MIND CLASH ARENA
PRIVACY POLICY
Bull Icon Interactive Ltd
Lagos, Nigeria
Website: https://www.bullicon.com
Support: support@bullicon.com
Data Protection Officer: dpo@bullicon.com
Last Updated: April 2026
1. Introduction
Bull Icon Interactive Ltd ("Company", "we", "our", or "us") operates the Mind Clash Arena mobile application ("Mind Clash Arena", the "App", or the "Service").
This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access or use the App, our website, and related services.
We are committed to complying with the Nigeria Data Protection Regulation (NDPR) and all applicable data protection laws. By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your information as described herein.
If you do not agree with this Privacy Policy, you must discontinue use of the Service. This Policy should be read together with our Terms of Use (https://www.bullicon.com/terms) and Official Prize Rules & Eligibility (https://www.bullicon.com/prizerules).
2. Information We Collect
We collect only information necessary to operate the App, administer contests, prevent fraud, and deliver prizes.
2.1 Account Information
When you create an account, we collect:
•Username or display name
•Email address
•Phone number
•Password (securely encrypted)
•Profile image or avatar
A profile image or avatar is mandatory. Users may upload their own image or select a preloaded avatar provided within the App. Profile images are used for account identification, leaderboard display, social gameplay features, and impersonation prevention.
Usernames and avatars may be visible to other users within leaderboards and gameplay features.
2.2 Contest & Gameplay Information
When you use Mind Clash Arena, we automatically collect:
•Quiz answers and scores
•Leaderboard rankings
•Game performance metrics
•Time taken to answer questions
Date of birth (collected during contest eligibility verification to confirm you are 18 or older)
Country of residence (self-declared during contest eligibility verification)
App language preference
Referral code (if used during registration)
•Contest participation history
•Reward and achievement history
This information is required to calculate rankings, determine winners, maintain game integrity, and detect cheating or abuse.
2.3 Device & Technical Information
We may automatically collect:
•Device type and model
•Operating system and version
•Device identifiers
•IP address
•App version
•Crash logs and performance diagnostics
•Approximate location (country-level only)
Firebase Cloud Messaging (FCM) token — a device-level push notification identifier retrieved on login and stored on our servers to deliver push notifications to your device
Device timezone — transmitted on each contest and exam request to schedule contest-related features correctly
We do not continuously track precise GPS location. IP address, approximate location, and payment account verification are used solely to verify Nigeria-only contest eligibility, detect suspicious activity, and prevent fraudulent access.
Crash logs and diagnostics are collected via Firebase Crashlytics, operated by Google LLC. See Section 6 for details.
2.4 Prize Verification & Payout Information (Winners Only)
If you qualify for a prize or submit a payout request, we collect the following to process your payment and verify eligibility:
•Your OPay-registered phone number (which serves as your OPay account number)
•Your full legal name as registered on your Mind Clash Arena account
•Tax identification information (where required by law)
How the Prize Payout Process Works:
Mind Clash Arena uses OPay, a Central Bank of Nigeria (CBN)-licensed digital payment provider, to process all prize payments. OPay uses phone numbers as account identifiers. Payout requests are not processed instantly — each request goes through a structured review and verification stage before payment is released.
The payout process works as follows:
•You select the amount you wish to withdraw, based on your available Token balance
•You select OPay as your payout method and enter your OPay-registered phone number
•Your request is received by our system and assigned a Pending status
•Our team reviews your request and validates your eligibility, including contest rules, account standing, and applicable payout limits
•Once eligibility is confirmed, we initiate the OPay transfer — the OPay system automatically returns the full name associated with your phone number
•We cross-reference the returned name against the name registered on your Mind Clash Arena account
•If the names match, the transaction is approved and the prize amount is transferred to your OPay account
•If the names do not match, the payout request is declined and you are notified to contact our support team
The Pending status reflects our eligibility review stage — a deliberate verification step, not a technical delay. Requests are typically reviewed within 7 business days, though complex verification cases may require additional time. This process ensures prizes are delivered only to verified, rightful winners.
For higher-value prizes or where our fraud systems flag a transaction, we may additionally request:
•Government-issued Nigerian identification (National ID, Driver's License, Voter's Card, or International Passport)
•Additional identity verification at our discretion
Identity documents, where collected, are stored securely with restricted access and retained only for the legally required period, after which they are securely deleted or anonymised.
Mind Clash Arena does not directly process card payments or store banking credentials. All financial transaction processing is handled exclusively by OPay. We do not collect or store banking passwords, card numbers, PINs, or other sensitive credentials.
2.5 Reward Center & Transaction Data
We collect and display within the Reward Center:
•Token balance
•Redemption history
•Payment status
The Reward Center is a reward tracking interface only. It is not a bank account, stored-value wallet, financial account, investment product, electronic money service, or payment account.
Mind Clash Arena does not hold user deposits. Tokens are promotional reward points and have no cash value unless redeemed in accordance with the contest rules and eligibility verification process.
2.6 Advertising & Analytics Information
We engage the following third-party analytics and advertising partners who may automatically collect data when you use the App:
•Google AdMob – Advertising delivery and ad performance measurement
•Google AdMob may also collect approximate location information for the purpose of delivering relevant advertising.
•Google Analytics – App usage patterns, engagement metrics, contest performance (including scores, tier achieved, and leaderboard position), and financial activity events such as coin purchases, payout requests, and payout completions. Persistent user properties including account type, registration date, total tokens earned, total tokens withdrawn, and highest contest tier achieved are also logged
•Firebase (Google LLC) – App infrastructure, crash reporting, and performance monitoring
IronSource / Unity LevelPlay – Ad mediation and advertising network management (https://www.is.com/privacy-policy/)
Unity Ads – Advertising delivery (https://unity.com/legal/privacy-policy)
These services may collect advertising identifiers (such as IDFA on iOS and GAID on Android), device information, interaction data, and general usage patterns. Each operates under its own privacy policy.
Advertising may be personalised or non-personalised depending on your device settings. You may manage advertising preferences through your device settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads).
We do not sell personal information.
2.7 Notifications
We may send push notifications or in-app messages regarding:
•Contest announcements and results
•Winner notifications
•Payout status updates
•Security alerts
•Important service updates
You may disable notifications at any time through your device settings. Note that disabling notifications may mean you miss important payout status updates.
3. Legal Basis for Processing
We process personal information in accordance with the Nigeria Data Protection Regulation (NDPR) and other applicable data protection laws, based on the following legal grounds:
•Consent – Where you have provided explicit consent, such as for personalised advertising
•Performance of a contract – To provide gameplay, administer contests, and deliver rewards
•Legal obligations – To comply with tax, financial, and regulatory requirements
•Legitimate interests – Including fraud prevention, security monitoring, and platform integrity, where such interests are not overridden by your rights
4. How We Use Your Information
We use personal information to:
•Create and manage user accounts
•Operate gameplay, contests, and leaderboards
•Determine winners and process prize payouts
•Review and validate payout requests during the eligibility verification stage
•Verify payout identity via OPay name matching before releasing prize transfers
•Prevent cheating, fraud, and abuse
•Improve app performance and user experience
•Provide customer support
•Send service notifications and payout status updates
•Comply with legal and tax obligations
We do not sell personal information.
5. Social Media & Marketing Use
To promote transparency and verify prize authenticity, we may publicly share:
•Winner usernames
•Prize redemption confirmations
•Winner announcements on social media
•Screenshots of payout receipts (with all sensitive details redacted)
We will never publish sensitive personal information such as OPay phone numbers, bank details, identification numbers, residential addresses, or full legal names without explicit consent.
Usernames, avatars, and leaderboard rankings are publicly visible within the App as part of normal gameplay functionality.
By participating in prize contests, you acknowledge that non-sensitive winner information may be publicly announced.
5A. No Banking or Financial Services
Mind Clash Arena is a promotional skill-based competition platform and does not provide banking, financial, investment, remittance, escrow, or payment services.
The Company does not accept deposits, hold user funds, operate accounts, or maintain stored balances on behalf of users.
All prize payments are Company-funded promotional rewards processed through OPay, a licensed third-party payment provider.
Tokens are not currency, electronic money, cryptocurrency, stored value, or financial assets.
6. Information Sharing
We share personal information only where necessary and limited to the purpose involved. We do not sell user data to advertisers or unrelated third parties.
6.1 Named Third-Party Service Providers
We share data with the following trusted third-party providers, each contractually obligated to protect personal data and use it solely for assigned purposes:
•OPay – Prize payment processing, CBN-licensed Nigerian digital payment provider (https://opay.com.ng/privacy-policy)
•Google AdMob – Advertising (https://policies.google.com/privacy)
•Google Analytics – Usage analytics (https://policies.google.com/privacy)
•Firebase (Google LLC) – App infrastructure and crash reporting (https://firebase.google.com/support/privacy)
•IronSource / Unity LevelPlay – Ad mediation and advertising network management (https://www.is.com/privacy-policy/)
•Unity Ads – Advertising delivery (https://unity.com/legal/privacy-policy)
We require all third-party data processors to maintain appropriate data protection standards and, where applicable, enter into Data Processing Agreements as required under the NDPR.
