Privacy notice

Nigeria Data Protection Act

MyTicket processes personal data under the Nigeria Data Protection Act 2023 (NDPA) and the NDPR. We act as data controller for platform accounts, and as data processor for the buyer data an organiser collects through their event.

What we collect

From buyers: name, email address, phone number, the tickets you hold, and the payment method type (never full card details, which are handled entirely by Paystack). From organisers: business details and settlement bank information.

We record the IP address and browser of each order. This is used only to detect fraudulent purchasing patterns.

Who sees your data

The organiser of an event you buy from can see your name, email, phone number and order history for their own events. They cannot see your activity with any other organiser.

Marketing email and SMS are only sent to people who opted in at checkout. You can opt out at any time and the organiser cannot override that.

Cookies and storage

We set four cookies and they all do the same job: keeping you signed in. One each for buyers, organisers, platform staff and gate devices, named myticket_cust, myticket_org, myticket_admin and myticket_gate. They are strictly necessary — without them you would be signed out on every page — so they are not optional and there is nothing to consent to.

We also keep two small values in your browser's own storage rather than sending them anywhere: whether you dismissed the notification prompt, and your answer to the analytics question below. Neither leaves your device and neither identifies you.

We do not use cookies to advertise to you, and we do not sell or share what you do here with anyone for their own marketing.

An organiser's own analytics

Organisers can connect their own Google Analytics, Meta Pixel or TikTok Pixel so they can tell which of their adverts actually sold tickets. Where one has, you are asked before anything loads. If you decline, nothing from Google, Meta or TikTok is loaded at all, and you can buy normally — the question is about measurement, never about whether you may use the site.

If you allow it, that organiser's analytics provider receives that a page was opened and, if you buy, the value and currency of the order and its reference. It does not receive your name, your email address, your phone number, or which tickets you hold. What that provider then does with it is governed by their own policy and by the organiser's agreement with them, not by this notice.

Your answer is remembered in your browser and applies across the site. To change it, clear this site's data in your browser settings and you will be asked again the next time you open an event that uses analytics.

Most events use none of this, and on those pages you will never be asked.

Your rights

Sign in on the My tickets page and open Your data to download everything we hold about you, or to delete it. Both are immediate and self-service.

Deletion removes your name, email, phone and the IP and device recorded against your orders. Order and payment amounts are kept in anonymised form, because Nigerian tax and financial regulation requires transaction records to be retained — they can no longer be connected to you. Any tickets you hold will stop working.