1. Introduction
Welcome to Y3Data Fintech ("Y3Data", "we", "us", or "our"). We are committed to safeguarding the privacy of our users when accessing our website, web portal, or mobile applications. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our digital wallet, VTU services, bill payments, and financial features.
2. Information We Collect
To provide secure digital payment services, we collect the following types of information:
- Account Credentials: Full name, email address, phone number, username, state, and encrypted password hash.
- Financial & Transaction Data: Wallet balance history, virtual account numbers (Moniepoint/XixaPay), deposit logs, utility bill details, and transaction references.
- Device & Usage Information: IP address, device model, operating system version, browser type, and push notification tokens.
- KYC Verification Data: Bank Verification Number (BVN) or National Identity Number (NIN) where legally mandated for anti-money laundering (AML) compliance.
3. How We Use Your Information
We use your personal and transaction data strictly for legitimate operational purposes:
- Processing VTU purchases (Airtime, Data Bundles, Electricity Tokens, Cable TV subscriptions, Exam PINs).
- Managing your digital wallet balance, bank transfers, and automated deposit reconciliations.
- Authenticating logins and securing your account against unauthorized access or fraud.
- Sending transaction receipts, security alerts, and system notification updates.
- Complying with Central Bank of Nigeria (CBN) and NDPR regulatory audit mandates.
4. Data Sharing & Third Parties
Y3Data does not sell, rent, or trade your personal information to third-party advertisers. We only share necessary operational data with verified payment partners and infrastructure providers to fulfill your transactions:
- Licensed Payment Gateways: XixaPay, ArewaGate, and Moniepoint Microfinance Bank for virtual account generation and payment settlement.
- Telecom & Utility Providers: MTN, Airtel, Glo, 9mobile, AEDC, IKEDC, DSTV, GOTV, and Startimes to deliver requested services.
- Regulatory & Law Enforcement: Where strictly compelled by court order, Central Bank of Nigeria directive, or applicable Nigerian laws.
5. Data Security & Encryption
We enforce bank-grade security protocols across our entire ecosystem. All communication between your device and our servers is encrypted using 256-bit SSL/TLS protocol. Passwords and transaction PINs are securely hashed using modern cryptographic algorithms (Bcrypt). Access to customer databases is restricted exclusively to authorized compliance personnel.
6. Account & Data Deletion Rights
You have the right to request deletion of your account and personal data at any time. You can delete your account directly inside the Y3Data Mobile App (Profile → Security → Delete Account) or via our public Account Deletion Request Page without logging in.
Personal credentials are permanently erased upon deletion request. Financial transaction receipts and wallet ledger records are retained for 6–10 years as required by CBN AML/CFT regulations.
7. Contact Us
If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact our Compliance Officer:
- Email: support@y3data.com
- Website: y3data.com/support.php