Privacy Policy

1 Who We Are

TrustMoni ("we", "us", "our") is a cryptocurrency exchange platform operated by Trustmoni.com Limited, a company registered in Nigeria. We are the data controller responsible for your personal information collected through our mobile application and website at trustmoni.com.

Contact: info@trustmoni.com

2 Information We Collect

2.1 Camera Access

TrustMoni requests access to your device's front camera only during KYC verification to capture a live selfie. We do not access your camera at any other time, and photos are never saved to your device gallery.

2.2 Information We Do NOT Collect

• We do not collect your private cryptocurrency keys or seed phrases
• We do not access your contacts, microphone, or location
• We do not collect information from children under 18

3 How We Use Your Information

We use your information to:

• Create and manage your TrustMoni account
• Verify your identity as required by Nigerian AML/KYC regulations
• Process cryptocurrency deposits and NGN withdrawals
• Send transaction confirmations and account notifications via email
• Detect, prevent, and investigate fraud and security incidents
• Screen blockchain transactions for suspicious activity in compliance with AML obligations
• Comply with legal obligations under Nigerian law (NDPR, CBN, EFCC, NFIU, SCUML)
• Improve our services through anonymized analytics
• Respond to your customer support inquiries

4 How We Share Your Information

We never sell your personal information. We may share your data only in these limited circumstances:

• Identity Verification: We share your NIN with Prembly (IdentityPass) solely to verify your identity. They are bound by strict data protection obligations.
• Blockchain Analytics: We use AMLBot (amlbot.com) to screen cryptocurrency transactions for suspicious activity as required by our AML/CFT obligations under SCUML regulations. Transaction hashes and wallet addresses may be shared with AMLBot for this purpose.
• Withdrawal Processing: Your bank account details and withdrawal amounts are used solely for the purpose of processing your NGN withdrawal to your registered Nigerian bank account. This information is handled securely by authorised TrustMoni staff only and is never shared with unauthorized third parties.
• Legal Authorities: We may disclose information to EFCC, NFIU, CBN, SCUML, Nigerian Police, or other authorities when required by law or court order.
• Email Service: We use Hostinger Mail for transactional email delivery. They access only the minimum data necessary to deliver your emails.
• Business Transfer: In the event of a merger or acquisition, your data may be transferred with prior notice to you.

5 Data Retention

We retain your personal data as follows:

• Account data: For the duration of your account, plus 5 years after closure (required by Nigerian financial regulations)
• KYC documents: Minimum 5 years as required by the CBN AML/CFT framework
• Transaction records: Minimum 5 years
• AML screening records: Minimum 5 years as required by SCUML
• Login/security logs: 12 months

After retention periods expire, data is securely deleted or anonymized.

6 Data Security

We protect your information using industry-standard security measures:

• All data transmitted using 256-bit SSL/TLS encryption
• Passwords stored using bcrypt hashing — never in plain text
• Transaction PINs stored using bcrypt hashing
• Access to your data restricted to authorised TrustMoni staff only
• KYC selfies stored in secure, non-publicly-accessible server directories

In the event of a data breach, we will notify affected users within 72 hours as required by the NDPR.

7 Your Privacy Rights

Under the Nigeria Data Protection Regulation (NDPR) 2019, you have the following rights:

To exercise any of these rights, contact us at info@trustmoni.com. We will respond within 30 days. Note that some rights are limited by our legal obligations under Nigerian financial law.

8 Cookies & Tracking

Our website uses essential session cookies necessary for authentication and security. We do not use advertising cookies or third-party tracking pixels. Our mobile app does not use cookies.

• Session cookies: Required for login and security — cannot be disabled
• CSRF tokens: Required to protect against cross-site request forgery

9 Children's Privacy

TrustMoni does not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected data from a child under 18, we will delete it immediately. Contact us at info@trustmoni.com if you believe we have inadvertently collected such data.

10 Third-Party Links

TrustMoni may contain links to third-party websites (e.g. blockchain explorers). We are not responsible for the privacy practices of those sites.

11 International Data Transfers

Your data is primarily stored and processed in Nigeria. Where data is processed outside Nigeria (e.g. by Prembly for identity verification or AMLBot for blockchain screening), we ensure appropriate safeguards are in place and that such transfers comply with the NDPR.

12 Regulatory Compliance

TrustMoni operates in compliance with:

• Nigeria Data Protection Regulation (NDPR) 2019
• Central Bank of Nigeria (CBN) AML/CFT Regulations
• Money Laundering (Prevention and Prohibition) Act 2022
• Nigerian Financial Intelligence Unit (NFIU) guidelines
• Special Control Unit Against Money Laundering (SCUML) requirements

13 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 7 days before they take effect.

14 Contact & Complaints

For privacy concerns, data requests, or complaints:

15 Account & Data Deletion

You have the right to request deletion of your TrustMoni account and associated personal data at any time. Use the form below to submit your request — you do not need to be logged in.