Privacy Policy

1. What we collect

• Identity data — name, date of birth, national ID / passport / driver's licence number and document copies, nationality and country of residence.
• Contact and address data — email, phone, residential address.
• Financial data — source of funds, payment records, policy and vault balances, transaction history.
• Technical data — device, IP address and audit logs of actions taken on the platform.

2. Why we collect it

We process this data to provide the service, and because we are required to: customer due diligence under the Financial Intelligence Act, 2012; record-keeping and originator/beneficiary information on virtual asset transfers under the Virtual Assets Act, 2023 (section 18); and prevention of money laundering, terrorism financing and market abuse.

3. Who we share it with

We do not sell your data. We disclose it only to: the designated Regulatory Authority and the Financial Intelligence Centre where required by law; our auditors; and service providers who process data on our behalf under confidentiality obligations (section 13(2) of the Virtual Assets Act requires us to preserve the confidentiality of customer information).

4. How long we keep it

Identity, transaction and audit records are retained for at least five years after the end of the business relationship, as required by the Financial Intelligence Act and the Virtual Assets Act, after which they are securely deleted.

5. How we protect it

KYC documents and personal data are encrypted in transit and at rest. Access is role-restricted and logged in an append-only audit trail. We maintain incident-response procedures, and cyber events are reported to the Regulatory Authority as required by section 12 of the Virtual Assets Act.

6. Your rights

You may request access to, or correction of, your personal data via your dashboard or privacy@africabtc.fund. Deletion requests are honoured except where retention is required by law (see section 4 above).