Privacy Policy
Last updated: June 13, 2026 · Effective immediately
MsjPay ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our platform.
1. Information We Collect
We collect information you provide directly when registering and using MsjPay:
- Personal Details: Full name, username, email address, phone number
- Identity Verification: BVN, NIN (for KYC verification)
- Financial Data: Transaction history, wallet balances, virtual account details
- Device Data: IP address, device type, browser, login timestamps
- Communications: Support messages and feedback you send us
2. How We Use Your Information
- To create and manage your MsjPay account
- To process payments, airtime, data, and bill payments
- To verify your identity and prevent fraud
- To send transaction notifications and account alerts
- To comply with regulatory obligations (CBN, NDPR)
- To improve our services and user experience
- To respond to your support requests
3. Data Sharing
We do not sell your personal data. We share data only with:
- Payment Processors: PalmPay, PaymentPoint — for processing transactions
- VTU Providers: Gladtidings — for airtime, data, bill payments
- Regulatory Bodies: When required by Nigerian law (CBN, EFCC, etc.)
- Service Providers: Cloud hosting, SMS, and email providers under strict data agreements
4. Data Security
We implement industry-standard security measures including:
- Bcrypt password hashing (cost factor 12)
- 4-digit transaction PINs (hashed with Bcrypt)
- HMAC-SHA256 webhook signature verification
- SSL/TLS encryption for all data in transit
- Rate limiting and IP-based brute-force protection
- SQL injection prevention via PDO prepared statements
5. Your Rights (NDPR)
Under Nigeria's NDPR, you have the right to:
- Access a copy of your personal data
- Correct inaccurate information
- Request deletion of your account and data
- Withdraw consent for non-essential processing
- Lodge a complaint with NITDA
6. Data Retention
We retain your account data for as long as your account is active. Transaction records are kept for 7 years to comply with financial regulations. After account deletion, personal data is anonymized within 30 days, except where required by law.
7. Cookies
We use essential session cookies only — no tracking or advertising cookies. Sessions expire when you log out or after 24 hours of inactivity.
8. Children's Privacy
MsjPay is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately.
9. Changes to This Policy
We may update this policy periodically. We will notify you via email or in-app notification for significant changes. Continued use after changes constitutes acceptance.
10. Contact Us
For privacy-related questions or to exercise your rights: