An official portal of the Abuja Municipal Area Council, Federal Capital Territory
Back to Home

Legal

Privacy Policy

Last updated: August 2026

This Privacy Policy describes how the Abuja Municipal Area Council (“AMAC”, “we”, “us”, or “our”) collects, uses, and protects information when you use the Amac Revenue Management System, available at urm.afriverge.com (“the Platform”), operated on our behalf by our technology partner Afriverge, to pay tenement rates, business permits, or other council revenue, register as a member, complete identity verification (KYC), or apply for a role through our recruitment portal.

1. Information We Collect

The information we collect depends on how you use the Platform:

  • Ratepayers and businesses: full name, phone number, email address, property or business location, assessment details, and payment history.
  • Payment information: transaction reference, amount, payment method, and confirmation status. Card and bank details are processed directly by our licensed payment gateway partners and are not stored on our servers.
  • Know Your Customer (KYC) and identity verification data: Bank Verification Number (BVN), National Identification Number (NIN), government-issued identification (national ID card, driver’s licence, international passport, voter’s card), passport photograph, utility bill or proof of address, date of birth, gender, nationality, and signature specimen, collected where required to verify your identity, meet Central Bank of Nigeria (CBN) customer due diligence requirements, and prevent fraud, money laundering, and impersonation.
  • Recruitment applicants: full name, date of birth, gender, state and local government of origin, address, bank account details for payroll purposes, and supporting documents you submit.
  • Agents and staff: identification details, BVN/NIN where applicable, assigned wallet and collection records, and device information used for verification.
  • Technical data: IP address, device identifiers, browser type, geolocation (where enabled), and general usage data collected automatically to keep the Platform secure and functioning correctly.

2. How We Use Your Information

  • To assess, invoice, and collect tenement and business rates owed to the council.
  • To verify your identity, process payments, and issue digital receipts.
  • To conduct KYC and customer due diligence checks, including BVN/NIN validation against records held by licensed verification providers, in line with CBN and Nigeria Inter-Bank Settlement System (NIBSS) requirements.
  • To process recruitment applications and communicate with applicants.
  • To detect and prevent fraud, identity theft, and impersonation of council staff or agents.
  • To meet anti-money laundering (AML) and combating-the-financing-of-terrorism (CFT) obligations.
  • To respond to enquiries, complaints, and support requests.
  • To comply with legal, tax, and regulatory obligations under Nigerian law.

3. Payment Processing and Third Parties

Payments made through the Platform are processed using approved payment gateways, including Remita and our technology partner Tr3-G Innovations Limited. These providers handle card and bank transaction data under their own security standards, and we only receive confirmation of successful or failed transactions, not your full card details.

4. KYC Verification Partners

Where identity verification is required, we may transmit your BVN, NIN, or other identification details to licensed verification providers (including NIBSS, the National Identity Management Commission (NIMC), and CBN-licensed financial institutions) solely to confirm your identity. These partners process such data under their own regulatory obligations, and we retain only the verification outcome and the minimum data necessary for our records, unless a longer retention period is required by law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

  • Relevant departments within the council for revenue assessment, reconciliation, and service delivery.
  • Licensed payment gateway and KYC verification providers strictly to process your transaction or verify your identity.
  • Regulatory bodies, auditors, or law enforcement agencies where required by law, including the Central Bank of Nigeria, the Nigeria Financial Intelligence Unit (NFIU), and the Nigeria Data Protection Commission (NDPC).
  • Service providers, including Afriverge, who support the technical operation of the Platform, under confidentiality obligations.

6. Data Retention

We retain payment, assessment, KYC, and applicant records for as long as necessary to meet our statutory, audit, and administrative obligations, and in line with applicable Nigerian record-keeping requirements, including CBN AML/CFT retention rules, which may require certain identity verification records to be kept for a minimum period after the relationship with you ends. When information is no longer required, it is securely deleted or anonymized.

7. Security

We use encrypted connections (SSL/TLS) for all data transmitted through the Platform and restrict access to personal data, including KYC records, to authorized staff and agents on a need-to-know basis. While we work to protect your information, no system can guarantee absolute security, so we encourage you to keep your login details, BVN/NIN, and payment confirmations private and to report anything suspicious immediately.

8. Your Rights

In line with the Nigeria Data Protection Act (NDPA) 2023 and its subsidiary regulations, and subject to the constitutional right to privacy recognized under Section 37 of the Constitution of the Federal Republic of Nigeria 1999 (as amended), you may request access to, correction of, portability of, or deletion of your personal information held by us, and may object to or restrict certain processing, subject to our legal retention obligations. To exercise these rights, contact us using the details below.

9. Regulatory Framework

We process personal data in accordance with, among others:

  • The Constitution of the Federal Republic of Nigeria 1999 (as amended), Section 37 (right to privacy).
  • The Nigeria Data Protection Act, 2023, and the Nigeria Data Protection Commission’s General Application and Implementation Directive.
  • Central Bank of Nigeria (CBN) Know Your Customer (KYC) and Customer Due Diligence Regulations, and the CBN AML/CFT Regulations.
  • The Money Laundering (Prevention and Prohibition) Act, 2022, and the Terrorism (Prevention and Prohibition) Act, 2022.
  • The NIBSS BVN and National Identity Management Commission (NIMC) NIN frameworks governing identity verification.
  • Applicable Federal Capital Territory and local government revenue laws under which AMAC assesses and collects rates.

10. Children's Privacy

The Platform is intended for use by adults conducting property, business, employment-related, or identity-verification transactions. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our KYC and verification requirements, or legal and regulatory requirements. Material changes will be posted on this page with an updated revision date.

12. Contact Us

If you have questions or concerns about this Privacy Policy, how your information (including KYC data) is handled, or wish to exercise your rights under the NDPA, contact:

Abuja Municipal Area Council — Revenue Management System
Website: urm.afriverge.com
Email: support@abujamunicipal.gov.ng
Address: Abuja Municipal Area Council Secretariat, Abuja Municipal Town, FCT — Abuja, Nigeria