1. Information We Collect
When you register or use TigerSub services, we collect necessary personal and transaction details to provide secure VTU and financial services:
- Personal Identification: Full Name, Email Address, Mobile Phone Number, Profile Photo.
- Financial and KYC Verification: Virtual Dedicated Account NUBAN, BVN/NIN hash (for CBN Tier 1/2 compliance), transaction references.
- Technical and Log Data: IP address, device model, browser fingerprint, session logs, and location metrics.
2. How We Use Your Information
Your data is used strictly for legitimate financial service operations, including:
- Processing instant airtime, data, electricity bill payments, and cable TV subscriptions.
- Generating automated dedicated bank accounts (Wema, Moniepoint, Sterling) for wallet funding.
- Detecting and preventing financial fraud, account takeovers, and unauthorized access attempts.
- Sending transaction receipts, SMS OTP codes, and critical security notifications.
3. End-to-End Security and AES-256 Encryption
TigerSub employs bank-grade security protocols to protect your personal and financial data:
- AES-256-GCM Encryption: Sensitive customer data and AI agent chat sessions are encrypted end-to-end.
- TLS 1.3 Transmission: All data transmitted between your browser and our servers is encrypted using Secure Sockets Layer (SSL/TLS).
- Hashed Passwords and PINs: Transaction PINs and account passwords are stored using one-way bcrypt/argon2 hashing algorithms.
4. Data Sharing and Third-Party Integrations
We only share data with trusted licensed service providers necessary to fulfill your transactions:
- Licensed payment gateways (Flutterwave, Monnify, Paystack) for card and bank processing.
- Licensed telecom API gateways (VTpass, Termii, Pairgate) for airtime/data delivery.
- Law enforcement agencies upon receipt of valid court orders or CBN directives.
5. Data Retention Policy
We retain transaction records and user log history for a minimum period of 5 years as required under the Money Laundering (Prevention and Prohibition) Act of Nigeria.
6. Cookies and Local Session Storage
We use session cookies and local storage tokens strictly for authenticating active logins, securing CSRF tokens, and saving your user dashboard preferences.
7. Your NDPR Data Protection Rights
Under the NDPR, you have the right to request access to your personal data, request correction of inaccurate records, or request account closure subject to financial statutory retention requirements.
8. Contact Our Data Protection Officer
If you have any questions regarding this Privacy Policy or wishes to exercise your data rights, please contact our Data Protection Officer at:
Email: privacy@tigersub.com
Support Line: +234 809 988 7766