Privacy Policy

This Privacy Policy explains how MSAL Data Hub (“we”, “us”, “our”) handles personal data when you use our website, wallet, and related services. By using the Platform, you acknowledge the practices described here.

1. Information we collect

Account information

• Name, email address, phone number, and login credentials.
• Account role, tier, referral relationships, and profile settings.

Transaction and wallet data

• Wallet balances, funding records, debits, credits, and transaction references.
• Service purchase details (network, plan, recipient number, meter number, smartcard/IUC, amounts).
• Payment gateway references for online wallet funding (we do not store full card details on our servers).
• Manual deposit submissions and uploaded payment proofs where applicable.

Technical and security data

• IP address, browser type, device information, and session logs.
• API and provider interaction logs used for troubleshooting, fraud prevention, and audit purposes.

2. How we use information

We use personal data to:

• Create and manage user accounts and authenticate access.
• Process wallet funding, service purchases, refunds, and receipts.
• Provide customer support and resolve transaction disputes.
• Monitor platform security, detect abuse, and prevent fraud.
• Operate referral, promo, and reseller features where enabled.
• Comply with legal obligations and respond to lawful requests.
• Improve platform reliability and user experience.

3. Legal bases and consent

We process data as necessary to perform our contract with you (providing the Platform), to comply with legal obligations, and based on our legitimate interests in securing and improving the service. Where required, we seek your consent for specific communications or optional features.

4. Sharing of information

We may share limited information with:

• Payment gateway partners to process online wallet funding.
• VTU and bill payment providers to fulfill data, airtime, electricity, and cable transactions.
• Infrastructure, hosting, and support vendors under confidentiality obligations.
• Law enforcement or regulators when required by applicable law or valid legal process.

We do not sell personal data to third parties for their independent marketing purposes.

5. Data retention

We retain account and transaction records for as long as needed to provide services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Logs may be retained for security and audit periods consistent with operational needs.

6. Security measures

• Encrypted connections (SSL/TLS) for data in transit where supported.
• Access controls, role-based permissions, and activity logging for administrative actions.
• Redaction of sensitive values in operational logs where technically feasible.

No method of transmission or storage is completely secure. You share responsibility for protecting your account credentials.

7. Your rights and choices

Subject to applicable Nigerian data protection principles, you may:

• Request correction of inaccurate account information through your profile or support.
• Request information about transactions associated with your account.
• Request account deletion subject to legal retention requirements and open transaction reviews.
• Opt out of non-essential marketing messages where offered.

8. Cookies and similar technologies

We use session cookies and similar technologies necessary for authentication, security, and basic site functionality. You may control cookies through your browser settings, but disabling them may limit Platform features.

9. Children’s privacy

The Platform is not intended for users under 18. We do not knowingly collect personal data from children. If you believe a minor has registered, contact support for review.

10. International processing

Our primary operations and data processing are oriented toward users in Nigeria. If data is processed outside Nigeria through cloud or provider infrastructure, we apply reasonable safeguards consistent with this policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes may be communicated through the Platform or support channels.