COAST DEVELOPMENT AUTHORITY, (hereinafter referred to as “CDA“), shall endeavor in complying with the applicable laws related to the personal data protection – the Data Protection Act No. 24 of 2019 (“the Act“).
The Company warrants that all Personal Data of users of its services and visitors of the website www.cda.go.ke (hereinafter referred as ”data subjects”), is processed only when there is a legal basis for such an act:
– legal obligation
– contractual relationship
– data subject’s consent
– protection of data subject’s vital interests
– legitimate interest of the Company, or
– public interest.
While registering a user wishing to participate in online gambling games, the Company shall collect your personal data, including mobile phone number. To register an account, you must be at least 18 years old.
The Company collects information from the visitors and users of the website www.cda.go.ke in order to better understand the needs of users and to improve their products and services.
The following data is collected for the above stated purposes:
– Time and date of the page visit
– Visited pages
– Type and version of the Internet browser
– Visitor’s IP address.
The Company shall provide its users with user support through call center and email. The data collected in this manner shall be processed exclusively for the purpose of providing user support.
The Company operates a recorded call system. When Data Subjects call Customer service, the call shall be automatically recorded for quality assurance purposes. Data subject is informed about call recording. CDA may keep live calls and call recordings for internal and external audits, training and investigation include law enforcement agencies. These calls are deleted after 30 days if they are no longer required for any crime prevention, investigation, detection purposes and crime reporting for the protection of the business and other legal interests and the protection of employees.
CDA may periodically notify users of the new benefits of the Company. The user may always decide to decline from receiving the above notifications, and may cancel the service by sending an e-mail to cda.go.ke
CDA shall ensure that forwarding of Personal Data of the users to third parties is solely carried out in accordance with applicable law and regulation.
When Personal Data is passed on to third parties or trusted partners (Data Processors) for the purpose of providing user support, information system maintenance or similar needs, the Company shall ensure that these third parties or trusted partners will abide with the mandatory data protection measures.
Your personal information may be disclosed to: service providers, data processors, business partners, credit agencies, banks, lawyers, advisors, fraud prevention and anti-money laundering institutions, courts, regulatory bodies, institutions for protection of minors, institutions for prevention of addiction, police, sports associations and marketing agencies.
By using our services, you give your consent to have any information supplied transferred outside your country. The Company shall ensure that before transferring Personal Data out of Kenya, adequate safeguards with respect to the security and protection of personal data are provided.
The Company uses cookies to provide visitors and/or users with full functionality and high-quality content. Cookies are small text files uploaded to visitors` computers with the purpose of tracking the use of certain pages. If accepting cookies option is turned off on the visitor’s and/or user’s computer, the visitor and/or user can still use the pages, but the functionality of the service will be partially restricted. For more information read our cookie policy.
Depending on the purpose and legal basis of the processing of Personal Data, the user has the following rights in accordance with the applicable regulations on Personal Data protection:
– To be informed that we are collecting your personal data
– Access to Personal Data
– Rectification of Personal Data
– Erasure of Personal Data
– Personal Data Portability
– Restriction of Personal Data processing
– Right to object to data processing
In the event that you wish to complain about how we have handled your Personal Data, please contact Data Protection Officer at cda.go.ke
We will retain your personal data only as long as reasonably necessary to satisfy the purposes for which they are collected and in line with applicable laws.
After this period, CDA ensures that your Personal Data will be deleted, erased, anonymized or pseudonyminised. Any Personal Data held by CDA or marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.
CDA applies all the necessary technical and organizational security measures in order to ensure the integrity and confidentiality of the data and to prevent the loss of, damage to or unauthorized destruction and prevent any unlawful access to or unauthorized processing of personal data.
Requests, complaints or inquiries relating to processing and protection of Personal Data can be sent to the e-mail address cda@cda.go.ke
When contacting and posting such requests, we will invest reasonable efforts to confirm your identity and to prevent unauthorized Personal Data processing.
Data subjects have the right to lodge a complaint with a national data protection authority.
As CDA evolves, there may be the need to update this Policy to keep pace with changes to the website, software, services, business and Applicable Laws. CDA will however, always maintain its commitment to respect the Data Subject’s privacy. CDA ensures that it will post any other revisions to this Policy along with their effective date, in an easy-to-find area of the website.
This document was updated on 08-NOV-2022 and is effective from that date.
