Compliance
Regulatory Compliance
RaffleProp is fully compliant with all applicable Nigerian laws and regulations governing promotional competitions, data protection, anti-money laundering, and consumer protection.
CAC Registered
RC 9484205
FCCPC Approved
Per FCCPA 2018
SCUML Registered
AML/CFT Compliant
NDPR Compliant
Data Protection 2019
PCI-DSS Payments
Paystack · Flutterwave
Corporate Registration — CAC
- Incorporated as RaffleProp Ltd with the Corporate Affairs Commission of Nigeria under RC 9484205 on 13 April 2026.
- Registered office: 36 Minfa Crescent, Karu, Nigeria.
- Annual returns filed with CAC as required by the Companies and Allied Matters Act (CAMA) 2020.
FCCPA 2018 — Federal Competition & Consumer Protection Act
- All campaigns are individually approved by the FCCPC before launch.
- Skill question requirement ensures classification as a Promotional Competition, not a lottery.
- FCCPA §118 compliant receipt issued for every ticket purchase.
- FCCPC notified of draw results within 24 hours per FCCPA §124.
- Form CPC B filed within 21 days of each completed draw.
- Winner notified within 3 days of draw per FCCPA §123.
- All draws live-streamed on YouTube and archived permanently.
NDPR 2019 — Nigeria Data Protection Regulation
- Explicit NDPR consent obtained at registration with consent timestamp and IP address recorded.
- BVN and NIN encrypted at rest using AES-256-GCM; never stored or transmitted in plain text.
- Data access, correction, portability, and deletion rights accessible via account dashboard.
- NDPR deletion requests processed within 30 days; ticket records retained per FCCPA §118 legal obligation.
- No personal data sold or shared with third parties beyond operational necessity.
- Privacy Policy published and maintained per NDPR Article 24.
- Data Protection Officer appointed; contact: privacy@raffleprop.com.
AML/CFT — Anti-Money Laundering & Counter-Terrorism Financing
- SCUML-registered (Special Control Unit Against Money Laundering) as a Designated Non-Financial Institution (DNFI).
- KYC verification (BVN + NIN matching) required before ticket purchase.
- All payments processed exclusively through PCI-DSS compliant gateways (Paystack, Flutterwave).
- Suspicious transaction monitoring in place per EFCC Act and CBN AML/CFT Regulations.
- Customer Due Diligence (CDD) conducted on all registered users.
LSLGA — Lagos State Lotteries & Gaming Authority
- LSLGA licence held for all campaigns involving Lagos State properties.
- State-level compliance with the Lagos State Lotteries Act for each applicable campaign.
- Campaign-specific state gaming authority approvals obtained prior to ticket sales.
Escrow & Financial Controls
- All ticket proceeds held in a ring-fenced escrow account at the bank named on each campaign page.
- Escrow account number published on every campaign page for full transparency.
- Funds released to RaffleProp only after the draw is completed and the FCCPC winner list is verified.
- Automatic refund triggered within 3–5 business days if minimum ticket threshold is not reached.
- Financial records retained for 7 years for tax and audit compliance.
Technical Security
- All data in transit encrypted via TLS 1.3; all HTTP traffic redirected to HTTPS.
- BVN and NIN encrypted at rest using AES-256-GCM with keys stored separately from data.
- Regulatory documents stored in WORM (write-once, read-many) cloud storage — cannot be modified or deleted.
- All data access events recorded in an append-only audit log.
- Admin accounts require two-factor authentication (TOTP).
- No personally identifiable information (PII) written to application logs in plain text.
- Access to personal data restricted on a strict need-to-know basis.