PRIVACY POLICY
Last Updated: June 2026
Compliance Framework: NDPA (2023) | NDPA-GAID (2025) | FCCPC DEON Regulations (2025)
Roko Capital (referred to as "the Company," "we," "us," or "our") is committed to protecting the privacy, data dignity, and financial security of our clients, partners, and platform users. This Privacy Policy outlines how we collect, store, process, and safeguard your personal and business data.
By utilizing our platform, submitting a loan application, or interacting with our managed investment ecosystem, you explicitly consent to the data practices described in this policy.
Roko Capital (referred to as "the Company," "we," "us," or "our") is committed to protecting the privacy, data dignity, and financial security of our clients, partners, and platform users. This Privacy Policy outlines how we collect, store, process, and safeguard your personal and business data.
By utilizing our platform, submitting a loan application, or interacting with our managed investment ecosystem, you explicitly consent to the data practices described in this policy.
1. Lawful Basis for Processing
In strict accordance with the Nigeria Data Protection Act, we only process your data under the following clear legal frameworks:
Performance of a Contract: To process your loan application, assess credit eligibility, and manage active financial facilities.
Legal & Regulatory Obligation: To verify identities (KYC), prevent anti-money laundering (AML), and comply with Central Bank of Nigeria (CBN) and FCCPC reporting standards.
Explicit Consent: Where you have explicitly authorized us via our digital interfaces to evaluate specific, secure financial records.
In strict accordance with the Nigeria Data Protection Act, we only process your data under the following clear legal frameworks:
Performance of a Contract: To process your loan application, assess credit eligibility, and manage active financial facilities.
Legal & Regulatory Obligation: To verify identities (KYC), prevent anti-money laundering (AML), and comply with Central Bank of Nigeria (CBN) and FCCPC reporting standards.
Explicit Consent: Where you have explicitly authorized us via our digital interfaces to evaluate specific, secure financial records.
2. Data We Collect (Strict Data Minimization)
We only harvest data directly relevant to assessing credit risk and managing your profile. We do not engage in broad, invasive surveillance.
Identity & Verification Data: Full name, National Identification Number (NIN), Bank Verification Number (BVN), digital signatures, and Corporate Affairs Commission (CAC) registration data for business entities.
Financial & Transactional Data: Bank statements, account numbers, historical credit facility performance, and automated revenue tracking feeds linked via secure APIs.
Technical & Digital Footprint: IP addresses, browser types, and session duration data collected strictly to prevent automated fraud attacks and optimize UI/UX rendering on our canvas.
The Integrity Clause: In absolute compliance with FCCPC guidelines and Google’s data privacy frameworks, Roko Capital does not request, scrape, access, or harvest your personal smartphone contact list, private gallery, or external device storage. We reject predatory recovery and invasive underwriting tactics entirely.
We only harvest data directly relevant to assessing credit risk and managing your profile. We do not engage in broad, invasive surveillance.
Identity & Verification Data: Full name, National Identification Number (NIN), Bank Verification Number (BVN), digital signatures, and Corporate Affairs Commission (CAC) registration data for business entities.
Financial & Transactional Data: Bank statements, account numbers, historical credit facility performance, and automated revenue tracking feeds linked via secure APIs.
Technical & Digital Footprint: IP addresses, browser types, and session duration data collected strictly to prevent automated fraud attacks and optimize UI/UX rendering on our canvas.
The Integrity Clause: In absolute compliance with FCCPC guidelines and Google’s data privacy frameworks, Roko Capital does not request, scrape, access, or harvest your personal smartphone contact list, private gallery, or external device storage. We reject predatory recovery and invasive underwriting tactics entirely.
3. Data Sharing & Third-Party Disclosure
Roko Capital does not sell, trade, or unethically monetize user data. Your information is shared exclusively with authorized entities under strict confidentiality agreements:
Licensed Credit Bureaus: To report credit performance metrics and fulfill mandatory financial ecosystem requirements.
