Nigeria KYC Policy

What we collect

For sellers and event organizers receiving payouts in Nigeria, eventtally verifies the identity of the legal owner of the account. We collect:

• Legal first and last name, middle name (optional)
• Date of birth
• Residential address
• Phone number in E.164 format
• Both BVN and NIN at the Basic tier (used for name-match verification against the Nigerian identity registry)
• Verified tier: government-issued photo ID (NIN slip, driver's licence, passport, or voter's card) front and back, a selfie holding the ID, and proof of address (utility bill less than 3 months old)
• Business tier (registered businesses): both CAC registration number and TIN, plus their certificates

How we use it

KYC data is used strictly to (1) verify the legal owner of the account, (2) satisfy our obligations under the Nigerian Money Laundering (Prevention and Prohibition) Act, and (3) permit you to receive payouts at the limits associated with your verification tier. KYC data is never used for marketing.

Encryption and retention

BVN, NIN, government ID numbers, CAC numbers and TINs are encrypted at rest using AES-256-GCM with a key managed outside the database. Document images are stored in a private, access-controlled bucket; only KYC reviewers can mint short-lived signed links to view them, and every view is recorded in an audit log.

We retain KYC data for 5 years after the relationship ends, in line with Nigerian AML record-keeping practice. After that period, encrypted PII and document storage are deleted.

Your rights

Under the Nigerian Data Protection Act 2023 you may request access to, correction of, or deletion of your KYC data. Some deletion requests cannot be honoured during the AML record-keeping window. Email support@eventtally.com.