At Cyber 1 Systems Network International Limited (“we,” “our,” or “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with our website and financial services.

Information We Collect

• Identity and KYC Data: Name, email address, phone number, government-issued identification details (where required for compliance), and date of birth.
• Financial & Transaction Data: Bank account details, transaction history, and payment processing tokens.
• Technical Information: IP address, browser type, operating system, device details, and security logs.
• Usage Data: Pages visited, time spent on the website, and navigation patterns.

Legal Basis for Processing Personal Data

We process personal data in accordance with the Nigeria Data Protection Act (NDPA) and international frameworks under the following lawful bases:

• The consent of the data subject.
• The performance of a contract to which the data subject is a party.
• Compliance with legal and regulatory obligations (e.g., CBN, EFCC, and FIU requirements).
• Legitimate business interests, provided they do not override your fundamental rights.

How We Protect Your Information (ISO 27001 Compliance)

We implement technical and organizational security controls mapped to the ISO/IEC 27001:2022 standard to protect your data, including:

• Transport Layer Security (TLS) encryption for data in transit and AES-256 encryption for data at rest.
• Strict Multi-Factor Authentication (MFA) and Access Control Management (Principle of Least Privilege) for internal infrastructure.
• Continuous vulnerability scanning, penetration testing, and 24/7 security monitoring.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, resolve disputes, or comply with statutory financial records retention laws in Nigeria.

Unless a longer retention period is mandated by law, website interaction data shall be retained for a period of five (5) years. Upon expiration, data is securely destroyed, sanitized, or anonymized using secure erasure methods.

Data Breach Notification

In the event of a physical or technical incident resulting in a personal data breach, Cyber 1 Systems will activate its Incident Response Plan. If the breach poses a high risk to your rights and freedoms, we will:

• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach.
• Notify affected individuals without undue delay, providing mitigation steps and point-of-contact details..

International Data Transfers

Your data may be processed or stored via secured cloud service providers located outside Nigeria. We ensure that these transfers comply with the cross-border transfer requirements of the NDPA by utilizing service providers with certified frameworks (such as ISO 27001 and SOC 2) and executing Standard Contractual Clauses (SCCs).

Your Rights

You possess the right to access, rectify, restrict processing, object to processing, or request the deletion of your data. To exercise these rights, or to contact our Data Protection Officer (DPO), please email: hello@cyber1systemsnetwork.com.

To request deletion of your personal data, please send an email to: hello@cyber1systemsnetwork.com

Cookies and Tracking

Our use of cookies and similar technologies is outlined in our Cookie Policy.

Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices. Please review their privacy policies.

Misuse of Personal Information and Privacy Violations

Cyber 1 Systems Network International Limited takes the protection of personal information seriously. Employees, contractors, consultants, vendors, and third parties who are granted access to personal information are required to comply with applicable privacy, confidentiality, and information security requirements. Any unauthorized access, disclosure, alteration, misuse, destruction, or handling of personal information may result in one or more of the following actions:

• Suspension or revocation of access privileges.
• Disciplinary action, including termination of employment or contract.
• Financial liability for damages where permitted by law.
• Civil or criminal proceedings where applicable.
• Reporting to relevant regulatory or law enforcement authorities.

The organization reserves the right to pursue appropriate legal remedies in response to privacy violations.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: hello@cyber1systemsnetwork.com
• Phone: +234-8064559460
• Address: 1, Ifeanyi Ugwuanyi Crescent, Wuye, Abuja