Table of Contents
1. Introduction
Betavend ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information when you use our platform at app.betavend.com. By using Betavend, you consent to the practices described in this policy.
2. Information We Collect
We collect the following categories of information: (a) Identity Data: Full name, date of birth (for KYC), government ID details; (b) Contact Data: Email address, phone number; (c) Account Data: Username, hashed password, transaction PIN (stored encrypted); (d) Transaction Data: Purchase history, wallet balance, service beneficiary numbers (phone, meter, smartcard); (e) Technical Data: IP address, browser type, device information, login timestamps; (f) KYC Data: BVN hash (we do not store your BVN in plain text), ID document scans for Level 2+ verification; (g) Communication Data: Support tickets, chat messages, email correspondence.
3. How We Use Your Data
We use your personal data to: (a) process and deliver your service requests; (b) maintain and secure your wallet account; (c) detect and prevent fraud, money laundering, and unauthorised access; (d) comply with Anti-Money Laundering (AML) regulations and Central Bank of Nigeria (CBN) directives; (e) communicate service updates, maintenance notices, and promotional offers (you may opt out of marketing); (f) resolve disputes and enforce our Terms of Service; (g) improve our platform through aggregated, anonymised analytics.
4. Data Sharing & Third Parties
We share your data only when necessary and only with: (a) VTU Service Providers (VTPass, ConnectBridge, etc.) — to process your service requests. These providers receive only the minimum data required (e.g., phone number, amount); (b) Payment Processors (Monnify) — to process wallet funding. Subject to their own privacy policy; (c) KYC Verification Partners — to verify your identity in compliance with CBN regulations; (d) Legal Authorities — when required by Nigerian law, court order, or regulatory directive from bodies such as EFCC, CBN, or NCC; (e) We do NOT sell your personal data to any third party for marketing purposes.
5. Data Storage & Security
Your data is stored on secure servers located in the European Union (Google Cloud Platform, Belgium region). All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Transaction PINs are hashed using bcrypt and cannot be recovered by Betavend staff. We conduct regular security audits and penetration testing. Access to production data is restricted to authorised personnel only, with full audit logs maintained. In the event of a data breach affecting your rights, we will notify you within 72 hours of becoming aware of the breach.
7. Your Rights
Under applicable Nigerian data protection law (NDPR) and international best practices, you have the right to: (a) Access: Request a copy of all personal data we hold about you; (b) Correction: Request correction of inaccurate personal data; (c) Deletion: Request deletion of your account and associated data, subject to our legal retention obligations; (d) Portability: Receive your transaction data in a machine-readable format; (e) Object: Object to processing of your data for marketing purposes; (f) Withdraw Consent: Withdraw consent where processing is based on consent. To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Data Retention
We retain your personal data for as long as your account is active and for a period thereafter as required by law. Specifically: (a) Transaction records: 7 years (required by Nigerian financial regulations); (b) KYC documents: 5 years after account closure; (c) Support communications: 2 years; (d) Technical logs: 90 days; (e) Account data: 30 days after deletion request (to allow for recovery), then permanently deleted. Anonymised, aggregated data may be retained indefinitely for analytics purposes.
9. Children's Privacy
Betavend is not intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will immediately suspend their account and delete their data. If you believe a minor has registered on our platform, please contact us at [email protected].
10. Updates to This Policy
We may update this Privacy Policy periodically. All versions are archived with their publication date. When we make material changes affecting your rights, we will notify you by email and via an in-app prompt requiring re-acceptance. The current version number and publication date are always displayed at the top of this document.
11. Contact & Complaints
For privacy-related enquiries, contact our Data Protection Officer at: [email protected]. If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.