Privacy Policy

9jaBackstage is operated by 9jaGlobal Media Limited ("we," "us," "our"), a company incorporated in Nigeria. We are the Data Controller (and, in respect of Organizer-collected Backer data, in some cases a Data Processor) for personal data processed through the 9jaBackstage platform, in accordance with the Nigeria Data Protection Act, 2023 ("NDPA") and the Nigeria Data Protection Commission's ("NDPC") regulations.

Account information: name, email address, phone number, city, password (stored encrypted), and profile photo if provided.

Organizer information: business or personal identity details, bank account and payout details, and any documentation required to verify identity or business registration before payouts are issued.

Transaction information: ticket purchases, sponsor pledges, food/drink/merch orders, amounts, payment status, pickup codes, and refund history.

Payment information: payment card or bank transfer details are collected and processed directly by our payment processor, Flutterwave. We do not store your full card number.

Usage information: device type, browser, IP address, pages visited, and general interaction data collected automatically to help us operate and improve the platform.

Communications: messages you send us through the Contact Us form, support channels, or Campaign updates.

We use personal data to:

Create and manage your account.

Process pledges, issue tickets, fulfill menu orders, and facilitate payouts and refunds.

Verify Organizer identity and prevent fraud.

Communicate with you about your pledges, tickets, Campaign updates, and account activity.

Operate check-in and ticket validation at events.

Comply with legal, tax, and regulatory obligations, including NDPC reporting requirements.

Improve the platform's functionality and user experience.

Send you marketing communications, where you have given consent, which you may withdraw at any time.

We process personal data on one or more of the following bases under the NDPA: your consent, the necessity of processing to perform our contract with you (running your pledge, ticket, or Campaign), our legitimate interest in operating and securing the platform, and compliance with a legal obligation.

Flutterwave, our licensed payment processor, to process pledges, payouts, and refunds.

Event Organizers, who receive the names and contact details of Backers who pledged to their specific Campaign, solely for the purpose of fulfilling tickets, sponsor perks, and event communication — unless a Backer has chosen to pledge anonymously.

Service providers who support our operations, such as email delivery and cloud hosting providers, under contractual obligations to protect your data.

Regulators or law enforcement, where required by Nigerian law.

We do not sell personal data to third parties.

We retain personal data for as long as your account is active and for defined periods afterward as required by Nigerian law. Retention periods vary by data type:

General account data (profile information, browsing activity, preferences) may be deleted upon request once your account is closed, subject to the categories below.

Corporate and tax-related transaction records are retained for a minimum of 6 years, in line with the Companies and Allied Matters Act (CAMA) and the Companies Income Tax Act (CITA).

KYC and transaction records connected to payments and payouts are retained for a minimum of 5 years after the relevant customer relationship ends, in line with Nigeria's Anti-Money Laundering (Prevention and Prohibition) Act and Central Bank of Nigeria guidelines.

Data connected to an active dispute, fraud investigation, or law enforcement request is retained until that legal process concludes, regardless of any deletion request received in the meantime.

If you request deletion of your account, we will remove or anonymize data that is not subject to the retention obligations above, and retain only what we are legally required to keep, for the periods specified.

We apply reasonable technical and organizational measures to protect personal data, including encryption of data in transit and at rest, access controls, and secure payment processing through a licensed provider. No system is completely secure, and we encourage you to use a strong, unique password for your account.

You have the right to:

Access the personal data we hold about you.

Request correction of inaccurate or incomplete data.

Request deletion of your data, subject to our legal retention obligations.

Object to or request restriction of certain processing.

Request a copy of your data in a portable format.

Withdraw consent at any time where processing is based on consent.

Lodge a complaint with the Nigeria Data Protection Commission if you believe your data protection rights have been violated.

To exercise any of these rights, contact us using the details in Section 12.

9jaBackstage uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used. You can control cookies through your browser settings, though disabling them may affect platform functionality.

9jaBackstage is not intended for individuals under 18 years of age, and we do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it.

Some of our service providers, including cloud infrastructure and hosting partners, may process or store data outside Nigeria. Where this occurs, we take steps to ensure an adequate level of protection is applied, consistent with NDPA requirements for cross-border data transfer.

For any question about this Privacy Policy or to exercise your data protection rights, contact us at hello@9jaglobal.com. Our registered Data Protection Officer can be reached at the same address, referencing "Data Protection" in the subject line.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before they take effect.