Privacy Policy
Last Updated:15 April 2026
1. Introduction
Bid & Win is committed to protecting your personal data in accordance with the Malawi Data Protection Act, 2024.
This Privacy Policy explains how we collect, use, and protect your data.
2. Data Controller
Bid & Win acts as the Data Controller, determining how and why personal data is processed.
3. Information We Collect
3.1 Account Information
- Name
- Email address
- Authentication data (via third-party providers)
3.2 Seller Verification Data
For sellers, we may collect:
- Business registration documents
- Tax clearance certificates
- Police clearance documentation
This is used for identity verification and fraud prevention.
3.3 Auction and Activity Data
- Bids placed
- Bid timestamps
- Auction participation history
- Listing details
3.4 Technical Data
- IP address
- Device and browser type
- Usage logs
3.5 Payment-Related Data
Bid & Win does not process payments.
However, we may store:
- Subscription status
- Payment confirmation metadata (from third-party providers)
4. Legal Basis for Processing
We process data based on:
- User consent
- Contractual necessity
- Legal obligations
- Legitimate business interests
5. How We Use Your Data
We use your data to:
- Operate and maintain the Platform
- Enable auctions and bidding
- Verify users and prevent fraud
- Provide customer support
- Improve platform performance
- Enforce Terms of Use
6. Transparency in Auctions
To ensure fairness:
- Certain user information (e.g., names or identifiers) may be visible during active auctions
- Archived auctions may limit visibility
8. Data Retention
We retain data:
- As long as necessary to operate the Platform
- For legal, audit, and dispute resolution purposes
Auction and bid history may be retained for transparency and compliance.
9. Data Security
We implement reasonable security measures, including:
- Secure authentication systems
- Access controls
- Encrypted data transmission
However, no system is completely secure.
10. Your Rights
You may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion (subject to legal limitations)
Requests can be made via contact email.
11. Third-Party Services
We may use third-party services (e.g., authentication, hosting). These providers process data in accordance with their own policies.
13. Changes to This Policy
We may update this Privacy Policy periodically. Continued use of the Platform indicates acceptance of changes.
14. Contact
Email: info.dziwani@gmail.com