Skip to main content

Privacy Policy

Last updated: August 2026

1. Who we are

ZapData is a Nigerian VTU and utility payments platform. We process personal data in line with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act, and we respect the rights they give you.

2. Information we collect

  • Registration details: your name, email address, phone number, and (at higher tiers) date of birth, gender, state and address. If you choose KYC account setup, you may submit a BVN or NIN for verification.
  • Order details: the phone numbers, meter numbers or betting account IDs you purchase for, so orders can be completed and traced.
  • Payment information: wallet funding is done by your own bank transfer; we receive the reference and amount from our bank integration and never store full card or bank details.
  • Technical data: IP address, user agent and security events (such as failed logins) used to protect your account and detect fraud.

3. How we use your data

  • To deliver the services you purchase and maintain your wallet.
  • To verify your identity at the tier you choose (legal obligation under KYC rules).
  • To protect your account: session security, fraud prevention and audit logs.
  • To send order updates, receipts and important account notices.
  • With your separate consent, to send promotions we think are relevant.

4. Legal basis

We process your data where it is necessary to perform the contract you entered into (providing the services), to comply with a legal obligation (tax and KYC rules), or on the basis of your consent where you have given it. Consent given for marketing can be withdrawn at any time.

5. Sharing and disclosure

  • We never sell your personal data.
  • We share only what is needed with service providers (network providers, bank integrations, cloud infrastructure) to deliver your orders, and they may only use it for that purpose.
  • If you choose BVN/NIN-assisted virtual-account setup, we send that number securely to PaymentPoint for the account request and do not save the submitted number in your ZapData profile or account database.
  • We may disclose data where we are legally required to, for example to the Nigeria Data Protection Commission, law enforcement, or a court under a valid order.

6. Security

Passwords are hashed, sessions are encrypted and expire, sensitive transactions require a transaction PIN, and security-relevant events are logged. Phone number changes clear verification until re-confirmed, and purchase limits scale with your verified tier. We will notify you and the relevant authority where required in the event of a data breach affecting your personal data.

7. Retention

We keep account and order data while your account is active and for as long as legally or regulatorily required (for example, financial records and KYC evidence), after which it is securely deleted or anonymised. You may ask us to delete your account and data at any time, subject to these legal retention obligations.

8. Cookies and analytics

We use minimal cookies needed for authentication and security, plus privacy-respecting analytics to understand how the platform performs. You can clear cookies from your browser at any time; signing out and clearing session cookies will log you out.

9. Your rights under the NDPR

  • Request a copy of the personal data we hold about you.
  • Ask us to correct inaccurate data, including your profile details.
  • Ask us to delete your data or restrict its processing, subject to legal obligations.
  • Withdraw consent for any processing based on consent.

To exercise any of these rights, contact us using the details in section 11. We respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Nigeria Data Protection Commission.

10. Children

We only provide services to people aged 18 and over and do not knowingly collect data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

11. Contact

Data protection questions and right-requests can be sent to support@zapdata.com.ng or raised through the support channels linked in the footer. We reply quickly and treat privacy requests as a priority.