This policy explains what personal data BongoPay collects, why we collect it, how we protect it, and the rights you have — with reference to the Personal Data Protection Act, 2022.
BongoPay, operated by Bongofey ("we", "us", "our"), respects your privacy and is committed to protecting personal data. This Policy describes how we collect, use, share and safeguard personal data when you use our platform. It is designed with reference to the Personal Data Protection Act, 2022 of Tanzania and the principles of lawful, fair, and transparent processing.
We process personal data to create and manage accounts; verify identity and business details (KYC); process payments and withdrawals; prevent, detect and investigate fraud and abuse; provide customer support; maintain audit and security logs; comply with legal and regulatory obligations; and improve and secure the Services.
Depending on the activity, we rely on one or more lawful bases: performance of our contract with you; compliance with a legal obligation (including AML/KYC and tax requirements); our legitimate interest in operating a secure payment platform and preventing fraud; and, where required, your consent. You may withdraw consent where processing is based on it, without affecting processing already carried out.
We do not sell personal data. We share it only as needed to operate the Services: with Selcom and payment partners to process and settle transactions; with vetted service providers (such as hosting and email delivery) acting on our instructions; and with regulators, the Bank of Tanzania, the Financial Intelligence Unit, courts, or law-enforcement authorities where required by law or to prevent illegal activity.
We apply organisational and technical safeguards appropriate to the risk, including encryption in transit, hashed passwords, restricted access controls, and audit logging. Verification documents are stored in private storage and reviewed only by authorised staff. No system is perfectly secure, but we work continuously to protect your data and to respond to incidents promptly.
We keep personal data only as long as necessary for the purposes described here and to meet legal, accounting, tax, and regulatory retention requirements. When data is no longer required, we securely delete or anonymise it.
Subject to applicable law, you may request access to the personal data we hold about you, ask us to correct inaccurate data, object to or restrict certain processing, and request deletion where there is no overriding legal or operational reason to retain it. To exercise these rights, contact support@bongopay.net. You also have the right to lodge a complaint with the Personal Data Protection Commission.
We use essential cookies and similar technologies to keep you signed in, secure your session, and understand how the platform is used. You can control cookies through your browser settings; disabling essential cookies may affect how the platform works.
When you collect Customer information through BongoPay checkout, you act as a data controller for that information and must handle it lawfully — collecting only what you need, keeping it secure, and using it only for the payment and any purpose you have properly disclosed to your Customer.
The Services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can remove it.
We may update this Policy as our Services or the law change. Material changes will be posted here with a new date. For any privacy question or request, contact support@bongopay.net or use our contact page.