1. Data controller
Billturex Technologies is the data controller for personal data processed through the Billturex app. You can contact our Data Protection Officer at dpo@billturex.com.
2. Information we collect
Identity data (full name, date of birth, gender, nationality); contact data (email, phone, home address); identity-verification data (BVN, NIN, government-issued ID, selfie, utility bill, proof of address); financial data (wallet balances, transaction history, linked bank accounts, card fingerprints, crypto addresses); device and usage data (device ID, IP address, app version, session logs); and any information you provide in support conversations.
3. How we use your data
We process your data to operate the service and provide the features you request; to comply with KYC, AML, sanctions, tax, and consumer-protection laws; to detect and prevent fraud and unauthorised access; to communicate service-related notices; to improve the product; and, with your consent, for marketing.
4. Legal bases
We rely on: contract performance (to provide the services); legal obligation (KYC/AML, tax, regulatory reporting); legitimate interests (fraud prevention, product improvement, security); and consent (marketing, optional analytics). You may withdraw consent for optional processing at any time.
5. Who we share data with
Licensed partners strictly on a need-to-know basis: Paystack, VTpass, card-issuing partners, cloud-infrastructure providers (Cloudflare, Supabase/AWS), identity-verification providers, sanctions-screening providers, and, where legally required, regulators and law-enforcement. We never sell your personal data.
6. International transfers
Some partners process data outside Nigeria. We rely on contractual safeguards (Standard Contractual Clauses or equivalents under the NDPA 2023) to ensure adequate protection.
7. Retention
Transaction and KYC records are retained for the period required by the Central Bank of Nigeria and the NFIU (minimum five (5) years after account closure). Marketing preferences are retained until you withdraw consent.
8. Your rights
Under the NDPA 2023 you have the right to access, correct, or delete your personal data, to object to processing, to restrict processing, and to portability. Exercise these rights by emailing dpo@billturex.com. Deletion requests are honoured to the extent our legal-retention obligations allow.
9. Security
We use industry-standard encryption in transit (TLS 1.2+) and at rest (AES-256), hardware-backed key isolation for signing keys, PIN and biometric protection on sensitive actions, role-based internal access, continuous logging, and independent security reviews.
10. Complaints
If you believe we have handled your data incorrectly, contact dpo@billturex.com. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
This document is informational and does not constitute legal advice. In case of conflict, the version filed with regulators prevails.