Effective Date: October 2, 2025 | Last Updated: July 21, 2026
What changed: This policy has been updated to reflect the NIMC Act 2026
(signed into law June 26, 2026, repealing the NIMC Act 2007) and the
Nigeria Data Protection Act (NDPA) 2023. Key additions include clearer consent
requirements before any NIN/BVN verification, an explicit list of the data processors we use,
data retention limits, and how to exercise your rights under the NDPA.
Introduction
At CheckMyNINBVN.com.ng, your privacy is important to us. This Privacy Policy explains how we collect,
use, and protect your personal information when you use our platform to perform NIN, BVN, and identity
verification services, and how we comply with the NIMC Act 2026 and the
Nigeria Data Protection Act (NDPA) 2023
Updated for NIMC Act 2026
Our Legal Basis & Your Consent
Under the NIMC Act 2026 and the NDPA, no one — including us — may access, verify, or process another
person's NIN or BVN information without that person's explicit, informed consent. This means:
By submitting a NIN or BVN for verification on this platform, you confirm the number
belongs to you, or that you have obtained the explicit consent of the person it belongs to.
We do not verify or process a NIN/BVN on your behalf without this confirmation being captured
at the point of submission.
You may be asked to re-confirm this consent periodically, or when our Terms and this Policy are
updated, before you can continue using the service.
We keep a record of the consent confirmation (timestamp and the version of the policy you
agreed to) as evidence of lawful processing, in line with our obligations to NIMC and the Nigeria
Data Protection Commission (NDPC).
If you are verifying on behalf of an organisation (e.g. for KYC or onboarding), your organisation
remains responsible for obtaining and retaining the underlying consent of the data subject.
Data We Collect
We may collect the following types of information:
Personal details such as full name, phone number, and email.
NIN or BVN numbers you submit for verification.
Payment-related details like transaction reference (handled securely by Paystack and, where
applicable, our other licensed payment service partners).
Consent confirmation records (timestamp, IP address, and policy version accepted).
Device and browser information for security and analytics.
How We Use Your Data
Your data is used strictly for service-related purposes, including:
Processing your NIN or BVN verification requests.
Providing updates on verification status.
Ensuring secure and successful payment processing.
Detecting and preventing fraud, and meeting our reporting obligations to NIMC, the NDPC, and
law enforcement where required by law.
Improving user experience and platform performance.
We do not use your NIN/BVN data for marketing, profiling, or any purpose beyond the specific
verification you requested.
New
Data Retention
We retain verification request data and consent records only for as long as necessary to:
Provide the service you requested;
Meet our legal, audit, and record-keeping obligations under the NIMC Act 2026 and the NDPA
(including responding to lawful requests from NIMC or the NDPC); and
Resolve disputes or investigate suspected fraud.
Once these purposes no longer apply, data is deleted or anonymised in line with our internal
retention schedule. You may request earlier deletion under "Your Rights" below, subject to any
overriding legal retention requirement.
How We Protect Your Data
We implement multiple security measures including:
SSL/TLS encryption for all data transmitted on our platform.
Secure, token-based integration with our payment and verification partners.
Restricted, role-based access to personal data within our system.
Regular security audits and updates.
Cookies & Tracking Technologies
We use cookies to:
Improve website performance.
Remember user preferences.
Analyze traffic for better service delivery.
You may disable cookies in your browser settings if you prefer.
Updated
Third-Party Services & Sub-Processors
We work with the following trusted third parties to deliver our services. Each is bound by its own
privacy and security obligations:
Paystack: Handles secure payment processing.
Licensed Payment & Virtual Account Partners: Facilitate virtual account
creation and KYC-linked payment services under their own regulatory licenses. We do not name these
partners individually here as they may change from time to time; each is contractually bound to
protect your data to the same standard described in this Policy.
NIMC / Partner Banks: Source of record for NIN/BVN verification data.
Analytics tools for performance monitoring.
We only share the minimum data necessary for these providers to perform their function, and we do
not sell or rent your personal data to anyone. These services have their own privacy policies which you
may review on their respective platforms.
New
Our Role: Verification Intermediary, Not NIMC
CheckMyNINBVN is an independent platform and is not NIMC and not an agency of the
Federal Government of Nigeria. We act solely as a verification intermediary, providing a secure channel
to confirm the validity of NIN/BVN data already held by NIMC and partner banks. We do not create, own,
or alter official identity records.
Updated
Your Rights Under the NDPA
Under the Nigeria Data Protection Act, you have the right to:
Request a copy of the personal data we hold about you.
Request correction of inaccurate information.
Request deletion of your data where applicable and not subject to a legal retention
requirement.
Withdraw consent for non-essential data usage at any time.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data
has been mishandled.
To exercise any of these rights, contact us using the details below.
New
Data Breach Notification
In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected
users and the Nigeria Data Protection Commission (NDPC) in line with the timelines and procedures
required under the NDPA.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law (including future
NIMC or NDPC regulations) or our services. Material changes will be highlighted on this page, and where
required, we will ask you to re-confirm your consent before continuing to use the platform.
Contact Information
If you have any questions regarding this Privacy Policy, or wish to exercise your data protection
rights, please reach out: