in and remember your session. We do not use third-party advertising or tracking cookies.
9. Children
Reaal House is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us their data, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the platform grows. Material changes will be shown here with an updated date, and we may also notify you through the platform.
11. Contact
Questions about this policy or your data: cfcreaalsupport@gmail.com