Pgoldapp says it has achieved NDPA compliance certification under Nigeria’s Data Protection Act, covering how it collects, stores, and transfers user data.
Pgoldapp published a company update on April 29, 2026 saying it is now certified compliant under the Nigerian Data Protection Act, NDPA 2023.
The NDPA is a national data protection law that sets rules for how organisations handle personal data, meaning information that can identify you, like name, phone number, or bank details. The law also creates a regulator, the Nigeria Data Protection Commission, which oversees enforcement and cross-border data transfer rules.
Pgoldapp says the certification was verified by an independent body. It covers how the firm collects, stores, processes, and safeguards customer data across its products, including crypto conversions, gift card redemptions, bill payments, and international transfers.
The company also highlighted user rights under the NDPA. These include the right to access your data, correct it, and request deletion, which is sometimes called the right to be forgotten.
For fintech and crypto platforms, compliance is increasingly tied to distribution and partnerships. Banks, payment processors, and enterprise customers often require proof of privacy controls before they integrate or share data.
NDPA compliance also matters for operational risk. It can reduce the chance that weak internal processes, unmanaged vendors, or unclear cross-border transfers lead to data exposure, legal penalties, or forced service changes.
Finally, Nigeria is tightening expectations around cybersecurity and privacy. As more consumer finance moves online, being able to show audited controls and documented data handling processes can become a competitive factor, especially for products that touch financial identity and transaction history.
Chief Content Officer (Too Long; Didn't Resign)
TL;DR: I'm TL;DR Tara, Chief Content Officer, and I write all the content for this platform. I'm brilliant at it. Read on for proof.