Privacy Policy

1. Data Controller

BettaPay Technologies Inc. ("BettaPay", "we", "us", or "our") serves as the data controller responsible for personal information collected through our web applications, APIs, payment link infrastructure, and decentralized Stellar network integration tools.

2. Data We Collect

We collect personal information necessary to deliver compliant non-custodial crypto-to-fiat merchant payment services:

• Account & Merchant Profile Data: Full name, business registration number, email address, phone number, physical address, and bank account details for settlement.
• Identity & KYC Information: Government-issued identification documents, utility bills, and facial verification images collected during merchant onboarding.
• Blockchain & Transaction Data: Public Stellar wallet addresses, payment hashes, transaction amounts, timestamps, and destination bank account identifiers.
• Technical & Usage Data: IP addresses, browser specifications, operating system versions, access timestamps, and API key activity logs.

3. How We Use Data

Your personal data is processed strictly for legitimate operational, security, and legal purposes:

• Facilitating seamless USDC and XLM crypto payments and auto-converting funds via SEP-24 anchor networks into local bank accounts.
• Verifying merchant identity and fulfilling Anti-Money Laundering (AML) and Know Your Customer (KYC) regulatory compliance requirements.
• Monitoring, detecting, and mitigating fraud, illegal transactions, and unauthorized access to payment endpoints.
• Sending transactional updates, webhook notifications, rate alert communications, and system security advisories.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and Nigeria Data Protection Regulation (NDPR), we rely on legal bases including:

• Performance of a Contract: Processing necessary to execute merchant agreements and settle payments.
• Legal Obligations: Compliance with financial reporting, AML/CFT mandates, and statutory tax directives.
• Legitimate Interests: Improving service reliability, enhancing fraud detection, and securing platform APIs.
• Consent: Where explicitly provided for optional communications and analytics cookies.

5. Data Sharing & Third Parties

We do not sell your personal information. We disclose data solely to authorized entities under strict confidentiality agreements:

• SEP-24 Anchors & Financial Partners: Licensed banking institutions and Stellar anchor providers for fiat liquidity and local currency disbursement.
• Identity Verification Vendors: Automated KYC verification services for document checking and watchlist screening.
• Regulatory Authorities: Law enforcement agencies or financial regulators when required by law or valid court order.

6. International Data Transfers

As a cross-border payment platform operating over the global Stellar distributed ledger, information may be transferred across jurisdictions. We ensure adequate safeguards via Standard Contractual Clauses (SCCs) and NDPR-compliant transfer mechanisms.

7. Data Retention

We retain personal data for as long as your merchant account remains active. Account and transaction history records are maintained for a minimum of 5 years following account closure to meet statutory financial record-keeping laws.

8. Your Rights

Under GDPR and NDPR framework, you possess comprehensive rights concerning your personal information:

9. Cookies & Tracking

BettaPay uses essential cookies and local browser storage to maintain authenticated user sessions, store theme preferences, and secure API requests. We do not use intrusive third-party cross-site advertising trackers.

10. Security Measures

We employ enterprise-grade security protocols, including AES-256 encryption at rest, TLS 1.3 in transit, automated web application firewalls, strict non-custodial wallet separation, and regular vulnerability audits.

11. Children's Privacy

BettaPay services are strictly designed for businesses and individuals aged 18 and above. We do not knowingly solicit or collect data from individuals under the age of 18.

12. Changes to Policy

We may revise this Privacy Policy periodically to reflect technological, operational, or legal developments. Merchants will be notified of material changes via email or dashboard alert prior to implementation.

13. Contact Us

If you have questions, concerns, or requests regarding this policy or data processing practices, please contact our Data Protection Officer: