Security & Trust First

EBSPay Privacy Policy

Last Updated: June 10, 2026. Learn how we safeguard your personal data, transaction histories, and privacy rights.

1. Introduction & Overview

Welcome to EBSPay ("we", "our", "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, use our mobile application, or interact with our payment and bill payment services.

Our Core Privacy Promise

We never sell your personal data. We only collect what is strictly necessary to provide fast, secure, and legally compliant payment services, and we protect it with industry-standard security.

2. Information We Collect

To provide our services effectively and comply with regulatory requirements (such as CBN guidelines), we collect several types of information:

Personal & Identity Data

  • • Contact details (Name, Email, Phone number, Address)
  • • Identity credentials (BVN, NIN, Passport for KYC verification)
  • • Profile details (Username, passwords, or biometrics)

Financial & Transaction Data

  • • Bank account number and settlement details
  • • Details about payments, bill purchases, airtime, and data history

Technical & Device Data

We automatically collect information from the device you use to access EBSPay:

  • • IP address, login data, device type, and operating system
  • • Location data (to help prevent fraudulent logins from unexpected regions)
  • • Usage statistics showing how you navigate and interact with our app

3. How We Use Your Information

We use the information we collect to operate, maintain, and provide you with high-quality and secure services. Specifically, this includes:

1
Service Delivery

Processing your payments, airtime/data top-ups, and managing your EBSPay account.

2
Identity Verification & Compliance

Verifying your identity to comply with anti-money laundering (AML) regulations and CBN directives.

3
Security & Fraud Prevention

Detecting and preventing unauthorized access, abuse, and fraudulent transactions.

4
Customer Support

Responding to your support queries, troubleshooting issues, and repairing system errors.

5
Service Improvement

Analyzing usage patterns to design new features, optimize performance, and enhance layout aesthetics.

4. Information Sharing & Disclosure

We do not sell, rent, or trade your personal data. We only share information with trusted third parties under strict confidentiality agreements, in the following scenarios:

  • 1.Payment Processors & Partners: We share necessary details with financial partners, banks, and payment processors (such as Flutterwave) to complete your transactions.
  • 2.Regulatory & Legal Authorities: We may disclose information if required by law, court order, or regulatory bodies (like the Central Bank of Nigeria) to comply with legal processes or assist in fraud investigations.
  • 3.Service Providers: We work with third-party vendors who assist with IT hosting, KYC verification, customer support tools, and database management. They are restricted from using your data for any other purpose.

5. Data Security & Retention

We employ robust administrative, technical, and physical security measures to protect your personal data from unauthorized access, loss, or alteration.

Our Security Standards Include:

SSL/TLS Encryption

All data in transit is encrypted using advanced secure socket layers.

Strict Access Controls

Access to database is limited only to authorized staff on a need-to-know basis.

Regular Audits

We run security audits and system checks to spot vulnerability early.

Data Retention: We store your personal information for as long as required by financial regulations and guidelines, even after you close your account, to comply with legal data storage laws.

6. Your Legal Rights & Choices

Depending on your location and regional laws, you have specific rights regarding your personal information:

Right to Access & Rectify

You can request a copy of the data we hold about you, and request corrections if any information is inaccurate or out of date.

Right to Erasure (Deactivation)

You can request the deletion of your account. Note that financial data must be retained by law for specific periods and cannot be wiped instantly.

Marketing Opt-Out

You can opt out of promotional emails or push notifications anytime by adjusting your settings or clicking unsubscribe.

7. Contact Our Privacy Team

If you have questions, comments, or complaints regarding this Privacy Policy, or want to exercise any of your data rights, please contact our data protection team: