Privacy Policy (POPIA)
Last updated: 19 June 2026
This policy explains how X Stream (RMTL Extensive, "we", "us") collects, uses, and protects your personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who is responsible for your data
The Responsible Party is RMTL Extensive (X Stream), South Africa.
Information Officer: admin@zahosting.africa
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Username, email, password (hashed) | Create and secure your account |
| Payment data | Card token + last 4 digits, billing reference | Process subscriptions and token purchases. We never store full card numbers — these are tokenised by our payment provider (PCI-DSS scope sits with them) |
| Usage data | Videos watched, likes, comments, subscriptions | Run the service and recommendations |
| Creator data | Uploaded content, channel info, rights attestations | Publish content |
| Technical data | IP address, device/browser, log timestamps | Security, fraud prevention, troubleshooting |
We do not knowingly collect data from children under 18 without parental/guardian consent.
3. Why we process it (lawful basis)
- To perform our contract with you (provide the streaming service, process payment).
- For our legitimate interests (security, fraud prevention, service improvement).
- To comply with law (tax records, lawful requests from authorities).
- With your consent (e.g. optional marketing emails — you may withdraw at any time).
4. Who we share it with (Operators)
We share the minimum necessary with third-party Operators, each bound to protect your data:
- Payment provider — to process payments.
- Hosting / infrastructure provider — to run the platform.
- Email / communications provider — to send account and transactional emails.
- Authorities — only where legally required.
We do not sell your personal information.
5. Cross-border transfers
Where an Operator processes data outside South Africa, we ensure POPIA-adequate safeguards (contractual protections and/or a jurisdiction with comparable data-protection law).
6. How long we keep it
We keep personal data only as long as needed for the purposes above, or as required by law (e.g. financial records retained per tax legislation). On account deletion we remove or anonymise data we are not legally required to retain.
7. How we protect it
Passwords are hashed; transport is encrypted (HTTPS/TLS); card data is tokenised off-platform; access to systems is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures as required by POPIA.
8. Your POPIA rights
You have the right to: access your data; correct or delete it; object to processing; withdraw consent; and lodge a complaint. To exercise any right, email admin@zahosting.africa.
You may also complain to the Information Regulator (South Africa): enquiries@inforegulator.org.za · inforegulator.org.za
9. Cookies & similar technologies
We use cookies/local storage to keep you signed in and to remember preferences. You can clear these via your browser; doing so may sign you out.
10. Changes
We may update this policy; material changes are posted here with a new "Last updated" date.
11. Contact
RMTL Extensive · X Stream · South Africa
admin@zahosting.africa