Transparency & Trust

Privacy Policy

Your privacy is at the core of our financial platform. We explain clearly how your data is collected, protected, and handled when you use MoniCard.

Last Updated: September 2026

Version 2.4 Active

PCI-DSS & CEMAC Aligned

Data Protection Office

Questions regarding our handling of your data? Reach our Data Protection Officer directly at privacy@monicard.com.

1. Information We Collect

The categories of personal, financial, and technical data we collect when you use MoniCard.

When you open an account, issue a virtual card, or execute financial transactions with MoniCard, we collect several types of information in accordance with applicable data protection laws and financial regulatory mandates.

Personal Identification Information

KYC Compliance

Full legal name, date of birth, nationality, national identity card number (CNI), passport details, residential address, selfie/photo verification, and tax identification number where legally required.

Contact & Authentication Credentials

Account Security

Email address, verified mobile phone number (including MTN MoMo and Orange Money linked numbers), encrypted passwords, transaction PINs, and biometric authentication tokens stored locally on your device.

Financial & Transaction Telemetry

Processing

Transaction amounts, timestamps, currencies (XAF, USD, EUR, GBP), sender and recipient metadata, virtual card load histories, top-up channels, merchant categories, and exchange rates applied.

Technical & Device Telemetry

Fraud Prevention

Internet Protocol (IP) address, operating system, browser type, unique mobile device identifier (UUID/IMEI), device fingerprint, login timestamps, and geolocation data during sensitive payment authorization.

2. How We Use Your Data

Our lawful bases and operational purposes for processing your information.

MoniCard adheres strictly to the principle of data minimization. We only process information when we have a clear legal ground under applicable regulations.

Processing Purpose	Legal Ground	Data Involved
Account Provision & Card Issuance	Contract Performance	Identity info, phone number, email
Payment Execution & MoMo Top-ups	Contract Performance	Wallet balances, linked MoMo/Orange accounts
Identity Verification & KYC Screening	Legal & Regulatory Obligation	Government ID, liveness photo, address
Fraud Detection & Anti-Money Laundering	Legal & Legitimate Interest	Device fingerprints, velocity, IP address
Transactional Notifications & Alerts	Contract Performance	Email, SMS, push notifications
Product Enhancement & Analytics	Legitimate Interest (Aggregated)	Anonymized usage metrics and error logs

3. Sharing & Third Parties

Authorized partners and regulatory institutions who may receive your information.

We never sell your personal data to advertisers or third parties. We share your information solely with essential financial infrastructure partners and regulatory authorities under strict non-disclosure and security covenants.

Virtual Card Processing

Payment Card Schemes (Visa & Mastercard)

We transmit necessary cardholder name, billing token, and transaction amount to authorized card scheme networks to process cross-border payments at millions of merchants.

Wallet Funding & Withdrawals

Mobile Network Operators (MTN & Orange)

Your phone number and transaction amount are transmitted via secure API to MTN Cameroon and Orange Cameroun solely to execute wallet top-up and cash-out requests.

Custody of Client Funds

Regulated Banking Partners

Client fiat deposits are held in segregated reserve accounts at licensed commercial partner banks in the CEMAC region under COBAC regulations.

Statutory Compliance

Financial Regulators & Law Enforcement

Where formally compelled by valid court orders, financial intelligence units (e.g. ANIF Cameroon), or Central African banking supervisory bodies.

4. Data Security & Storage

The cryptographic and physical measures we deploy to safeguard your funds and personal privacy.

MoniCard is built with defense-in-depth principles. We treat your security as an uncompromisable priority.

End-to-End Encryption

All network communications are encrypted with TLS 1.3 and 256-bit AES algorithms. Data at rest is encrypted in hardened cloud storage.

Card Number Tokenization

Your virtual card 16-digit Primary Account Number (PAN) is never stored in plaintext. We utilize PCI-DSS Level 1 compliant tokenization vaults.

Zero-Trust Access Control

Employee access to customer records is restricted by multi-factor authentication, least-privilege principles, and immutable audit logging.

Automated Threat Monitoring

Real-time security telemetry identifies abnormal account access, unauthorized IP switches, and velocity spikes within milliseconds.

PCI-DSS Notice: MoniCard virtual debit cards operate on tokenized card infrastructure. We never store raw CVV2 codes or card PINs on our servers.

5. Data Retention & Transfers

How long we retain your data and our safeguards for international data transfers.

We retain personal and financial records only for as long as is necessary to provide services and satisfy statutory obligations.

Statutory Financial Retention (5 to 10 Years)

In accordance with CEMAC Anti-Money Laundering regulations and banking laws, MoniCard is legally mandated to maintain customer identification documents, transaction ledgers, and KYC audit trails for a minimum of 5 (five) years following account closure or transaction completion.

Automated Deletion of Transient Data

Temporary verification media, raw camera streams from selfie identity checks, and transient session cookies are wiped within 30 to 90 days after identity verification approval.

Cross-Border Data Transfers

Because MoniCard powers borderless payments across Africa, Europe, North America, and Asia, your data may be processed on secure servers located outside your country of residence. All transfers are protected by Standard Contractual Clauses (SCCs) and high-grade data protection covenants.

6. Your Rights & Choices

Your legal rights regarding your personal records and how you can exercise them.

You hold full sovereignty over your personal data. You can exercise any of the following rights at any time directly through the MoniCard mobile app or by reaching out to our Data Protection team.

Right to Access

Request a complete electronic copy of all personal information and transaction logs MoniCard holds about you.

Right to Rectification

Correct any outdated, inaccurate, or incomplete information in your profile directly or via customer support.

Right to Erasure

Request account closure and data deletion, subject to mandatory anti-money laundering statutory retention rules.

Right to Portability

Receive your transaction history and profile records in a machine-readable, structured format (CSV/JSON).

Right to Object & Opt-Out

Opt out of marketing emails, SMS newsletters, and promotional notifications via your MoniCard app settings.

Right to Lodge Complaints

File a concern directly with our Data Protection Officer or with national data protection authorities.

Want to export or delete your personal data? You can trigger automated data export anytime via your account settings.

Manage Account

Have questions about our Privacy Policy?

Our Data Protection and Compliance team is ready to provide complete transparency on our data practices.

Email Privacy Team Contact Support

Start in Minutes

Ready to experience secure, borderless payments?

Create your account in minutes. Issue instant virtual cards and enjoy bank-grade protection for all your global transactions.

Get Started Now View Transparent Fees

Virtual Cards

Multi-Currency Wallet

Global Payments

Crypto Currency

Digital Services