100 Seconds Competition

10. Data Protection and Handling of Participant Information

10.1 Brastorne Enterprises and its authorised technical service provider shall collect only the participant information required to operate and administer the 100 Seconds Competition. This information shall include the participant's mobile number (MSISDN), subscription records, game participation records, points earned, draw entries and transaction records. For selected winners, identification and payment information required for eligibility verification and prize payment shall also be collected.

10.2 Participant information shall be stored electronically within the Brastorne systems used to operate the 100 Seconds Competition. Participant records shall be linked to the participant's registered MSISDN. Access to participant information shall be restricted to authorised personnel and service providers involved in the operation, administration, audit and regulatory oversight of the Competition.

10.3 Participant information shall be used for subscription management, participant authentication, recording competition participation, allocation and accumulation of points, generation of draw entries, winner selection and verification, prize payment, customer support, fraud prevention, audit and regulatory compliance.

10.4 Participant information shall only be shared with parties directly involved in the operation and administration of the Competition, including Mascom Wireless Botswana, Gambling Authority for competition regulatory purposes, Digi com technical service provider and the appointed accountant/auditor. Information shared shall be limited to what is necessary for each party to perform its respective function.

10.5 Brastorne Enterprises shall ensure that appropriate technical and organisational safeguards are applied to protect participant information against unauthorised access, disclosure, alteration, loss, misuse or destruction. Access shall be restricted to authorised persons who require the information to perform their functions in relation to the Competition.

10.6 Before payment of any prize, the selected winner's identity, age and eligibility shall be verified. Information collected for winner verification shall be used for eligibility verification, prize administration, payment, audit and regulatory purposes. Where competition results are published, only the minimum information necessary to identify and announce the confirmed winner shall be disclosed.

10.7 Participant information shall be retained for the Competition Period and thereafter for the period required to satisfy applicable legal, regulatory, financial and audit obligations. At the end of the applicable retention period, the information shall be securely deleted, anonymised or otherwise disposed of in accordance with applicable data protection requirements.

10.8 Participants shall be entitled to exercise their applicable rights regarding their personal data, including access to and correction of their personal information, in accordance with the Data Protection Act, 2024.

10.9 All personal data collected, stored, used, shared and protected in connection with the 100 Seconds Competition shall be processed in accordance with the Data Protection Act, 2024.