Privacy Policy

Bilscore ("we", "our", "us") operates the Bilscore platform, which allows users to buy airtime, mobile data, pay electricity bills, subscribe to cable TV, purchase educational pins, and manage scheduled payments through our web application, mobile app, USSD codes, and WhatsApp bot.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services. It is designed to comply with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable Nigerian laws.

By using Bilscore, you consent to the practices described in this policy. If you do not agree, please do not use our services.

We collect the following categories of information:

We do not collect your debit card numbers, banking passwords, or PINs. All wallet funding happens via your dedicated virtual account issued by our banking partner.

We use your information to:

• Provide our services — process transactions, maintain your wallet, and route payments to vendors
• Verify your identity — comply with KYC and Anti-Money Laundering (AML) requirements
• Communicate with you — send transaction confirmations, receipts, security alerts, and support responses via WhatsApp, email, SMS, or push notifications
• Prevent fraud — detect and block suspicious activity, unauthorized access, and abuse
• Improve our platform — analyze usage patterns to fix bugs, add features, and enhance user experience
• Comply with legal obligations — respond to lawful requests from regulators, courts, and law enforcement
• Process referrals — track and credit referral bonuses to referrers and referees
• Send marketing — with your consent, promote new features, offers, and updates (you can opt out anytime)

Under the NDPR, we process your personal data on the following legal bases:

• Contract performance — to deliver the services you signed up for
• Legal obligation — to comply with KYC, AML, tax, and other Nigerian laws
• Legitimate interest — for fraud prevention, security, service improvement, and enforcement of our Terms
• Consent — for marketing communications and optional features; you can withdraw consent anytime

We do not sell your personal information. We may share it with:

We may also share anonymized or aggregated data (which cannot be used to identify you) for analytics, marketing, or business purposes.

We protect your information using industry-standard security measures:

• Encryption in transit — TLS/HTTPS for all communications
• Encryption at rest — sensitive fields like PINs and passwords are hashed with bcrypt
• Access controls — strict role-based access to production systems
• Two-layer wallet access — PIN and session verification for all transactions
• Continuous monitoring — logs, alerts, and anomaly detection for suspicious activity
• Secure development — regular security reviews and dependency updates

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you suspect unauthorized access, contact us immediately at support@bilscore.com.

We keep your personal information for as long as your account is active and for a period after closure as required by Nigerian law:

• Account & transaction data: 7 years after account closure (CBN AML requirement)
• KYC records: 7 years after account closure
• Logs & technical data: up to 12 months
• Marketing preferences: until you withdraw consent

After the retention period, we securely delete or anonymize your data.

Under the NDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete information
• Erasure — request deletion of your data (subject to legal retention requirements)
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — for marketing and optional processing
• Lodge a complaint — with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, email us at privacy@bilscore.com. We'll respond within 30 days.

We use the following types of cookies:

• Essential cookies — required for login, security, and session management. Cannot be disabled.
• Preference cookies — remember your settings (language, theme, saved identifiers)
• Analytics cookies — help us understand how users interact with the platform
• Marketing cookies — used to show relevant ads (only with your consent)

You can control cookies through your browser settings. Disabling essential cookies may break parts of the platform.

Our platform integrates with third-party services that have their own privacy policies. We encourage you to review them:

• PalmPay — banking, wallet, and KYC services
• VTpass — airtime, data, and bill payments
• BilalSada — VTU service provider
• Twilio — WhatsApp Business API
• Google Analytics — usage analytics (if enabled)

We are not responsible for the privacy practices of these third parties.

Bilscore is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, contact us at support@bilscore.com and we'll delete it promptly.

Some of our service providers (cloud hosting, analytics) may store data outside Nigeria. When we transfer data internationally, we ensure appropriate safeguards are in place as required by the NDPR.

We may update this Privacy Policy from time to time. When we do, we'll:

• Update the "Last updated" date at the top
• Notify you via WhatsApp, email, or in-app notification for material changes
• Give you reasonable notice before changes take effect

Continued use of Bilscore after changes means you accept the updated policy.

For questions, requests, or complaints about this Privacy Policy, contact us: