Privacy Policy

Privacy Policy for Data Deals NG

Last Updated: September 16, 2026

Data Deals NG (“we,” “our,” or “us”) operates the website https://datadeals.ng and the Data Deals NG mobile application (available on Google Play Store). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our mobile application and related Virtual Top-Up (VTU) services.

By accessing or using Data Deals NG, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

1. Information We Collect

We collect only the information necessary to provide, secure, and improve our VTU and bill payment services.

A. Information You Provide Directly

• Personal & Contact Data: Name, phone number, email address, and username provided during registration or profile update.
• Transaction & Purchase Data: Beneficiary phone numbers for airtime/data top-ups, meter numbers for electricity, smart card/IUC numbers for cable TV, and exam registration details.
• Financial & Payment Information: Payment confirmation receipts, payment transaction reference codes, session IDs, and virtual account details. (Note: We do not directly store your debit card CVV or full PAN numbers; payments are processed securely by certified payment gateways like Monnify, Paystack, or automated bank transfer partners).
• Customer Support Inquiries: Information and chat transcripts you provide when reaching out to support via WhatsApp, email, or in-app tickets.

B. Device & Technical Information (Collected Automatically)

• Log & Usage Data: IP address, operating system version, browser type, device brand/model, unique device identifiers, time stamps, app crashes, and navigation paths.

C. Mobile App Permissions (Google Play Disclosure)

To enable specific features, the mobile app may request the following permissions:

• Read Contacts (READ_CONTACTS): Optional. If granted, this allows you to quickly select phone numbers from your address book to purchase airtime or data without manually typing the recipient’s number. We do not upload, share, or store your contact list on our servers. Contacts are accessed locally and ephemerally only when you choose to use the phonebook picker.
• Storage / Photos / Media (READ_EXTERNAL_STORAGE / READ_MEDIA_IMAGES): Optional. Required only when you wish to download transaction receipts, save transaction proof, or upload payment receipts for wallet funding verification.
• Notifications (POST_NOTIFICATIONS): Used to send real-time alerts about successful transactions, wallet funding credits, system maintenance, and service updates.
• Biometric / Fingerprint (USE_BIOMETRIC): Optional. Used strictly on your local device to authenticate secure login or transaction authorizations.

2. Legal Basis for Processing (Nigeria Data Protection Act – NDPA)

We process your personal information under the following legal bases:

1. Contractual Performance: To fulfill our VTU services, complete top-up orders, fund wallets, and provide account management.
2. Legal Obligation: To comply with anti-money laundering (AML), fraud prevention, and financial reporting standards.
3. Legitimate Interests: To maintain security, verify platform integrity, and prevent fraudulent transactions.
4. Consent: Where you provide explicit permission (e.g., opting into marketing alerts or granting phonebook contact access).

3. How We Use Your Information

We use the collected information for purposes including:

• Processing instant VTU orders (Airtime, Internet Data, Electricity Bills, Cable Subscriptions, and Exam PINs).
• Generating and managing dedicated virtual account numbers for instant wallet funding.
• Maintaining transaction history and records for auditing and dispute resolution.
• Preventing duplicate transactions, fraud, and illegal account takeovers.
• Providing prompt customer support and technical assistance.
• Complying with regulatory directives issued by Nigerian telecommunications and financial authorities.

4. Third-Party Disclosures & Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with necessary third parties under strict confidentiality and security protocols:

• Telecommunication Operators & Utility Aggregators: MTN, Airtel, Glo, 9mobile, DISCOs (electricity distributors), and exam boards to execute your requested top-ups.
• Payment Processors & Banking Partners: Licensed payment switches and commercial banks to process deposits, bank transfers, and verify wallet credits.
• Hosting & Cloud Providers: Secure cloud infrastructure partners that host our servers, databases, and APIs.
• Law Enforcement & Regulatory Authorities: When required by subpoena, court order, or applicable laws under the Federal Republic of Nigeria.

5. Data Security

We implement strict physical, electronic, and administrative safeguards to protect your personal and financial information:

• SSL/TLS 256-bit encryption for all web and API data transmissions.
• Hashed passwords and secure transaction PIN protocols.
• Strict internal access controls restricting customer data to authorized support personnel on a need-to-know basis.

6. Data Retention and Account Deletion (Google Play Compliance)

A. Data Retention

We retain personal data only for as long as your account remains active or as required by financial, tax, and anti-fraud recordkeeping laws in Nigeria (typically 5 to 7 years for financial ledger records).

B. User Account & Data Deletion

In accordance with Google Play Store policies and user privacy rights, you have the right to request the permanent deletion of your account and associated personal data.

• Web / Email Request: You may request account deletion at any time without needing to reinstall the app by visiting our dedicated deletion link at https://datadeals.ng/delete-account (or by emailing help@datadeals.ng with your registered phone number and username).

What happens upon deletion:

• Your profile, saved beneficiaries, login credentials, and session tokens are permanently wiped from active servers within 30 days.
• Transaction reference IDs and legal invoices that we are required to retain by law for financial accounting will be retained in an anonymized format.

7. Children’s Privacy

Our platform and application are not intended for individuals under the age of 13 (or under 18 without parental consent). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information, we will delete it immediately.

8. Your Legal Rights

Under the NDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent for optional processing activities (such as marketing emails).
• Object to or restrict specific data processing activities.

9. Changes to This Privacy Policy

We may periodically update this policy to reflect platform updates, technology changes, or regulatory requirements. Any modifications will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

10. Contact Us & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or wish to exercise your data rights, please contact our Data Protection Team:

• Website: https://datadeals.ng
• Email: help@datadeals.ng
• Address: Abuja, Nigeria
• Customer Support: Available directly through the in-app chat or website helpdesk.