Privacy Policy

Last updated: 29 May 2026

Introduction

Regini VASP Ltd ("Regini", "we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, mobile applications, WhatsApp services, customer support channels, and related services (collectively, the "Services").

Regini is registered as a Data Controller with the Office of the Data Protection Commissioner (ODPC) in Kenya and processes personal data in accordance with the Kenyan Data Protection Act, 2019.

By using our Services, you agree to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

Depending on how you use our Services, we may collect:

Identity Information

• Full name
• Date of birth
• National ID or other identification documents
• Selfie and verification images
• Gender and nationality

Contact Information

• Mobile phone number
• Email address
• Residential address

Account Information

• Username and login credentials
• Security settings and authentication information
• Customer support interactions

Financial & Transaction Information

• Deposits and withdrawals
• Wallet addresses
• Transaction history
• Account balances
• Payment information

KYC & Compliance Information

• Information obtained through identity verification providers such as Smile ID
• Sanctions, AML, and fraud screening results

Device & Technical Information

• IP address
• Device identifiers
• Operating system and device type
• App usage information
• Log and diagnostic information

Usage Information

• Features used
• Pages visited
• Preferences and settings
• Communication history with Regini

2. How We Collect Information

We collect information:

• Directly from you during registration and use of our Services.
• Through KYC and identity verification providers.
• Through payment providers and financial partners.
• Through analytics and monitoring tools.
• Through customer support interactions.
• Automatically through your device and browser when using our Services.

3. How We Use Your Information

We use personal data to:

• Create and manage your account.
• Verify your identity and comply with legal obligations.
• Process deposits, withdrawals, and transactions.
• Provide customer support.
• Improve and develop our products and services.
• Detect fraud, abuse, and security threats.
• Monitor platform performance and reliability.
• Communicate with you regarding your account and transactions.
• Send marketing communications where permitted by law.
• Comply with legal and regulatory requirements.

4. Legal Basis for Processing

We process personal data where necessary to:

• Provide our Services to you.
• Comply with legal and regulatory obligations.
• Protect our legitimate business interests.
• Prevent fraud and financial crime.
• Respond to your requests and support inquiries.
• Fulfill contractual obligations.
• Where required, based on your consent.

5. How We Share Information

We may share your information with:

Service Providers

Third-party providers that help us operate our Services, including:

• Turnkey (wallet infrastructure)
• Smile ID (identity verification)
• Payment and banking partners
• Cloud hosting providers
• Analytics providers
• Customer support platforms

Legal & Regulatory Authorities

We may disclose information when required by law, regulation, court order, or regulatory request.

Business Transactions

If Regini is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction.

We do not sell your personal data.

6. International Transfers

Some service providers may process data outside Kenya.

Where personal data is transferred internationally, we take reasonable measures to ensure appropriate safeguards are in place and that the data remains protected.

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide our Services.
• Meet legal, regulatory, accounting, and compliance requirements.
• Resolve disputes.
• Prevent fraud and abuse.

Retention periods may vary depending on the type of data and applicable legal requirements.

8. Data Security

We implement industry-standard technical, administrative, and organizational security measures designed to protect personal data.

These measures include:

• Encryption in transit and at rest.
• Access controls and authentication mechanisms.
• Monitoring and security logging.
• Employee confidentiality obligations.
• Vendor due diligence and security reviews.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the right to:

• Be informed about how your personal data is used.
• Access your personal data.
• Correct inaccurate personal data.
• Request deletion of personal data.
• Restrict or object to processing.
• Withdraw consent where processing is based on consent.
• Request portability of your personal data.
• Object to direct marketing communications.

To exercise your rights, contact us at support@regini.finance.

We may request information to verify your identity before processing your request.

10. Cookies & Analytics

We may use cookies, analytics tools, and similar technologies to:

• Understand how our Services are used.
• Improve performance and user experience.
• Measure service reliability.
• Detect fraud and abuse.

You may be able to control certain tracking technologies through your device or browser settings.

11. Marketing Communications

We may send:

• Account and transaction notifications.
• Security alerts.
• Service updates.
• Marketing communications (where permitted).

You may opt out of marketing communications at any time. You cannot opt out of essential account, security, or transaction communications.

12. Third-Party Services

Our Services may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies.

13. Data Breaches

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take appropriate action, including notifying the ODPC and affected individuals where required by applicable law.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available through our Services and will include the effective date at the top of this document.

15. Contact

Questions about this policy? Reach us at support@regini.finance or chat with us on WhatsApp at +254 704 133 503.