Privacy Policy

At ESTUDY, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with the Nigerian Data Protection Regulations (NDPR) and other applicable laws.

1. Information We Collect

• Profile Data: Name, email address, university programme, and profile picture provided during registration.
• Third-Party Authentication (Google Sign-In): If you choose to register or log in using third-party services like Google, we collect your name, email address, and profile picture directly from that provider. This data is used strictly to authenticate your identity, securely provision your ESTUDY account, and populate your profile. We do not access, store, or request permission for your private Google data (such as contacts, emails, or drive files).
• Gameplay & Performance Data: Arena statistics, win/loss records, Rank Points (RP), study streaks, and module completion rates.
• Financial & KYC Data: If you choose to withdraw Merit Grants, we may collect your National Identification Number (NIN) or student ID, as well as necessary banking details for Flutterwave and Kora processing.
• Cookies & Device Data: We utilize secure HTTP-only cookies to manage your authentication sessions (keeping you logged in) and track basic platform analytics to improve performance.

2. How We Use Your Data

We use the collected information to:

• Operate, maintain, and secure the ESTUDY platform, including account verification and security notices.
• Facilitate fair matchmaking in the Arena based on your RP and tier.
• Process transactions, distribute Merit Grants, and enforce our Economy Policy.
• Monitor for academic dishonesty, cheating, and system abuse.
• Deliver essential updates and notifications specifically regarding Arena Tournaments you have actively registered for (with future options to manage your communication preferences).

3. Data Sharing & Third Parties

ESTUDY does not sell your personal data. We only share information with trusted third parties necessary for platform operations, including:

• Payment Processors: Gateways like Flutterwave and Kora to securely handle coin purchases and fiat withdrawals.
• Regulatory Authorities: State or federal agencies (e.g., LIRS, CBN) if legally required for tax compliance, anti-money laundering (AML), or fraud investigation.

4. Data Retention & Your Rights

You have the right to request access to the personal data we hold about you, request corrections to inaccurate data, or request the deletion of your account. Note that deleting your account will permanently forfeit any held empCoins and Rank Points.

Statutory Retention Exemption: While you may request the deletion of your profile data, please note that Nigerian financial regulations mandate that ESTUDY securely retain records of your financial transactions and KYC verification details for a minimum statutory period (typically 5 years) to comply with anti-money laundering directives.

Ephemeral Telemetry & Match Logs: To comply with the NDPA 2023 principle of storage limitation, ESTUDY employs automated data-purging protocols for in-game telemetry:

• Bounty Logs: Raw server telemetry, network identifiers, and click timestamps generated during live promotional "Bounty Drops" are retained for exactly seven (7) days to facilitate immediate dispute resolution.
• Arena Match Logs: Detailed combat telemetry (including answer submission times, item deployments, and anti-cheat triggers) for standard 1v1 matches, Custom Contracts, and Tournaments are retained for forty-five (45) days to allow for post-match audits and appeals.

Upon the expiration of these respective windows, the logs are permanently and automatically deleted from our databases.

5. Age Restriction

ESTUDY is designed for university students and young adults. We do not knowingly collect personal data from children under the age of 16 without verifiable parental consent. Furthermore, you must be of legal majority (18+) to independently request fiat Merit Grant withdrawals.