Pooltrex Home

Legal

Data protection

Last updated 25 October 2026

Pooltrex processes personal data under the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. This notice sits alongside our privacy policy.

Data controller

Pooltrex is the data controller for owner accounts, M-Pesa collections and withdrawals, orders, device telemetry, and support messages. Contact info@pooltrex.co.ke or +254 724 540 103.

Lawful basis

  • Contract — to install units, collect games, split revenue, and pay owners.
  • Legitimate interests — to keep tables online, detect faults, and prevent fraud or duplicate receipts.
  • Legal obligation — tax, accounting, and M-Pesa settlement records.
  • Consent — where you choose to send a message or optional marketing.

Security

Access to dashboards and payment records is limited to authenticated staff and owners. M-Pesa traffic uses Safaricom’s APIs. We take reasonable technical and organisational measures; no transmission over the internet is fully risk-free.

Your rights

Subject to the Act, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to processing that is not required to perform the contract. We will respond within the time the Act allows.

Complaints

If you are not satisfied with how we handle a request, you may complain to us first, and then to the Office of the Data Protection Commissioner (ODPC) in Kenya.