Bevura Privacy Policy
Last updated: May 21, 2026
01 — Introduction
Yafika Mobile Money Limited is committed to protecting your privacy and confidentiality of your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the Zambian Data Protection Act No. 3 of 2021 and other applicable laws. As data controllers, Yafika Mobile Money Limited collects your personal data for specified, explicit, and legitimate purposes and does not further process it in a manner that is incompatible with those purposes.
By using our services, you consent to the practices provided in this Policy.
02 — Information We Collect
We collect, but are not limited to, the following information:
a) Individual Wallets:
- Full Names
- National ID Number (National Registration Card, Passport, or Driver’s License)
- Phone Number
- Date of Birth
- Gender
- Residential Address (including Province and District)
- Email Address
- Live Picture (used for the facial-liveness check during onboarding)
- Device identifier (used for session management, account-lockout, and trusted-device tracking)
b) Corporate Wallets:
- Same information as individual wallets, and:
- Company Registration Details
- Taxpayer Identification Number
- Source of Funds
- Occupation
- Monthly or Yearly Income
Please note that certain wallet types may require us to use an enhanced due diligence approach, and Yafika Mobile Money Limited may require more details from the customer than those listed above.
03 — How We Collect Data
We collect data through:
- Direct registration on our mobile app or with an agent.
- Use of our services.
- Mobile device permissions (e.g., location, contacts, camera, SMS).
04 — Purpose of Data Collection
We use the information collected to:
- Open and manage your Bevura wallet.
- Facilitate mobile money and village banking transactions.
- Perform KYC (Know Your Customer) and AML (Anti-Money Laundering) checks.
- Communicate with you.
- Detect and prevent fraud or unauthorized access.
- Comply with legal and regulatory obligations.
05 — Data Sharing and Disclosure
We may share your data with:
- Regulatory bodies such as the Bank of Zambia and Financial Intelligence Centre.
- Law enforcement agencies when required by court order.
We do not sell your personal information to third parties.
06 — Data Protection Standards and Processes
All Yafika personnel, systems, and resources follow these established standards and procedures to minimize the risk of breaches:
- Implement and regularly assess safeguards to prevent unauthorized modification or deletion of data.
- Maintain secure storage for confidential information, enabling user access logging and automated monitoring for potential security threats.
- Ensure that Bevura customer data is isolated and accessible only to authorized individuals with appropriate permissions.
- Store all data on encrypted platforms to maintain integrity and confidentiality.
- Protect encryption keys and the system used to generate them against unauthorized access, limiting availability to privileged employees only.
07 — Data Retention
We keep your personal, transaction, and financial transaction data for at least seven (7) years in line with regulatory requirements.
08 — Your Rights
Under the Zambian Data Protection Act, you have the right to:
- Access your personal data.
- Request correction of inaccurate or incomplete data.
- Object to or restrict processing of your data.
- Request deletion of your data (subject to legal limits).
- Lodge a complaint with the Data Protection Commissioner.
To exercise these rights, contact us at info@yafika.net.
09 — Data Security
We implement industry-standard technical and organizational measures to protect your data, including but not limited to:
- Data encryption.
- Secure access controls and authentication.
- Regular system audits and penetration testing.
- Staff training on data protection best practices.
However, no system is 100% secure, and we cannot guarantee absolute security.
10 — Children’s Privacy
Our services are not intended for children under the age of 16, and Bevura enforces a minimum registration age of 16 years. We do not knowingly collect data from minors without parental or guardian consent.
11 — Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will notify you via the app, website, or SMS.
12 — Contact Us
If you have questions, complaints, or concerns about this policy or our data handling practices, please contact us:
Yafika Mobile Money
Email: info@yafika.net
Phone: +260 77 407 0503 / +260 77 407 0905
Address: Unit 10B, Pangaea Office Park, Arcades Area Off Great East Road, Lusaka, Zambia.