Subscribe to our blog to get exclusive updates and alerts, when we release app updates, product features and monthly giveaways from our team.
At KnoxxPay Technologies Limited (“KnoxxPay”, “we”, “us”, or “our”), we prioritize your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the “Platform”).
KnoxxPay Technologies Limited, registered under the laws of the Federal Republic of Nigeria (RC Number: 8773419), is the data controller responsible for your personal data.
This Privacy Policy is designed in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable data protection laws. We handle your personal data lawfully, fairly, and transparently.
We may update this Privacy Policy from time to time to reflect legal or operational changes. Significant changes will be communicated via email or prominent notice on the Platform.
For inquiries regarding this Privacy Policy or how we manage your personal data, please contact our Data Protection Officer at: compliance@knoxxpay.com
a) Personal Identification Data
- Full name, date of birth, nationality, gender
- Mobile number, email address, physical address (including proof of residence)
- National Identification Number (NIN), Bank Verification Number (BVN), passport number, driver’s license
- Employment status, occupation
- Photograph or selfie for identity verification
b) Financial Data
- Bank account details (account number, bank name, account type)
- Transaction history and records
- Wallet addresses (for cryptocurrency services)
- Payment card information (processed by third-party payment processors)
- Source of funds information
c) Usage Data
- IP address, browser type and version
- Pages visited, date and time of visit, time spent on pages
- Device identifiers and diagnostic data
d) Tracking & Cookies Data
- Session Cookies – to operate the Platform
- Preference Cookies – to store preferences
- Security Cookies – to ensure Platform integrity
- Necessary Cookies – to support essential functionality
- Analytics Cookies – to understand Platform usage
e) Biometric Information
- Facial recognition data or video verification for identity authentication and compliance
f) Transaction Data
- Transaction IDs, amounts, dates, recipients/senders
- Virtual asset types and bill payment details
g) Correspondence Data
- Support requests, feedback, surveys, complaints
h) Device and Location Data
- Geolocation, device fingerprinting, clickstream data
We collect personal data through:
- Direct submissions during registration, profile updates, and KYC verification
- Communications with customer support (email, chat, phone, social media)
- Platform usage (transactions, navigation, automated tracking)
- Third-party sources (identity verification providers, financial institutions, regulatory authorities, publicly available databases)
All data collection complies with NDPR. We do not sell, lease, or distribute your data to third parties for their marketing purposes.
Legal Bases
- Consent – For specific purposes (you may withdraw anytime)
- Contractual Necessity – To fulfill our Terms of Use
- Legal Obligation – To comply with Nigerian laws
- Legitimate Interests – For fraud prevention and service enhancement
Purposes
- a) Identity Verification and Compliance
- KYC/AML/CFT compliance per Money Laundering Act and CBN regulations
- b) Account Management
- Create, manage, authenticate accounts and process transactions
- c) Service Delivery
- Facilitate bill payments and cryptocurrency services through third-party providers
- Process deposits and withdrawals
- Provide customer support
- d) Security and Fraud Prevention
- Detect and prevent fraudulent activities
- Monitor suspicious transactions
- Respond to security incidents
- e) Business Operations
- Staff training, audits, risk management
- f) Service Improvement
- Develop new features and analyze usage patterns
- g) Communication
- Respond to inquiries, provide updates, send confirmations
- h) Marketing (with consent)
- Send promotional messages (you may opt out anytime)
- i) Legal Compliance
- Respond to law enforcement, meet regulatory requirements
Third-Party Service Providers
- Identity verification, payment processors
- Bill payment and cryptocurrency providers
- Cloud hosting, analytics, customer support tools
Financial Institutions
- Banks for payment processing
Professional Advisors
- Legal, audit, tax consultants (under confidentiality)
Regulatory and Law Enforcement
- CBN, SEC, EFCC, NFIU as required by law
Business Transfers
- Mergers, acquisitions (with safeguards)
Your data may be transferred outside Nigeria with:
- Adequate safeguards (standard contractual clauses, binding corporate rules)
- Your explicit consent after risk disclosure
- Compliance with NDPR requirements
Under NDPR, you have rights to:
- Access – Confirm and obtain copies of your data
- Rectification – Correct inaccurate data
- Erasure – Request deletion (subject to legal retention)
- Withdraw Consent – Anytime without affecting prior processing
- Object – To processing for legitimate interests or marketing
- Restrict Processing – Limit use in certain circumstances
- Data Portability – Receive data in portable format
- Be Informed – Understand how data is used
- Complain – To Nigeria Data Protection Bureau (NDPB)
Contact: compliance@@knoxxpay.com
Subject: “Data Subject Request – [Your Name]”
Include: Full name, account email, specific request, proof of identity
Response Time: Within 30 days (may extend to 60 days for complex requests)
Note: Legal retention requirements may prevent immediate erasure of certain records (tax, transaction, audit logs).
