OSO Money

Privacy Policy

OSO Money (Pty) Ltd | Reference / Registration No. 26368

I. Background

This Privacy Policy (“Policy”) applies to the OSO Money website, Platform and any applicable mobile applications, APIs and related services (collectively, the “Platform”) provided by OSO Money (Pty) Ltd (“OSO Money”, “Company”, “we”, “us” or “our”).

OSO Money (Pty) Ltd is the trading name used by the regulated business through which the relevant foreign exchange and international payment services are provided. The applicable regulated entity, regulatory permissions and licensing details are as disclosed in our Terms of Service and customer onboarding documentation.

This Policy explains how we collect, use, store and disclose Personal Data obtained from users of the Platform, customers, prospective customers, authorised representatives and other individuals who interact with us.

For purposes of this Policy, “Personal Data” means information relating to an identifiable individual, directly or indirectly.

By registering for, accessing or using the Platform or Services, you acknowledge that your Personal Data will be processed as described in this Policy and the applicable Terms of Service.

II. The Data We Collect About You and How We Collect It

We collect and process Personal Data directly from you when you contact us, apply to use our Services, register for an account, complete customer due diligence or provide information in connection with a transaction. We may also collect or receive Personal Data from third-party service providers, financial institutions, payment providers, public sources, government institutions and other persons where there is a lawful basis to provide the information to us.

III. Data We Collect Directly From You

Identification Information

Depending on the Services you use and applicable regulatory requirements, we may collect your full name, email address, telephone/mobile number, date of birth, nationality, identity or passport details, identity document images, residential and mailing address, proof of address and other information required to verify your identity.

Where you act on behalf of a company or other legal entity, we may collect information concerning the entity, its directors, shareholders, beneficial owners, authorised representatives and ownership or control structure.

Financial Information

We may collect bank account details, payment details, tax identification information where required, source-of-funds and source-of-wealth information, transaction history, currency and payment information and other financial information required to provide our Services or meet legal and regulatory obligations.

We do not require payment-card information unless it is specifically necessary for a Service or payment method made available to you.

Transaction Information

We collect information about transactions undertaken through our Services, including currencies, amounts, exchange rates, fees, payment instructions, beneficiary information, bank account details, payment references, transaction status, supporting documentation and information concerning the purpose and underlying nature of a transaction.

We may also collect information generated through customer due diligence, sanctions screening, politically exposed person (“PEP”) screening, fraud screening and source-of-funds/source-of-wealth reviews.

Profile, Employment and Business Information

This may include account information, preferences, feedback, survey responses, occupation, employment history, education, income information, business activities, expected transaction activity and information about the nature and purpose of your business, where relevant to our Services or customer due diligence.

Communications with Us

We collect information you provide when communicating with us by email, telephone, live chat, contact forms or other channels. We use this information to respond to enquiries, provide support, manage your relationship with us, facilitate transactions and improve our Services.

Usage and Technical Information

We may collect information about how you use our Platform, including IP address, browser type, device type, operating system, device identifiers, network information, language preferences, page views, traffic information, log data, crash information and other technical data collected through cookies and similar technologies.

Marketing and Communications Data

This may include your marketing preferences, consent and communication preferences relating to communications from OSO Money and, where applicable, selected third parties.

If you act on behalf of a customer or other User, you are responsible for ensuring that you have the necessary authority and permissions to provide Personal Data to us and that such provision complies with applicable law.

IV. How Is Your Personal Data Collected?

a) Direct interactions

You may provide Personal Data by completing forms, corresponding with us through our Website or Platform, using our APIs, or contacting us by post, telephone, email or other communication methods. This includes Personal Data provided when you apply to use our Services, create or maintain an account, provide customer due diligence information, undertake a transaction, contact support, or provide feedback.

b) Third parties or publicly available sources

  • banking and payment partners;
  • financial institutions and international payment providers;
  • identity verification, document verification and fraud-prevention providers;
  • credit reference or information providers, where permitted and necessary;
  • sanctions and PEP screening providers;
  • analytics, cloud, communications and technology providers;
  • business partners that refer or introduce customers to us;
  • publicly available registers and sources; and
  • government, regulatory or law-enforcement institutions where permitted or required by law.

V. Data We Collect Automatically

When you use the Platform, our servers and service providers may automatically record information using cookies and similar technologies. This may include your IP address, browser type and settings, date and time of requests, referring pages, language preferences, cookie information and other technical information.

We may also collect information about the device used to access the Platform, including operating system, device settings, unique device identifiers and crash data. We may combine technical information with other information we hold about you where necessary for security, analytics, service delivery, fraud prevention or other lawful purposes.

Where a mobile application provides location-based functionality and you have enabled location permissions, we may collect location information as permitted by your device settings and applicable law. You may withdraw location permissions through your device settings.

VI. Lawful Basis for Processing Personal Data

We process Personal Data on one or more lawful grounds applicable under data-protection law, including:

  • Performance of a contract — where processing is necessary to enter into or perform our agreement with you;
  • Legitimate interests — where processing is necessary for our legitimate business interests, such as service improvement, security, fraud prevention, risk management and business administration, provided that such interests are balanced against your rights;
  • Legal or regulatory obligations — where processing is necessary to comply with applicable law, regulation, regulatory requirements, court orders or requests from competent authorities; and
  • Consent — where you have provided consent and consent is the appropriate lawful basis for the relevant processing.

