Last updated: [Insert Date]
2Fast ("2Fast", "we", "us", or "our") provides Virtual Top-Up (VTU) services — including airtime, data bundles, cable TV subscriptions, electricity bill payments, and digital wallet funding and transfers — through our mobile application and website 2fast.ng ("the Service"). This Privacy Policy explains what information we collect, why we collect it, and how we protect it. By creating an account or using the Service, you agree to the practices described here.
This Policy is written to comply with the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR), 2019.
1. Information We Collect
1.1 Information you provide
- Full name, email address, and phone number, provided at registration
- Bank Verification Number (BVN) or National Identification Number (NIN), where required for identity verification (KYC) before wallet funding, virtual account creation, or card issuance
- Date of birth, residential address, state, and city, where required for KYC or virtual card issuance
- Transaction PIN (stored only in encrypted/hashed form — we never store or have access to your raw PIN)
- Details you submit for support requests or dispute resolution
1.2 Information collected automatically
- Device information (device model, OS version, unique device identifiers)
- App usage data (features used, session length, crash logs)
- Transaction history: airtime/data purchases, bill payments, wallet funding, transfers, and balances
- IP address and approximate location, for fraud prevention and security
1.3 Information from third parties
When you fund your wallet or verify your identity, we receive confirmation data from our banking and verification partners (see Section 3) — such as BVN/NIN verification results and payment confirmations from your bank or payment processor.
2. How We Use Your Information
- To create and manage your 2Fast account and digital wallet
- To process airtime, data, cable TV, and electricity bill purchases
- To generate and manage virtual funding accounts, and to verify your identity as required by law before enabling wallet funding or card services
- To detect, investigate, and prevent fraud, unauthorized transactions, and abuse of the Service
- To send transaction receipts, security alerts, and service notifications
- To respond to support requests and resolve disputed transactions
- To comply with legal and regulatory obligations, including anti-money laundering (AML) and Know-Your-Customer (KYC) requirements
3. Who We Share Your Information With
We do not sell your personal information. We share information only where necessary to provide the Service:
| Recipient | Purpose |
|---|---|
| Banking & wallet-funding partners | Issuing your dedicated virtual account and processing wallet funding |
| Identity verification providers | Verifying BVN/NIN as required for KYC and card issuance |
| Telecom & billing providers | Fulfilling airtime, data, cable TV, and electricity purchases |
| Card issuance partners | Issuing and managing virtual cards where you request one |
| Regulators & law enforcement | Where required by Nigerian law or a valid legal request |
4. Data Security
We apply industry-standard safeguards to protect your information, including encrypted transmission (HTTPS/TLS), hashed storage of sensitive credentials such as your transaction PIN, and access controls restricting who within 2Fast can view your data. No system is completely immune to risk, but we work to keep your data secure and will notify you of any breach affecting your account as required by law.
5. Data Retention
We retain your personal and transaction data for as long as your account remains active, and for a reasonable period afterward to meet legal, tax, and regulatory record-keeping obligations (including AML/KYC requirements). You may request deletion of your account as described in Section 7, subject to these obligations.
6. Your Rights
Under the NDPA/NDPR, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your account and associated data, subject to legal retention requirements
- Object to or restrict certain uses of your data
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us using the details in Section 9.
7. Account Closure
You may request closure of your 2Fast account at any time. Upon closure, we will deactivate your wallet and virtual account, and delete or anonymize your personal data except where we are required to retain it for regulatory, tax, or fraud-prevention purposes.
8. Children's Privacy
2Fast is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected such information, we will delete it promptly.
9. Contact Us
If you have questions about this Privacy Policy or how your data is handled, contact us at:
Email: support@2fast.ng
Website: 2fast.ng
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via the app or email, and the "Last updated" date above will reflect the latest revision.