6.2 Legal & Regulatory Disclosure
We may disclose information where required to:
•Comply with applicable Nigerian or international law
•Respond to court orders or lawful requests from Nigerian authorities
•Prevent fraud or illegal activity
•Protect users, the public, or the Company
7. Data Retention
We retain personal information only for as long as necessary. Our general retention guidelines are:
•Account data – Retained for the duration of your account and up to 12 months following deletion
•Contest and gameplay data – Retained for up to 24 months for integrity and dispute resolution purposes
•Payout records and transaction data – Retained for up to 7 years to meet Nigerian tax and accounting compliance requirements
•Identity documents (where collected for higher-value prizes) – Retained for the minimum period required by law, then securely deleted or anonymised
•Fraud prevention records – Limited records may be retained beyond account deletion where necessary to prevent re-registration or abuse
We may retain anonymised or aggregated information for statistical analysis, service improvement, and fraud detection indefinitely, as such data cannot identify individuals.
8. Security Measures
We implement reasonable technical and organisational safeguards, including:
•Encrypted passwords and data encryption at rest
•Secure HTTPS connections
•Access control policies with restricted server access
•Fraud monitoring and anomaly detection systems
•Manual eligibility review before every prize transfer is initiated
•OPay name-matching verification as a final fraud check before payment release
•Secure handling of identity documents with strict access restrictions
Fraud Monitoring:
To protect the integrity of competitions, we may analyse gameplay behaviour, device usage patterns, IP activity, contest participation, and account activity to detect cheating, abuse, collusion, or fraudulent payout attempts. Accounts flagged by our fraud prevention systems may be temporarily restricted, suspended, or denied payout pending review.
Despite these measures, no online system can guarantee absolute security. We encourage users to use strong, unique passwords and to contact us immediately if they suspect unauthorised access.
9. Children's Privacy
Mind Clash Arena is strictly for users aged 18 years and above. The App is rated 17+ on the Apple App Store and 18+ on Google Play, restricting access at the platform level. Age is further verified by self-declaration at the point of entering a prize competition — users must confirm they are at least 18 years old before participating. Document-based identity verification may additionally be required before prize redemption is processed.
We do not knowingly collect personal information from minors. Accounts identified as belonging to persons under 18 will be immediately terminated and associated data deleted where legally permissible.
10. Your Data Protection Rights
In accordance with the NDPR and applicable law, you have the right to:
•Request access to your personal data
•Request correction or update of inaccurate data
•Request deletion of your account and associated data
•Object to or restrict certain processing activities
•Withdraw consent where processing is consent-based
•Lodge a complaint with the National Information Technology Development Agency (NITDA)
You may delete your account using the Delete Account feature in the App, or by contacting support@bullicon.com or dpo@bullicon.com.
Upon account deletion, gameplay access is permanently disabled. However, certain records including payout transactions, fraud prevention records, and legal compliance data may be retained as required by law and regulatory obligations.
We will respond to all data subject requests within 30 days as required under the NDPR.
11. International Data Transfers
Mind Clash Arena prize competitions are intended for Nigerian residents. Users outside Nigeria may access limited gameplay features but are not eligible for prize redemption.
Prize payouts and Token redemption are restricted to verified Nigerian residents physically located in Nigeria at the time of participation and redemption. Location verification may be performed using IP address, device data, and payment verification.
Data may be processed or stored outside Nigeria where our service providers (including Google) operate. Where international transfers occur, we implement appropriate safeguards, including contractual clauses with processors, to ensure your data is protected in accordance with NDPR standards.
12. Third-Party Services
The App integrates with third-party platforms including Apple, Google, OPay, and our named advertising and analytics partners. These services operate under their own privacy policies.
Sign In with Apple: When you use Sign In with Apple, Apple provides us with a unique user identifier and, for new accounts, may provide your name and email address (or an Apple-generated relay email address at your discretion). We use this information solely to create and identify your Mind Clash Arena account. We do not share this information with third parties for advertising purposes.
ipapi.co (Country Detection): When you access the contest eligibility verification screen, your IP address is sent to ipapi.co, a third-party geolocation service, to automatically detect your country. ipapi.co's privacy policy governs its data practices.
Google Sign-In (Authentication): If you sign in using your Google account, Google provides your Google profile name and email address to authenticate you. Google's privacy policy governs this data.
Apple App Store / Google Play (In-App Purchases): IAP transactions and purchase receipts are processed by Apple Inc. or Google LLC respectively. Transaction identifiers may be shared with us to validate your purchase.
We are not responsible for the data practices of third-party services.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be communicated by:
•Updating the "Last Updated" date at the top of this document
•Publishing the revised policy within the App and on our website
•Sending an email notification to registered users for material changes that affect your rights or how we use your data
Continued use of the Service after notification of updates constitutes acceptance of the revised Privacy Policy.
14. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
Bull Icon Interactive Ltd
Lagos, Nigeria
General Support: support@bullicon.com
Data Protection Officer: dpo@bullicon.com
Website: https://www.bullicon.com
For complaints regarding data protection, you may also contact the National Information Technology Development Agency (NITDA) at: https://nitda.gov.ng
By using Mind Clash Arena, you acknowledge that you have read, understood, and agreed to this Privacy Policy.