Bevura Privacy Policy

Last updated: May 21, 2026

01 — Introduction

Yafika Mobile Money Limited is committed to protecting your privacy and confidentiality of your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the Zambian Data Protection Act No. 3 of 2021 and other applicable laws. As data controllers, Yafika Mobile Money Limited collects your personal data for specified, explicit, and legitimate purposes and does not further process it in a manner that is incompatible with those purposes.

By using our services, you consent to the practices provided in this Policy.

02 — Information We Collect

We collect, but are not limited to, the following information:

a) Individual Wallets:

  • Full Names
  • National ID Number (National Registration Card, Passport, or Driver’s License)
  • Phone Number
  • Date of Birth
  • Gender
  • Residential Address (including Province and District)
  • Email Address
  • Live Picture (used for the facial-liveness check during onboarding)
  • Device identifier (used for session management, account-lockout, and trusted-device tracking)

b) Corporate Wallets:

  • Same information as individual wallets, and:
  • Company Registration Details
  • Taxpayer Identification Number
  • Source of Funds
  • Occupation
  • Monthly or Yearly Income

Please note that certain wallet types may require us to use an enhanced due diligence approach, and Yafika Mobile Money Limited may require more details from the customer than those listed above.

03 — How We Collect Data

We collect data through:

  • Direct registration on our mobile app or with an agent.
  • Use of our services.
  • Mobile device permissions (e.g., location, contacts, camera, SMS).

04 — Purpose of Data Collection

We use the information collected to:

  • Open and manage your Bevura wallet.
  • Facilitate mobile money and village banking transactions.
  • Perform KYC (Know Your Customer) and AML (Anti-Money Laundering) checks.
  • Communicate with you.
  • Detect and prevent fraud or unauthorized access.
  • Comply with legal and regulatory obligations.

05 — Data Sharing and Disclosure

We may share your data with:

  • Regulatory bodies such as the Bank of Zambia and Financial Intelligence Centre.
  • Law enforcement agencies when required by court order.

We do not sell your personal information to third parties.

06 — Data Protection Standards and Processes

All Yafika personnel, systems, and resources follow these established standards and procedures to minimize the risk of breaches:

  • Implement and regularly assess safeguards to prevent unauthorized modification or deletion of data.
  • Maintain secure storage for confidential information, enabling user access logging and automated monitoring for potential security threats.
  • Ensure that Bevura customer data is isolated and accessible only to authorized individuals with appropriate permissions.
  • Store all data on encrypted platforms to maintain integrity and confidentiality.
  • Protect encryption keys and the system used to generate them against unauthorized access, limiting availability to privileged employees only.

07 — Data Retention

We keep your personal, transaction, and financial transaction data for at least seven (7) years in line with regulatory requirements.

08 — Your Rights

Under the Zambian Data Protection Act, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate or incomplete data.
  • Object to or restrict processing of your data.
  • Request deletion of your data (subject to legal limits).
  • Lodge a complaint with the Data Protection Commissioner.

To exercise these rights, contact us at info@yafika.net.

09 — Data Security

We implement industry-standard technical and organizational measures to protect your data, including but not limited to:

  • Data encryption.
  • Secure access controls and authentication.
  • Regular system audits and penetration testing.
  • Staff training on data protection best practices.

However, no system is 100% secure, and we cannot guarantee absolute security.

10 — Children’s Privacy

Our services are not intended for children under the age of 16, and Bevura enforces a minimum registration age of 16 years. We do not knowingly collect data from minors without parental or guardian consent.

11 — Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you via the app, website, or SMS.

12 — Contact Us

If you have questions, complaints, or concerns about this policy or our data handling practices, please contact us:

Yafika Mobile Money

Email: info@yafika.net

Phone: +260 77 407 0503 / +260 77 407 0905

Address: Unit 10B, Pangaea Office Park, Arcades Area Off Great East Road, Lusaka, Zambia.