Legal
Privacy Policy
Last updated: 20 May 2026
PROSPER DIGITAL SYSTEMS LTD ("PPAY", "we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights under the Nigeria Data Protection Regulation (NDPR) and applicable law.
1. Information we collect
- —Account information: name, email address, phone number, and date of birth provided at registration.
- —Identity verification data: government-issued ID and selfie photos required for KYC/AML compliance under CBN regulations.
- —Transaction data: amounts, recipients, timestamps, and reference numbers for all payments processed through PPAY.
- —Device and usage data: IP address, device type, operating system, and in-app behaviour used to detect fraud and improve the app.
- —Communications: support tickets, chat messages, and feedback you send us.
2. How we use your information
- —To create and manage your PPAY account and verify your identity.
- —To process transactions, transfers, gift card purchases, airtime top-ups, and savings operations.
- —To comply with legal obligations including CBN anti-money laundering (AML) and the Nigeria Data Protection Regulation (NDPR).
- —To detect, investigate, and prevent fraud, abuse, and security incidents.
- —To send transaction confirmations, security alerts, and with your consent, promotional communications.
- —To improve our products through anonymised analytics and usage patterns.
- —To operate cookies and similar tracking technologies as described in our Cookie Policy.
- —To meet AML, KYC, and counter-terrorism financing obligations as detailed in our AML & KYC Policy.
3. Sharing your information
- —Payment processors and banking partners necessary to settle your transactions.
- —Identity verification providers required for regulatory KYC compliance.
- —Cloud infrastructure providers who store data under strict data-processing agreements.
- —Regulatory authorities (CBN, EFCC, NFIU) when required by Nigerian law.
- —We do not sell, rent, or trade your personal data to advertisers or data brokers.
4. Data security
- —All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
- —Biometric authentication and two-factor verification protect account access.
- —Our security team monitors for threats 24/7. Incidents are reported to you and relevant authorities within 72 hours of discovery.
- —We conduct regular third-party security audits and penetration tests.
5. Your rights
- —Access: request a copy of the personal data we hold about you.
- —Correction: ask us to correct inaccurate or incomplete data.
- —Deletion: request erasure of your data where we are not legally required to retain it.
- —Objection: opt out of marketing communications at any time via app settings or the unsubscribe link in emails.
- —Portability: receive your data in a machine-readable format.
- —To exercise any right, email ppay.ng1@gmail.com. We respond within 30 days.
6. Data retention
- —Account and transaction records are retained for 7 years as required by Nigerian financial regulations.
- —Identity verification documents are held for 5 years post-account closure.
- —Marketing preferences and device logs are deleted 90 days after account closure.
7. Children's privacy
- —PPAY is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us immediately at ppay.ng1@gmail.com.
8. Cookies and tracking technologies
- —We use cookies and similar technologies (web beacons, pixels, device identifiers) to enable secure login, remember preferences, analyze platform usage, and prevent fraud.
- —Strictly necessary cookies cannot be disabled as they are essential to core platform functions such as authentication, session management, and payment processing.
- —You may control non-essential cookies through your browser or device settings. Disabling certain cookies may limit some platform functionality.
- —For full details on the types of cookies we use and how to manage them, please read our Cookie Policy.
9. Changes to this policy
- —We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you via in-app notification and email at least 14 days before material changes take effect. Continued use of PPAY after that date constitutes acceptance.
Contact us
For privacy questions or to exercise your rights, contact our Data Protection Officer at ppay.ng1@gmail.com or write to PROSPER DIGITAL SYSTEMS LTD, Lagos, Nigeria. See also our Cookie Policy and AML & KYC Policy.