Privacy Policy

Effective Date: 08 October 2026

1. Developer / Company Information

2. Scope of This Privacy Policy

This Privacy Policy applies to the Touch&Pay mobile application and describes the manner in which NGMB handles information collected through the application and related services.

By accessing or using Touch&Pay, you acknowledge that you have read and understood this Privacy Policy.

3. Information We May Collect

Depending on the services and features used by the user, Touch&Pay may collect information necessary to create and maintain an account, authenticate users, provide payment-related services, process transactions, provide customer support, prevent fraud, maintain security, and comply with applicable legal and regulatory requirements.

3.1 Account and Contact Information

Where required for account creation or service delivery, we may collect information such as:

• Name
• Mobile number
• Email address, where applicable
• User/account identifier
• Authentication and account credentials

3.2 Transaction and Payment Information

When you use payment or financial features of Touch&Pay, information necessary to process and record the transaction may be collected or processed.

This may include, where applicable:

• Transaction reference numbers
• Transaction identifiers
• Payment status
• Amount and transaction details
• Bank or payment service information required for the transaction

3.3 Identity / KYC Information

Where a Touch&Pay feature requires identity verification or KYC/AML compliance, we may process identity information required for that specific service and applicable legal or regulatory requirements.

Only include specific identity documents or biometric information in your Google Play Data Safety declaration and this section if your current version of the application actually accesses or processes that information.

3.4 Device and Technical Information

We may process technical information necessary to operate, secure, troubleshoot, and improve the application.

Depending on the application's implementation, this may include:

• Device model and operating system information
• Application version
• Network and connectivity information
• IP address
• Application logs and diagnostic information
• Security and fraud-prevention information

3.5 Information You Provide

We may process information that you voluntarily provide when contacting customer support, submitting requests, reporting problems, or using particular features of the application.

4. How We Use Information

Information collected through Touch&Pay may be used for the following purposes, where applicable:

• Creating and managing user accounts.
• Authenticating users and securing accounts.
• Providing Touch&Pay services and features.
• Processing and recording payment or financial transactions.
• Providing customer support.
• Detecting, preventing, and investigating fraud and abuse.
• Maintaining application and infrastructure security.
• Troubleshooting technical problems and improving service reliability.
• Meeting applicable legal, regulatory, accounting, financial, KYC, AML, and security obligations.
• Responding to lawful requests from government, regulatory, law-enforcement, or judicial authorities where required.

5. Information Sharing

NGMB does not sell personal or sensitive user data.

Information may be shared or transferred only where reasonably necessary to provide the requested service, process a transaction, maintain security, comply with law, or operate supporting infrastructure.

Depending on the service used, recipients may include:

• Payment processors, banks, payment service providers, or transaction partners required to process a transaction.
• Technology and infrastructure service providers acting on our behalf.
• Security, fraud-prevention, KYC, AML, or compliance service providers where required for the relevant service.
• Government, regulatory, law-enforcement, or judicial authorities where legally required.

Third-party service providers are expected to handle information in accordance with applicable contractual, security, privacy, and legal requirements.

6. Third-Party Services and SDKs

Touch&Pay may use third-party libraries, SDKs, APIs, payment services, security services, analytics services, or infrastructure providers to support application functionality.

The use of any third-party service must be limited to purposes reasonably necessary for the application's functionality, security, transaction processing, analytics, or other disclosed purposes.

The data practices of third-party providers may be governed by their own privacy policies and terms. NGMB remains responsible for ensuring that third-party integrations used in the application are reviewed for applicable privacy and security requirements.

7. Data Security

Appropriate security controls may include access controls, authentication, encryption, secure application development, monitoring, logging, infrastructure security, and secure transmission mechanisms.

Information transmitted between the application and our servers should be protected using modern secure communication protocols, such as HTTPS/TLS, where applicable.

No method of transmission or storage can be guaranteed to be completely secure. Users should also protect their credentials and immediately report suspected unauthorized access.

8. Permissions and User Consent

Touch&Pay requests access to device permissions only when required for a particular feature or service.

Where Android runtime permissions are required, the application requests the applicable permission through the operating system's permission mechanism.

Where collection or use of personal or sensitive information requires user consent, the application will provide appropriate disclosure and obtain consent as required by applicable law and Google Play requirements.

9. Data Retention

NGMB retains information only for as long as reasonably necessary to provide the relevant services and fulfill legitimate business, security, contractual, legal, financial, accounting, regulatory, fraud-prevention, dispute-resolution, and compliance requirements.

The applicable retention period may vary depending on the type of information and the reason it is retained.

Where information is no longer required and there is no legal or legitimate reason to retain it, NGMB will take reasonable steps to delete or anonymize the information.

10. Account Deletion

After receiving an account deletion request, NGMB may verify the user's identity to prevent unauthorized deletion requests.

Once the request is verified and approved, personal information associated with the account will be deleted or anonymized, subject to information that NGMB is legally or legitimately required to retain.

Where information must be retained for legal, regulatory, financial, fraud-prevention, security, dispute-resolution, or other legitimate purposes, the relevant information may be retained for the required period and securely deleted or anonymized thereafter.

11. Data Deletion and Retention Exceptions

Account deletion does not necessarily require immediate deletion of information that NGMB is legally required or legitimately permitted to retain.

Examples may include information required for:

• Legal or regulatory compliance
• Financial and accounting records
• Fraud prevention and investigation
• Security and abuse prevention
• Dispute resolution
• Compliance with lawful government requests

Such retained information will not be used for unrelated purposes and will be securely deleted or anonymized when the applicable retention requirement expires.

12. Children's Privacy

Touch&Pay is not intended to be used by children under 18 years of age for entering into financial or legally binding transactions.

We do not knowingly provide financial transaction services to children in violation of applicable law.

13. User Responsibilities

Users are responsible for keeping their account credentials, authentication information, and supported devices secure.

Users should not share passwords, PINs, OTPs, authentication credentials, or other security information with unauthorized persons.

Users should notify NGMB promptly if they suspect unauthorized access to their account.

14. Legal and Regulatory Compliance

NGMB may process and retain information where necessary to comply with applicable laws, regulations, regulatory directions, court orders, lawful governmental requests, financial and payment-system requirements, KYC/AML obligations, fraud prevention requirements, and other applicable compliance obligations.

15. Changes to This Privacy Policy

NGMB may update this Privacy Policy from time to time to reflect changes in the Touch&Pay application, services, technology, legal requirements, regulatory requirements, or data practices.

When material changes are made, the updated policy will be published on this webpage with an updated effective date.

Users are encouraged to periodically review this Privacy Policy.

16. Contact Us