Bingo Digital City

Privacy Policy for Bingo Digital City

Effective Date: 1st December 2025 Last Updated: 1st December 2025

  1. Introduction

Welcome to Bingo Digital City ("Bingo," "we," "our," or "us"). We operate a multi-service platform providing online shopping, real-time delivery, and professional task services (TaskNow).

We are committed to protecting your privacy and ensuring your personal data is handled in compliance with the Data Protection Act, 2019 (Kenya) and applicable international privacy standards. This policy explains how we collect, use, store, and share your information based on your role on our platform.

  1. Scope

This policy applies to all users of the Bingo platform, specifically categorized as:

Customers: Users ordering goods or services.

Vendors: Merchants selling goods (Micro, Formal, and High-Risk tiers).

Riders: Boda-boda and cyclist delivery partners.

Taskers: Service providers (both skilled and non-skilled) on TaskNow.

  1. Information We Collect

We adhere to the principle of Data Minimization. We only collect data necessary to verify your identity (KYC), process payments, and ensure safety.

A. Information Collected from All Users

Identity Data: Full legal name (must match ID/M-PESA).

Contact Data: Phone number (verified via OTP) and email address.

Financial Data: M-PESA Till/Paybill numbers or Bank Account details.

Device Data: Device ID, operating system, and unique identifiers (to prevent fraud/multiple accounts).

B. Specific Data by User Role

  1. Customers

Location: Primary delivery address and GPS pin.

Triggered Verification: If you place high-value orders or flag suspicious activity, we may request a Selfie or ID Copy for verification.

  1. Vendors (Merchants)

Depending on your KYC Tier (1, 2, or 3), we collect:

Business Proof: Business Permit, Photos of storefront/interior, Signage.

Identity: Owner’s National ID and Liveness Selfie.

Inventory: Proof of stock (photos with tags) and supplier invoices (for Tier 3).

Location: GPS coordinates of the shop to verify "Geo-consistency" against listed addresses.

  1. Riders (Boda & Cyclists)

Identity: National ID (Front/Back) and Liveness Selfie.

Vehicle Data: Logbook (or owner permission letter), Insurance cover, Number plate photos, Bike photos.

Background: Next-of-Kin details (Name/Relationship/Phone) for emergency and safety traceability.

Status: Valid Driving License (for motorcyclists).

  1. Taskers (TaskNow)

Identity: National ID and Liveness Selfie.

Location: Home/Residence GPS pin (to determine service radius).

Skills: Professional Certificates or Trade Licenses (for Skilled Taskers like plumbers/electricians).

Background: Next-of-Kin details.

C. Sensitive Personal Data (Biometrics)

For Vendors, Riders, and Taskers (and occasionally Customers), we process Biometric Data in the form of facial recognition (Liveness Checks) to prevent impersonation and identity fraud. By submitting your selfie, you explicitly consent to this processing.

  1. How We Use Your Information

We use your data for the following specific purposes:

  1. Verification & Onboarding (KYC)

To assign Trust Scores and Tiers (e.g., verifying if a Vendor is Tier 1 or Tier 3).

To perform OCR (Optical Character Recognition) on IDs to ensure readability and authenticity.

To match your registered name against your M-PESA/Bank details to prevent payment fraud.

  1. Service Delivery & Safety

Geo-fencing: Tracking Rider and Tasker locations in real-time to ensure they are on route and to prevent "no-show" fraud.

Trust Badges: Granting "Verified" or "Trusted" badges based on your order history and document verification.

Safety: Sharing Rider/Tasker profiles (Name, Photo, Trust Score) with Customers before arrival.

  1. Fraud Prevention & Monitoring

Behavioral Monitoring: We analyze patterns such as excessive cancellations, refund abuse, or GPS deviations.

Device Binding: Ensuring a Rider/Tasker account is only operated from authorized devices.

Automated Flags: Identifying ID mismatches or inventory irregularities which may lead to temporary account suspension.

  1. Location Information

For Riders and Taskers: We collect precise location data in the foreground and background when you are "Online" to assign orders and allow customers to track deliveries.

For Customers and Vendors: We collect location data to pinpoint delivery addresses and verify shop locations.

  1. Sharing and Disclosure

We do not sell your personal data. We disclose information only as follows:

Between Users:

Riders see Customer delivery details.

Customers see Rider/Tasker photos and live locations.

Third-Party Service Providers: For identity verification (ID checks), background checks, and payment processing.

Legal Obligations: We may share data with law enforcement if there is proven fraud, theft, or a formal legal request, specifically regarding permanently banned users (as per our Anti-Fraud policy).

  1. Data Retention & Deletion

Retention: We retain data only as long as necessary to fulfill the purposes outlined or as required by law (e.g., tax records).

Evidence: We store encrypted copies of uploaded documents, OCR scores, and verification timestamps to maintain an audit trail of our approvals/rejections.

Deletion: You may request account deletion via the app. However, if your account has been flagged for fraud or has outstanding disputes, we verify the request against our legal obligations before erasure.

  1. Data Security

Encryption: All uploaded documents (IDs, Logbooks) are encrypted at rest.

Access Control: Access to sensitive KYC data is restricted to authorized Trust & Safety agents.

Breach Protocol: We have a response plan in place to handle any suspected data breach in accordance with the Data Protection Act.

  1. Your Rights

Under the Kenya Data Protection Act, you have the right to:

Access: Request a copy of the personal data we hold about you.

Rectification: Correct false or misleading data (e.g., updating a new phone number).

Erasure: Request that we delete your data (subject to legal/fraud retention requirements).

Objection: Object to automated decision-making (e.g., if you believe your Trust Score was calculated in error, you may request a manual review).

By using Bingo, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described.