Complaints:
- Contact us first: compliance@knoxxpay.com (response within 7 days)
- If unsatisfied: Nigeria Data Protection Bureau (NDPB) at https://ndpc.gov.ng/
Retention Periods
- Account Data: 5 years minimum after closure
- Transaction Records: 5 years (CBN/AML requirements)
- KYC Data: 5 years after relationship ends
- Support Records: 3 years
- Complaint Records: 5 years
- Usage/Log Data: 30-90 days
Security Measures
- Encryption for sensitive data (in transit and at rest)
- Access controls and multi-factor authentication
- Firewalls and intrusion detection
- Regular audits and penetration testing
- Employee training on data privacy
- Incident response protocols
Your Responsibilities
- Secure login credentials
- Use strong passwords
- Enable two-factor authentication
- Report suspicious activity
- Protect devices from malware
Data Breach Notification
Within 72 hours of discovery, we will notify you and NDPB with breach details and remediation steps.We engage third parties for payment processing, KYC, hosting, analytics, and support. All providers:
- Meet our security standards
- Are bound by confidentiality agreements
- Process data only for authorized purposes
- Comply with data protection laws
Our Platform may link to external sites with their own privacy policies. We are not responsible for third-party practices. Review their privacy policies before sharing data.
Types
- Necessary – Essential for Platform operation
- Performance – Analytics and improvement
- Functional – Remember preferences
- Marketing – Targeted advertising (with consent)
We do not knowingly collect data from users under 18. If you believe a child provided data without consent, contact compliance@knoxxpay.com for immediate deletion.
We send marketing with consent. You may:
- Opt out via “Unsubscribe” link
- Update preferences in Account settings
- Email support@@knoxxpay.com
Opting out does not affect transactional emails or legal notices.
- Lawfulness, Fairness, Transparency
- Purpose Limitation
- Data Minimization
- Accuracy
- Storage Limitation
- Integrity and Confidentiality
- Accountability
You must:
- Keep credentials confidential
- Provide accurate information
- Report unauthorized access
- Comply with Terms of Use
You assume responsibility for account security. We are not liable for breaches from your negligence.
Updates will be communicated via:
- Email notification
- Prominent Platform notice
- Updated “Effective Date”
Continued use after changes = acceptance. If you disagree, discontinue use and close your account.
-
Data Protection Officer
Email: compliance@@knoxxpay.comCompany Information
KnoxxPay Technologies Limited RC Number: 8773419 Address: 3 Tunde Joda Street, Off White Sand School, Lekki, Lagos, Nigeria General Support: support@@knoxxpay.com Technical Support: tech@@knoxxpay.com Legal Inquiries: legal@@knoxxpay.comComplaints
- Contact us: compliance@knoxxpay.com (7-day response)
- Nigeria Data Protection Bureau: https://ndpc.gov.ng | info@ndpc.gov.ng
By using the Platform, you acknowledge:
- You have read and understood this Privacy Policy
- You consent to data collection, use, and disclosure as described
- You understand your rights
- You accept these terms
If you do not agree, you must not use the Platform.
© 2026 KnoxxPay Technologies Limited. All rights reserved.