Regulatory & Law Enforcement Bodies: When strictly compelled by law, the courts, the Federal Competition and Consumer Protection Commission (FCCPC), or the Nigeria Data Protection Commission (NDPC).
Technical Service Infrastructure Partners: Secure digital infrastructure providers (such as KYC verification engines or secure cloud storage nodes) who operate under strict non-disclosure terms.
Roko Capital does not sell, trade, or unethically monetize user data. Your information is shared exclusively with authorized entities under strict confidentiality agreements:
Licensed Credit Bureaus: To report credit performance metrics and fulfill mandatory financial ecosystem requirements.
Regulatory & Law Enforcement Bodies: When strictly compelled by law, the courts, the Federal Competition and Consumer Protection Commission (FCCPC), or the Nigeria Data Protection Commission (NDPC).
Technical Service Infrastructure Partners: Secure digital infrastructure providers (such as KYC verification engines or secure cloud storage nodes) who operate under strict non-disclosure terms.
4. Data Security & Storage Architecture
Your personal data is handled as core institutional infrastructure:
Encryption: All data in transit and at rest is secured using bank-grade cryptographic protocols.
Access Control: Internal data access is restricted through a zero-trust architecture—only verified credit analysts and underwriting algorithms interact with active files.
Breach Notification: In the highly unlikely event of a data security variance, we maintain protocols to inform the NDPC and affected users within the legally mandated windows.
Your personal data is handled as core institutional infrastructure:
Encryption: All data in transit and at rest is secured using bank-grade cryptographic protocols.
Access Control: Internal data access is restricted through a zero-trust architecture—only verified credit analysts and underwriting algorithms interact with active files.
Breach Notification: In the highly unlikely event of a data security variance, we maintain protocols to inform the NDPC and affected users within the legally mandated windows.
5. Your Legal Rights as a Data Subject
Under the NDPA, you possess complete autonomy over your digital profile. You may exercise the following rights directly via your account settings dashboard or by contacting our team:
The Right to Access: Request a clean, transparent log of all personal data points we hold in our active database.
The Right to Rectification: Mandate immediate updates to any incomplete or inaccurate personal data.
The Right to Erasure ("Right to be Forgotten"): Request the total deletion of your personal records, provided there are no active, legally binding loan facilities, unresolved obligations, or overriding regulatory retention requirements tying the data to our platform.
The Right to Restrict Processing: Object to automated decision-making or specific underwriting modeling pipelines.
Under the NDPA, you possess complete autonomy over your digital profile. You may exercise the following rights directly via your account settings dashboard or by contacting our team:
The Right to Access: Request a clean, transparent log of all personal data points we hold in our active database.
The Right to Rectification: Mandate immediate updates to any incomplete or inaccurate personal data.
The Right to Erasure ("Right to be Forgotten"): Request the total deletion of your personal records, provided there are no active, legally binding loan facilities, unresolved obligations, or overriding regulatory retention requirements tying the data to our platform.
The Right to Restrict Processing: Object to automated decision-making or specific underwriting modeling pipelines.
6. Changes to This Framework
Roko Capital reserves the right to amend this Privacy Policy to match emerging fintech legislation, product feature extensions, or national data directives. Any material adjustments will be highlighted across our digital entry interfaces and update notifications will be pushed to active accounts immediately.
Roko Capital reserves the right to amend this Privacy Policy to match emerging fintech legislation, product feature extensions, or national data directives. Any material adjustments will be highlighted across our digital entry interfaces and update notifications will be pushed to active accounts immediately.
Grow with Us Today
At Roko Capital, we believe businesses deserves a relatable financing partner. Our commitment is to provide reliable and transparent funding solutions.
Grow with Us Today
At Roko Capital, we believe businesses deserves a relatable financing partner. Our commitment is to provide reliable and transparent funding solutions.
Grow with Us Today
At Roko Capital, we believe businesses deserves a relatable financing partner. Our commitment is to provide reliable and transparent funding solutions.