FG Investigate Bet9ja Over Alleged Data Breach, Illegal Account Opening

144

The Nigeria Data Protection Bureau (NDPB) has announced the start of an inquiry into the actions of KC Gaming Networks, the promoters of Bet9ja, the country’s top betting firm, over suspected data breaches and unlawful account opening.

This was made known in a statement released on Tuesday, by Mr. Babatunde Bamigboye, the head of the NDPB’s legal, enforcement, and regulatory department.

According to Bamigboye, the probe was prompted by a series of data breach complaints made against the company by its customers.

“Nigeria Data Protection Bureau (the Bureau) has commenced investigations into reports of breach of data privacy involving two major data controllers in Nigeria, namely, Wema Bank PLC and KC Gaming Networks (Bet9ja). This is in line with Section 37 of the 1999 Constitution and the provisions of Nigeria Data Protection Regulation (NDPR) 2019 – particularly Articles 2.1(2)-(3), 2.6 and Article 4 of the NDPR,” the statement said.

“It will be recalled that sometime in May 2022, some customers of Wema Bank PLC complained of breach of their rights to data privacy and protection by the Bank. This data processing, according to the complaints against the Bank, involves using their personal data to open accounts. The Bureau is also investigating report of breach of data privacy at KC Gaming Networks. The breach in this case involved alleged external attack on the KC Gaming Networks.”

Bamigboye added that the main aim of the investigation is to determine the scope of the breach and identify remedial steps, which is being led by Dr. Vincent Olatunji, the bureau’s CEO.

“At this stage, the objectives of these investigations as directed by the National Commissioner/CEO of the Bureau, Dr. Vincent Olatunji, are to determine the impact of the breaches on the affected data subjects and the remedial actions taken by the concerned data controllers,” he said.

“The Bureau assures members of the general public that it will ensure proper accountability of the data controllers in the ongoing investigations.”

Comments are closed.