Privacy Policy

1. Overview & Commitment

At Wicomi Global Services, protecting the privacy and confidentiality of your personal and business data is paramount. This Privacy Policy details how we collect, store, process, share, and safeguard information when you use our websites, API endpoints, payment systems, and financial products.

Wicomi complies fully with the Nigeria Data Protection Act (NDPA 2023), Nigeria Data Protection Regulations (NDPR), and international data protection standards.

2. Information We Collect

We collect personal information necessary to deliver compliant fintech services:

• Identity & Verification Data: Full name, date of birth, email address, phone number, residential address, BVN (Bank Verification Number), NIN, and government-issued photo ID.
• Business & Corporate Data: CAC registration certificates, Tax Identification Number (TIN), business registration details, and director information.
• Financial & Transactional Data: Bank account numbers, wallet balances, transaction histories, payout logs, and credit history details for loan evaluations.
• Technical Data: IP address, device information, browser type, location data, and API access logs for security and fraud prevention.

3. How We Use Your Information

Your data is strictly processed for legitimate operational and regulatory requirements:

• To open and manage your digital payment account and virtual bank accounts.
• To verify your identity and satisfy Mandatory Know Your Customer (KYC) / Anti-Money Laundering (AML) laws.
• To evaluate eligibility for Wicomi Instant Loans and credit facilities.
• To process transaction settlements, payouts, and automated webhook notifications.
• To detect and prevent fraudulent transactions, cyber threats, and security breaches.

4. Data Security & Encryption

Wicomi employs bank-grade security protocols, including AES-256 bit encryption for data at rest and TLS 1.3 for data in transit. Sensitive credentials such as transfer PINs and passwords are stored as cryptographic hashes and never stored in cleartext.

5. Data Sharing & Third Parties

We do not sell, rent, or monetize your personal data. We only share data with licensed third parties under strict contractual confidentiality, including:

• Partner switching networks and commercial banks (e.g. NIBSS, Wema Bank, Flutterwave) for transaction settlement.
• Identity verification agencies (NIMC, NIBSS BVN portal) for KYC validation.
• Regulatory agencies (Central Bank of Nigeria, NFIU, EFCC) upon lawful subpoena or regulatory directive.

6. Your Data Rights

Under NDPA 2023, you retain the following rights regarding your data:

• Right to request access to your personal data held by Wicomi.
• Right to request rectification of inaccurate or outdated information.
• Right to request data erasure, subject to mandatory financial record-retention laws.
• Right to lodge complaints with the Nigeria Data Protection Commission (NDPC).

7. Contact Our Data Protection Officer (DPO)

For data privacy inquiries or to exercise your privacy rights, contact our DPO at: dpo@wicomiglobalservices.org.

Nigeria Registered Address (CAC BN 9796404): DANDIVE ESTATE, COMPREHENSIVE NEIGHBORHOOD, EGBU, OWERRI, IMO STATE, NIGERIA.