Privacy & Data Protection

1. Zambia Data Protection Act compliance

Zanga is fully committed to the Zambia Data Protection Act. We process personal data only for specific, legitimate purposes related to providing financial technology services and maintaining the security of our ledger.

2. Data collection and KYC

To comply with Financial Intelligence Centre (FIC) requirements, we collect essential Know Your Customer (KYC) information, including:

• National Registration Card (NRC) details
• Proof of residence
• Mobile wallet verification data (Airtel/MTN)
• Business registration documents for institutional partners

3. How we use data

Personal data is used to:

• Verify identity and prevent fraud.
• Monitor and flag suspicious activity (Large unusual withdrawals, rapid refund cycles).
• Maintain audit trails as required by the Bank of Zambia (BoZ).

4. Security and encryption

Your data is encrypted at rest and in transit using military-grade AES-256 and TLS 1.3 standards. We maintain strict isolation between sandbox and live data environments.

5. Data storage

Personal data is stored securely and is only accessible to authorized personnel who require it for compliance and security monitoring.