Nigeria’s data protection regulator calls for stricter privacy measures in gaming sector
The scale of data processing in the gaming sector makes it essential for operators to implement robust privacy frameworks and maintain transparency about how user information is collected.
Nigeria.- The Nigeria Data Protection Commission (NDPC) has drawn attention to the volume of sensitive personal data held by gaming and betting operators in Nigeria, urging stronger safeguards to protect users’ privacy and ensure compliance with national data protection laws.
Speaking on the issue, Vincent Olatunji, NDPC’s National Commissioner and Chief Executive Officer, said the gaming sector processes large amounts of personal and behavioural information belonging to Nigerians. According to the regulator, such data must be handled in line with the provisions of the Nigeria Data Protection Act (NDPA) 2023 to prevent misuse, breaches and unlawful sharing.
The NDPC noted that digital betting platforms typically collect information including names, phone numbers, identification details, financial records and betting activity as part of user registration and payment processes. The regulator said this data is considered sensitive and requires strict protection measures, including secure storage systems and clear user consent protocols.
Olatunji said the scale of data processing in the gaming sector makes it essential for operators to implement robust privacy frameworks and maintain transparency about how user information is collected, processed and stored. He added that compliance with data protection rules is necessary to maintain public trust in the industry and ensure responsible digital services.
The NDPC also emphasised that operators must comply with requirements such as appointing data protection officers, conducting regular compliance audits and registering as major data controllers or processors where applicable. These obligations are part of the NDPA, enacted to strengthen data governance and protect citizens’ privacy rights in Nigeria’s expanding digital economy.
Regulatory attention on data handling within the gaming sector has increased as online betting platforms expand and process larger volumes of user information. In 2025, the NDPC opened investigations into more than 1,300 organisations across industries – including finance, insurance and gaming – over suspected non-compliance with data protection rules.
The Commission said it is working with industry stakeholders to strengthen compliance frameworks within the gaming ecosystem and develop sector-specific guidance for operators. The initiative aims to align betting platforms with international privacy standards and ensure that data processing practices meet regulatory requirements.
According to the NDPC, improving data governance in the gaming industry will help reduce privacy risks while allowing the sector to continue operating within Nigeria’s growing digital services market.
