Privacy Policy
How Predict South Africa collects, uses, and protects your personal information under South Africa's POPIA.
At a Glance
- •We collect only the information we need to operate the Platform and comply with South African law.
- •We never sell your personal information.
- •Your identity documents are processed for FICA compliance and stored securely.
- •You have rights under POPIA — access, correction, deletion, and more (see section 8).
- •We use cookies essential for the Platform to function. Analytics and marketing cookies are optional.
1. Introduction
Predict South Africa (Pty) Ltd (“Predict SA,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring that your personal information is processed lawfully, transparently, and securely. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Predict South Africa platform (the “Platform”).
This Privacy Policy is governed by the Protection of Personal Information Act, 2013 (Act No. 4 of 2013) (“POPIA”), the Electronic Communications and Transactions Act, 2002 (“ECTA”), and other applicable South African privacy and data protection laws.
2. Who We Are
Data Controller: Predict South Africa (Pty) Ltd
Registration Number: [Company Registration Number]
Email: privacy@predictsa.co.za
Our Information Officer, as defined by POPIA, can be contacted at the above email address. You have the right to lodge a complaint with the Information Regulator of South Africa at justice.gov.za/inforeg if you believe we have processed your personal information unlawfully.
3. What Personal Information We Collect
We collect and process the following categories of personal information:
3.1 Information You Provide
- Identity information: Full name, South African ID number, date of birth, copies of identity documents
- Contact information: Email address, mobile phone number, residential address
- Financial information: Bank account details, payment card information (processed via PayFast — we do not store full card numbers), transaction history
- Account information: Username, password (hashed), profile preferences, communication preferences
- Verification information: FICA/KYC documentation, proof of address, selfie images for biometric verification
- Communications: Records of your correspondence with us, including support tickets and emails
3.2 Information Collected Automatically
- Usage data: Pages visited, time on Platform, features used, trading activity, referral source
- Device data: IP address, browser type and version, operating system, device type, screen resolution
- Location data: Approximate location derived from your IP address (for jurisdictional compliance)
- Cookie data: See our Cookie Policy in section 10 below
3.3 Information from Third Parties
- KYC providers: Identity verification results from our FICA compliance partners (e.g., Smile Identity)
- Payment processors: Transaction confirmation and payment status from PayFast, Ozow, or 1Voucher
- Sanctions screening: Results from sanctions and PEP (Politically Exposed Person) list screening
4. How We Use Your Personal Information
We process your personal information for the following purposes, under the lawful bases indicated:
| Purpose | Lawful Basis |
|---|---|
| Account creation and management | Contractual necessity; Legal obligation (FICA) |
| Identity verification (FICA/KYC) | Legal obligation |
| Processing deposits and withdrawals | Contractual necessity |
| Executing and settling trades | Contractual necessity |
| Fraud detection and prevention | Legitimate interest; Legal obligation |
| Anti-money laundering (AML) compliance | Legal obligation |
| Customer support | Contractual necessity; Legitimate interest |
| Platform improvement and analytics | Legitimate interest; Consent (where required) |
| Marketing communications | Consent; Legitimate interest (existing users) |
| Compliance with legal obligations | Legal obligation |
| Responsible gambling monitoring | Legal obligation; Legitimate interest |
6. Cross-Border Data Transfers
Some of our service providers process data outside South Africa (including in the European Union and the United States). Where we transfer personal information across borders, we ensure that the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection, as required by section 72 of POPIA. By using the Platform, you consent to such transfers.
7. How Long We Keep Your Information
We retain your personal information only as long as necessary for the purposes for which it was collected, or as required by law:
- Account information: Retained for the life of your account plus 5 years after account closure, as required by FICA and gambling regulations.
- Transaction records: Retained for 5 years as required by FICA and tax law.
- KYC documentation: Retained for 5 years after account closure as required by FICA.
- Marketing consents: Retained until you withdraw consent.
- Analytics data: Anonymized after 26 months.
- Support communications: Retained for 3 years after resolution.
When the retention period expires, we securely delete or anonymize your personal information.
8. Your Rights Under POPIA
Under POPIA, you have the following rights regarding your personal information:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may request that we correct or update inaccurate or incomplete information.
Right to Erasure
You may request that we delete your personal information, subject to legal retention requirements.
Right to Object
You may object to the processing of your personal information for direct marketing or on grounds relating to your particular situation.
Right to Restrict Processing
You may request that we limit how we process your information in certain circumstances.
Right to Data Portability
You may request a copy of your information in a structured, machine-readable format.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Right to Complain
You may lodge a complaint with the Information Regulator at complaints.IR@justice.gov.za.
To exercise any of these rights, contact us at privacy@predictsa.co.za. We will respond within 30 days as required by POPIA. We may need to verify your identity before processing your request.
9. How We Protect Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, as required by section 19 of POPIA. These measures include:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Secure password hashing using bcrypt
- Multi-factor authentication for administrative access
- Regular security audits and penetration testing
- Access controls limiting employee access to personal information on a need-to-know basis
- Data breach response procedures, including notification to the Information Regulator and affected data subjects as required by POPIA
- Regular staff training on data protection obligations
Despite these measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we will notify you and the Information Regulator as required by law.
11. Marketing Communications
We may send you marketing communications about new markets, features, and promotions if you have opted in. You may unsubscribe at any time by clicking the “unsubscribe” link in any marketing email or by updating your preferences in your account settings. We will not share your contact information with third parties for their own marketing purposes without your explicit consent.
12. Children's Privacy
The Platform is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it immediately. If you believe a minor has provided us with personal information, please contact us at privacy@predictsa.co.za.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email and by posting a notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.
14. Contact Us
Information Officer: [Name]
Email: privacy@predictsa.co.za
Address: [Physical Address], South Africa
Information Regulator of South Africa:
Email: complaints.IR@justice.gov.za
Website: justice.gov.za/inforeg
Tel: 012 406 4818
Last updated: 29 June 2026. Effective from: 29 June 2026.