How we collect, use, and protect your personal data and information
User agreement, acceptable use policy, and service terms for Bigisub platform
Operator: RIF Africa (RIF African Business Enterprise, RC 2709434)
Platform: Bigisub — www.bigisub.ng
Effective Date: July 31, 2025
Last Updated: July 2026
Bigisub is a product of RIF African Business Enterprise provided under the RIF Africa initiative. References to "we", "us", and "our" refer to RIF Africa.
This Privacy Policy sets out how RIF Africa, operating the Bigisub platform, collects, uses, stores, shares, and protects your personal data when you access or use the Bigisub platform including its website, mobile applications, APIs, reseller dashboard, and all associated services.
Applies to: All registered users including Guardian-Managed Account holders, visitors, resellers and API users, job applicants, and any person whose data is processed.
Important: By using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
The Platform is accessible to users aged 11 and above through our Guardian-Managed Account structure. All verification is conducted by the Adult Guardian. Children under 11 may only use the Platform under direct adult supervision.
By registering on our Platform or providing your data to us, you consent to the collection and processing of your personal data as described in this Policy. You may withdraw your consent at any time in accordance with Section 18 of this Policy.
Clear, freely given, specific, informed consent for data processing activities.
To fulfil contracts with you and take pre-contractual steps at your request.
Financial crime reporting and regulatory compliance obligations.
Fraud prevention, security monitoring, and platform improvement.
Processing necessary to protect vital interests in emergency situations.
Cooperation with law enforcement and public authorities when required.
Data you provide directly through registration, identity verification, transactions, support requests, forms, newsletter subscriptions, and reseller applications.
Data collected automatically through server logs, cookies, analytics tools, and security monitoring systems.
Data received from identity verification partners, payment processing partners, sanctions screening services, and other users of the Platform.
We may retain partial registration data to assist you in completing the registration process.
We do not intentionally collect data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, sexual orientation, genetic data, or biometric data.
To create, activate, manage, and authenticate your account, communicate with you about your account, and maintain security.
To process your orders, send confirmations, investigate failed transactions, and communicate with service providers on your behalf.
To process wallet funding and debits, maintain accurate transaction records, and resolve payment disputes.
To verify your identity, conduct sanctions screening, perform risk assessments, and maintain regulatory compliance records.
To detect, investigate, and prevent fraud, monitor suspicious activity, and protect the Platform and its users.
To respond to your enquiries, resolve disputes, and process refund requests.
To fulfil financial crime reporting obligations, report suspicious transactions, and enforce our Terms of Service.
To analyse usage patterns, resolve technical issues, and develop new features and services.
To send essential service communications, marketing messages (with your consent), and personalised content. You may opt out of marketing communications at any time via the unsubscribe link or by contacting [email protected].
To manage reseller accounts, monitor API usage, process commissions, and investigate potential misuse.
Our fraud prevention processing includes screening against known fraud databases, monitoring transaction patterns for anomalies, detecting account manipulation and multi-accounting, and sharing relevant information with law enforcement authorities when required.
Enforcement: We may suspend accounts, hold funds pending investigation, share information with relevant authorities, and retain data beyond standard retention periods where fraud is suspected or confirmed.
We use aggregated and anonymised data for analytics purposes to understand how the Platform is used and to improve our services. Where individual-level analytics are performed, data is processed on a pseudonymised basis.
Marketing communications are sent on a consent basis only. You may opt out at any time through the unsubscribe mechanism in any marketing message or by contacting us.
We do not sell your personal data for marketing purposes. Your data is never shared with third parties for their own marketing use.
We share data with trusted service partners for payment processing, identity verification, SMS delivery, Marketing Hub operations, and cloud infrastructure hosting.
We disclose data to regulatory bodies and law enforcement agencies as required by applicable law.
We share data with legal advisors and auditors who are bound by professional confidentiality obligations.
In the event of a merger, acquisition, or asset sale, your data may be transferred as part of the business transaction.
We may share your data for other purposes where you have given explicit consent.
We may disclose data to protect the rights, property, or safety of RIF Africa, our users, or the public.
All third-party processors are bound by data processing agreements that comply with applicable data protection laws. Categories of processors include:
You may request a list of our current data processors by contacting [email protected].
Your personal data is primarily stored and processed within Nigeria. Where international data transfers are necessary, we ensure appropriate safeguards are in place, including:
Cookies are small text files placed on your device when you visit our Platform. They help us provide you with a better experience and allow certain features to function properly.
A cookie consent notice is presented on your first visit to the Platform. You may adjust your preferences at any time.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.
Our mobile applications may use analytics tools and device identifiers. You can control these through your device privacy settings.
Users aged 11 and above may access the Platform through Guardian-Managed Accounts. The Adult Guardian is the account holder and is responsible for all account activity and data.
The Platform is not directed at children under 11 years of age, and we do not knowingly collect personal data from children under this age.
If you believe we have inadvertently collected data from a child under 11, please report it immediately at [email protected] and we will take steps to delete the data.
We will respond to all rights requests within 30 days. We may require proof of identity before processing your request.
You have the right to be informed about how your personal data is collected and used, as set out in this Policy.
You may request a copy of the personal data we hold about you by contacting [email protected].
You have the right to request correction of inaccurate or incomplete personal data.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
You have the right to request restriction of processing of your personal data in certain circumstances.
You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right to request human review of any decision made solely by automated means that significantly affects you.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact our Data Protection Officer at [email protected].
You have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been violated.
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity and verification records | 5 years after account closure | Legal obligation |
| Transaction and order records | 5 years after transaction date | Legal obligation |
| Wallet and payment records | 5 years after transaction date | Legal obligation |
| Account information | Duration of account plus 5 years | Legal obligation and legitimate interest |
| Investigation and compliance records | 7 years | Legal obligation |
| Customer support records | 3 years after interaction | Legitimate interest |
| Security and access logs | 1 year | Legitimate interest |
| Marketing preferences | Until withdrawn plus 1 year | Legal compliance |
| Job applicant data | 1 year after recruitment decision | Legitimate interest |
When data is no longer required for the purposes set out in this Policy, we securely delete, anonymise, or destroy it in accordance with our data retention procedures.
No method of transmission over the internet or electronic storage is completely secure. While we implement robust security measures, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and the security of your devices.
We use automated systems for fraud risk scoring, transaction limit determinations, and sanctions screening. These systems may make decisions that affect your ability to use certain features of the Platform.
You have the right to request human review of any automated decision by contacting [email protected].
You are responsible for notifying us of any changes to your personal data to ensure it remains accurate and up to date. You can update your information through your Account settings or by contacting [email protected].
In the event of a data breach that affects your personal data, we will notify you as soon as practicable. Our notification will describe:
Regulatory authorities will be notified within the required timeframes as mandated by applicable law.
Your personal data is treated as confidential. All personnel with access to personal data are bound by confidentiality obligations, whether through employment contracts, non-disclosure agreements, or professional duty.
If you apply for a position with us, your data will be used solely for the purpose of assessing your application. Applicant data is retained for 1 year after the recruitment decision has been made.
You may request deletion of your applicant data at any time by contacting [email protected].
We may update this Privacy Policy at any time. Changes will be communicated through Platform notifications, social media channels, and community groups.
Your Responsibility: You are responsible for reviewing this Policy periodically to stay informed of any changes. Continued use of the Platform after changes are posted constitutes acceptance of the updated Policy.
Last Updated: July 2026 • Effective Date: July 31, 2025 • Operator: RIF Africa (RC 2709434)