Privacy Policy

1. About This Policy

This Privacy Policy explains how Rudra Nigerian Services Ltd ("we", "us", "our") collects, uses, stores, and protects personal information when you use the Rudra FX Pool platform. This policy is designed to comply with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act 2023.

By creating an account or using the Platform, you consent to the collection and use of your data as described in this Policy. If you do not agree, please do not use the Platform.

2. What Data We Collect

2.1 Registration Data

• Full legal name
• Email address
• Phone number
• Date of birth
• State of residence
• Referral code (if applicable)

2.2 KYC (Identity Verification) Data

• Government-issued ID document (scan/photo)
• ID type (NIN, Driver's Licence, Passport, Voter's Card)
• ID number
• Selfie photograph
• Date and result of verification

2.3 Financial Data

• Bank account name, number, and bank name (for withdrawals)
• Deposit amounts and proof of payment
• Investment amounts, plans, and dates
• Profit payout history
• Withdrawal history
• Wallet balance

2.4 Technical Data

• IP address and device type
• Browser type and version
• Login timestamps and session data
• Pages visited and actions taken on Platform

3. How We Use Your Data

Purpose	Data Used
Account creation and management	Registration data, email, phone
Identity verification (KYC)	KYC documents, selfie, ID number
Processing deposits and investments	Financial data, bank details
Calculating and paying monthly profits	Investment amounts, plan data
Processing withdrawal requests	Bank details, wallet balance
Fraud prevention and security	All data types, IP, device data
Customer support	Account data, transaction history
Regulatory compliance	KYC data, transaction records
Platform improvement	Technical data (anonymised)
Communications (important updates, account alerts)	Email, phone number

We do not use your data for unsolicited marketing without your explicit opt-in consent. We do not sell your personal data to any third party.

4. Legal Basis for Processing

We process your personal data on the following legal bases as defined under the NDPR:

• Contract performance — processing necessary to fulfil our investment platform services to you.
• Legal obligation — KYC and AML compliance required under Nigerian financial regulations.
• Legitimate interests — fraud prevention, platform security, and service improvement.
• Consent — for optional communications such as newsletters or marketing messages.

5. Data Sharing & Third Parties

We may share your data with the following categories of third parties where strictly necessary:

• Cloud infrastructure providers — for secure data storage (e.g., database and server hosting). These providers are contractually bound to protect your data.
• Email and communication services — for sending account notifications and support responses.
• KYC verification tools — to assist with identity document verification.
• Law enforcement / regulatory authorities — where required by Nigerian law, court order, or to prevent fraud and financial crime.

We do not share your data with advertisers, data brokers, or any party for commercial marketing purposes.

6. Data Retention

We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by Nigerian financial and anti-money laundering regulations. KYC documents are retained for at least 5 years post-closure. Technical and log data is retained for 12 months. You may request deletion of non-mandatory data by contacting us, subject to our legal retention obligations.

7. Data Security

We implement the following security measures to protect your data:

• Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Encryption at rest — sensitive data including KYC documents and bank details are encrypted in storage.
• Access controls — only authorised staff members have access to personal data, on a need-to-know basis.
• 2FA support — two-factor authentication is available for your account and mandatory for administrative access.
• Security monitoring — platform access and unusual account activity is monitored continuously.

No security system is completely infallible. In the event of a data breach that affects your rights, we will notify you and relevant authorities within the timeframes required by the NDPR.

8. Your Rights

Under the NDPR and Nigeria Data Protection Act, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of data we are not legally required to retain.
• Right to restrict processing — request we limit how we use your data in certain circumstances.
• Right to data portability — receive your data in a machine-readable format where applicable.
• Right to withdraw consent — withdraw any previously given consent for optional data processing.

To exercise any of these rights, email us at privacy@rudrafxpool.com. We will respond within 30 days. Note that exercising some rights (such as erasure) may affect your ability to use the Platform.

9. Cookies & Tracking

The Platform uses cookies and similar technologies for the following purposes:

• Essential cookies — required for the Platform to function (login sessions, security tokens). Cannot be disabled.
• Preference cookies — remember your theme preference (light/dark mode). You may clear these via your browser settings.
• Analytics — anonymised usage data to help us improve the Platform. No personally identifiable information is included.

We do not use advertising or cross-site tracking cookies. You can control non-essential cookies through your browser settings.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will close their account and delete associated data. If you believe a minor has created an account, contact us at support@rudrafxpool.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and a Platform notification at least 7 days before taking effect. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

12. Contact

For privacy-related enquiries or to exercise your data rights:

• Email: privacy@rudrafxpool.com
• General support: support@rudrafxpool.com
• Address: Rudra Nigerian Services Ltd, Lagos, Nigeria