When you use XPay, we may collect the following types of information:

• Personal Information: Name, email, phone number, date of birth, and address.
• Identity Verification Data: Government-issued ID, BVN, and other KYC-related documents.
• Transaction Details: Payment history, trade activities, wallet balance, and payout details.
• Device & Usage Data: IP address, browser type, operating system, and login activity.
• Cookies & Tracking Data: We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and improve security.

XPay uses cookies and similar technologies to deliver, improve, and protect our services:

• Essential Cookies: Required for the platform to function properly, including authentication and security cookies.
• Analytics Cookies: Help us understand how users interact with our platform so we can improve the user experience.
• Preference Cookies: Remember your settings and preferences for a personalized experience.
• Managing Cookies: You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.
• Third-Party Cookies: We may use trusted third-party services (e.g., analytics providers) that set their own cookies. These are governed by their respective privacy policies.

We use the information we collect to:

• Verify your identity and comply with regulatory KYC/AML (Know Your Customer/Anti-Money Laundering) requirements.
• Facilitate secure transactions, including crypto trading, gift card exchanges, and bill payments.
• Improve our services, enhance user experience, and prevent fraud.
• Send account updates, security alerts, and promotional offers (you can opt out anytime).
• Detect, investigate, and prevent fraudulent or illegal activities.

We implement industry-standard security measures to protect your personal and financial data, including:

• End-to-End Encryption for all sensitive transactions.
• Two-Factor Authentication (2FA) to enhance account security.
• Fraud Detection Systems to monitor suspicious activities.
• Strict Data Access Controls to ensure only authorized personnel can access sensitive information.