Valura Gaming Center (“we”) runs this website and the venue at 15 Admiralty Way, Lekki Phase 1, Lagos. This policy explains what personal data we collect, why, and your rights under the Nigeria Data Protection Act 2023.
What we collect
- Account details: your name, email address and password (stored only as a secure hash).
- Bookings and memberships: what you booked, when, your ticket codes, check-in times, hours used and promo codes redeemed.
- Payments: the amount, date, reference and payment channel. Card details are collected and processed by Paystack. We never see or store your full card number.
- Technical data: basic information your browser sends (such as IP address) used for security, login sessions and preventing abuse.
Why we use it
- To create your account, take bookings, issue tickets and let staff check you in (to perform our contract with you).
- To process payments and keep financial records (legal obligation and contract).
- To send tickets, receipts, password resets and membership reminders (contract).
- To keep the platform secure and prevent fraud or misuse of promo codes (legitimate interests).
We don’t sell your data, and we don’t send marketing emails unless you’ve agreed to receive them.
Who we share it with
- Paystack, to process payments.
- Our email provider, to deliver tickets and account emails.
- Our hosting and database providers, who store data on our behalf under contract.
- Authorities, where the law requires it.
Some of these providers may process data outside Nigeria. Where they do, we rely on safeguards allowed under the NDPA.
How long we keep it
We keep your account while it’s active. Booking and payment records are kept for up to 6 years for accounting and tax purposes. Security logs are kept for a short period and then deleted.
Your rights
You can ask to access, correct or delete your personal data, object to or restrict how we use it, or ask for a copy in a portable format. You can also withdraw consent where we rely on it. Contact the front desk at 15 Admiralty Way, Lekki Phase 1, Lagos. If you’re unhappy with our response, you can complain to the Nigeria Data Protection Commission (NDPC).
Security
We use encrypted connections, hashed passwords, access controls for staff, and a payment provider that meets card industry security standards. No system is perfect, and we’ll tell you and the regulator if a breach affects your data as the law requires.
Children
Parents or guardians should create and manage accounts for young children. If you believe a child has given us data without permission, contact us and we’ll delete it.
Changes
We’ll post any updates here and change the date at the top.