The Nigeria Data Protection Act 2023 governs the processing of personal data in Nigeria and can also apply to organisations outside Nigeria when the statutory territorial conditions are met. VSL therefore records why personal data is collected, limits collection to the workflow being used, restricts sensitive identity information, applies security controls, manages retention and supports applicable data-subject rights.

Account, listing, payment, delivery, social-commerce and AI workflows do not all require the same information. VSL collects the fields needed for the relevant service and keeps restricted verification, banking, wallet, security and risk information separate from public seller information.

VSL can process BVN, NIN, identity-document information, selfie/liveness evidence or business-registration information when a permitted verification or provider workflow requires those fields. Raw identity numbers and documents are restricted compliance data and are not public Commerce Passport fields.

Possession of a BVN or other identifier inside VSL does not mean that Fincra, Busha, NOWPayments or another provider has completed its own KYC. Provider verification remains provider-specific, and VSL records the provider reference or status returned by that workflow rather than treating one verification source as universal proof.

VSL's payment-request and Virtual POS workflows create the commercial instruction, amount, currency, seller/customer attribution and VSL transaction references. Supported provider rails then handle the regulated payment or digital-asset processing appropriate to the transaction.

Fincra supports parts of VSL's fiat stack, NOWPayments supports crypto-processing flows, and Busha supports selected Nigeria fiat/crypto conversion or payout capabilities where those provider features are enabled. VSL records and verifies provider events before changing canonical payment state; a browser redirect, UI success screen or AI statement does not by itself make a transaction paid.

VSL does not describe these integrations as proof that VSL is a bank, deposit-taker, custodian or universal money transmitter. The provider's own eligibility, KYC, transaction-monitoring, limits and risk controls continue to apply.

The Federal Competition and Consumer Protection Act and sector-specific rules can apply to offers made to Nigerian consumers. Sellers are responsible for accurate descriptions, prices and material terms, lawful products or services, required registrations, product safety, fulfilment and applicable refund or warranty obligations.

Buyers are responsible for lawful payment sources, truthful transaction information and lawful purchases. VSL can restrict prohibited activity, preserve quotes, invoices, messages, payment and delivery evidence, request additional verification, and escalate activity to a provider or competent authority when required.