Legal

Privacy Policy

Last updated: 31 August 2026

1. Who processes your information

This policy explains what personal information IPTV South Africa collects, why, who it is shared with and what you can ask for. It covers the website iptvv.co.za and the service itself, and is issued in terms of the Protection of Personal Information Act 4 of 2013 (POPIA).

The responsible party is the operator of the IPTV South Africa service, reachable at contact@iptvv.co.za. Any request about your information can be sent to that address.

This policy forms part of our terms and conditions.

2. What we process, why, and on what basis

POPIA requires a lawful justification for each kind of processing. Here is the full picture, with nothing left out.

What we process Why Justification (POPIA s11)
Login details
username, password, server URL
Giving you access to the service you paid for Necessary to perform the contract
s11(1)(b)
MAC address, device key
MAG boxes, IBO players and similar
Activating your subscription on that device Necessary to perform the contract
s11(1)(b)
WhatsApp number, email, messages
including your screenshots
Answering your questions and keeping track of them Necessary to perform the contract
s11(1)(b)
IP address, timestamp, stream count
connection logs
Enforcing the connection limit and preventing abuse Our legitimate interest
s11(1)(f)
Order details
package, amount, date
Invoicing, accounting and tax obligations Compliance with a legal obligation
s11(1)(c)
Analytics cookies
if used
Understanding which pages actually help Your consent
s11(1)(a)

We don't collect anything beyond this. If a new kind of processing were introduced, this page would be updated before it started.

3. Connection logs, plainly stated

This is the part most providers leave vague. We'd rather write it down.

Every subscription includes a limited number of simultaneous connections. To enforce that, our servers record the time of connection, the IP address used and the number of open streams. There is no way to sell a one-connection subscription without it.

Where your device is identified by a MAC address or device key — MAG boxes, IBO players, HotPlayer — we keep that identifier for as long as your subscription is active, because it is what tells our system which device is yours.

This information is used only to run and protect the service. We don't build a profile of what you watch and we don't sell it. You may object to processing based on legitimate interest (section 8), on the understanding that it would make providing the service impossible.

4. WhatsApp, messages and screenshots

Most of our contact runs through WhatsApp. Those messages travel under Meta's terms, not ours — we are simply the other party in the conversation.

We keep the history so we can pick up a conversation where it left off, check what was sent to you, and deal with a later billing or refund question.

About screenshots. We often ask for them because they solve most problems in one step. A screenshot sometimes carries more than intended: notifications, other apps, your name. Crop it if you'd rather, and never send us card numbers, banking details or passwords — we never need them.

Prefer to avoid WhatsApp? Email us at contact@iptvv.co.za.

5. Payments and cryptocurrency

Card and PayPal payments are handled by third-party providers who collect your payment details directly, under their own policies. We receive confirmation and enough order information to match it up — never your full card number.

For crypto payments, the transaction is by design recorded on a public blockchain. That record is permanent, visible to anyone, and outside everybody's control, ours included. Where a refund is requested we keep the wallet address you give us for that purpose only.

6. Who your information is shared with

Payment providers, to take payment and issue refunds.

Hosting and upstream providers, strictly as needed to deliver the stream to your connection. Where these act on our instructions they are operators under POPIA and are bound to process your information only as we direct and to keep it secure.

Professional advisers such as an accountant or attorney, where genuinely necessary.

Authorities, where the law requires it or to establish, exercise or defend a legal claim.

That list is exhaustive. We don't sell your information and we don't pass it to advertisers, data brokers or marketing companies.

7. Direct marketing

Section 69 of POPIA restricts unsolicited electronic marketing. We only send marketing messages to customers who have asked for them, and every message carries a way to stop them.

If you ever receive marketing from us that you didn't ask for, tell us and it stops the same day.

8. How long we keep it

Account and login details — for the life of the subscription, and up to twelve months afterwards in case you come back or a billing question arises.

Invoices and order recordsfive years, as required by the Companies Act and the Tax Administration Act.

Connection logstwelve months at most, the period needed to enforce connection limits and investigate abuse, then deleted.

Message history and screenshots — for as long as they remain useful to supporting you, and deleted on request.

9. Your rights

POPIA gives you the right to: be told what personal information we hold about you and request access to it (sections 23 and 24); ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date or obtained unlawfully (section 24); object to processing based on legitimate interest (section 11(3)); and withdraw consent at any time where processing rests on it, without affecting what was lawful before.

An access request under section 23 is made through the Promotion of Access to Information Act. In practice, just write to us — we'd rather answer plainly than send you chasing forms. We respond within 30 days, which we may extend once where a request is complex, and we'll tell you if we do.

We may need to verify your identity. In practice a reply from the number or address you ordered with is enough.

One thing worth knowing: deleting your information ends your access to the service, because the login and device identifiers are precisely what it runs on.

10. Complaining to the Information Regulator

If you think your rights aren't being respected, write to us first — if we're wrong, we'll put it right.

Either way you may lodge a complaint with the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, or by email to complaints.IR@justice.gov.za. Details are at inforegulator.org.za. Complaining is free and doesn't require you to contact us first.

11. Cookies

Our site uses cookies that are strictly necessary for it to work.

It may also use analytics cookies. These are only set after you agree, through the banner provided, and declining is as easy as accepting. You can change your mind at any time.

You can also block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site working.

Our installation guides link to third-party sites and app stores, which have their own policies and for which we aren't responsible.

12. Information sent outside South Africa

Our providers may process some information outside South Africa — a normal consequence of using international hosting and payment services.

Section 72 of POPIA permits this where the recipient is subject to a law, binding rules or an agreement that provides protection substantially similar to POPIA, or where the transfer is necessary to perform the contract with you. We rely on those grounds.

You may ask us which countries are involved and what safeguards apply.

13. Security

We take reasonable technical and organisational steps to protect the information we hold, as section 19 of POPIA requires. No system is completely secure and we can't promise absolute safety.

If there is a security compromise affecting your personal information, section 22 requires us to notify the Information Regulator and you as soon as reasonably possible after discovering it, and we will.

You can help: keep your login details to yourself, don't post your MAC address or device key in comments or public screenshots, and tell us straight away if you suspect someone else is using your account.

14. Children

The service is not for children. POPIA treats anyone under 18 as a child, and you must be 18 to subscribe. We don't knowingly process the personal information of a child without the consent of a competent person, as sections 34 and 35 require.

If you believe a child has given us information, write to us and we'll delete it.

Where children use a device in the household, most players offer a parental lock. It's worth setting up.

15. Automated decisions

We don't make decisions with legal consequences for you based solely on automated processing, and we don't profile you in the sense contemplated by section 71 of POPIA.

Automatic checks on simultaneous connections may raise a flag, but any suspension of an account is reviewed by a person.

16. Changes to this policy

We may update this policy. The version published here is the one in force, and the date of last update appears at the top. Where a change materially affects you, we'll make reasonable efforts to notify subscribers.

17. Exercising your rights

Email contact@iptvv.co.za with POPIA request in the subject line, or WhatsApp +44 7403 674324. Further details are on our contact page.

See also our terms and conditions and refund policy.