We may rely on more than one lawful basis for a particular processing activity. Certain Personal Data may need to be retained or processed because of AML/CFT, financial-services, tax, accounting, fraud-prevention or other regulatory requirements. Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

VII. How We Use Your Data

We use Personal Data only where permitted by applicable law. Purposes may include:

  • providing and administering our foreign exchange and international payment Services;
  • opening, maintaining and administering customer accounts;
  • processing and settling foreign exchange and payment transactions;
  • verifying identity and performing customer due diligence;
  • conducting AML/CFT, sanctions, PEP, fraud and financial-crime screening;
  • communicating with you about your account, transactions, Services, Terms or policies;
  • working with banks, payment providers and other financial-service partners to execute transactions;
  • investigating and resolving disputes, complaints, errors and payment issues;
  • improving, testing, securing and developing our Platform and Services;
  • managing our relationship with you;
  • protecting our business, customers, systems and property;
  • complying with legal, regulatory, tax, accounting and reporting obligations;
  • conducting appropriate analytics and reporting, including using aggregated or de-identified information; and
  • sending direct marketing communications where permitted and, where required, with your consent.

VIII. How We Share Your Data

We may share Personal Data with affiliates or related entities where appropriate for legitimate business, operational, compliance or service-delivery purposes, subject to applicable law.

We may disclose Personal Data to third-party service providers and professional advisers, including banks, payment providers, identity-verification providers, fraud-prevention providers, technology and cloud providers, auditors, accountants, lawyers and other professional advisers. Where appropriate, these providers will process Personal Data only for specified purposes and subject to contractual, legal or other safeguards.

If OSO Money is involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to applicable requirements.

We may disclose Personal Data to regulators, government authorities, courts, law-enforcement agencies, the Financial Intelligence Centre and other competent authorities where required or permitted by law, or where necessary to protect our legal rights or comply with legal obligations.

We may exchange information with banks, financial institutions, fraud-prevention agencies, screening providers and other organisations for fraud prevention, sanctions compliance, financial-crime prevention and risk management.

We may process and share aggregate or de-identified information for analytics, research, product development, marketing or similar legitimate purposes, provided that the information does not identify individuals where it is intended to be de-identified.

IX. Our Use of Cookies and Other Tracking Mechanisms

We and selected third-party service providers may use cookies and similar tracking technologies to understand Platform usage, maintain functionality, improve security, analyse performance and, where permitted, support marketing activities. Further information will be set out in our applicable Cookie Policy.

X. Third-Party Links

Our Platform may contain links to third-party websites or services. Those websites and services are governed by their own privacy policies. We are not responsible for the privacy practices, security or content of third-party websites or services.

XI. Security of Your Personal Data

We implement reasonable technical and organisational measures appropriate to the nature of the Personal Data we process and the risks involved, consistent with applicable data-protection laws and regulations. However, no method of transmission or storage can guarantee complete security. You are also responsible for maintaining the confidentiality of your account credentials and for using secure devices and connections.

  • Use strong and unique passwords and keep your account credentials confidential.
  • Do not share passwords, PINs or authentication information with third parties.
  • Keep your operating system, browser and security software up to date.
  • Use trusted devices and secure internet connections when accessing the Platform.
  • Do not open suspicious links or attachments or provide sensitive information to unknown parties.
  • Log out of the Platform after completing a session, particularly on shared devices.
  • Notify us promptly if you suspect unauthorised access to your account or credentials.

Access to Personal Data by our personnel is restricted according to role and business need. We maintain procedures for responding to suspected Personal Data breaches and will notify affected individuals and/or applicable regulators where legally required.

If you become aware of unauthorised access to your account or credentials, contact us promptly at [email protected].

XII. Rights of Access, Correction and Deletion

Subject to applicable law, you may have rights in relation to your Personal Data, including the right to:

  • request access to Personal Data we hold about you;
  • request correction of inaccurate or incomplete Personal Data;
  • request deletion or erasure where there is no lawful reason for us to continue processing the information;
  • object to certain processing, including processing based on legitimate interests and direct marketing;
  • request restriction of processing in appropriate circumstances;
  • request transfer of certain Personal Data in a structured, commonly used and machine-readable format where applicable;
  • withdraw consent where processing is based on consent; and
  • object to or request human review of certain decisions based solely on automated processing, where applicable.

You may exercise applicable rights by contacting [email protected]. We may need to verify your identity before responding. These rights are not absolute and may be limited where permitted or required by law, including where we need to retain information for AML/CFT, regulatory, accounting, tax, legal, fraud-prevention or other legitimate purposes.

You may also have the right to lodge a complaint with the Information Regulator of South Africa or another competent data-protection authority, subject to applicable law.

XIII. Transfer of Data

We may use service providers and infrastructure located in South Africa or other countries. Where Personal Data is transferred across borders, we will take steps required by applicable data-protection law to ensure appropriate safeguards are in place. Cross-border transfers may be necessary to provide international payment Services, perform identity and fraud checks, maintain technology infrastructure, or work with international banking and payment partners.

XIV. Retention

We retain Personal Data for as long as reasonably necessary for the purposes for which it was collected, including maintaining an ongoing customer relationship, providing Services and meeting legal, regulatory, accounting, tax, fraud-prevention and dispute-resolution requirements.

When determining retention periods, we consider the nature and sensitivity of the information, the purposes for which it is processed, potential risks, applicable legal requirements and whether the information is still required for legitimate business purposes.

Where Personal Data is no longer required, we will delete it, anonymise it or otherwise dispose of it securely, subject to applicable legal and regulatory requirements.

XV. Children Under 18

Our Services are not intended for persons under 18 unless otherwise permitted by applicable law and expressly stated by OSO Money. If we become aware that we have collected Personal Data from a person under 18 in circumstances where such collection is not permitted, we will take reasonable steps to address the information appropriately.

XVI. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data-subject right, or would like to raise a privacy-related complaint, please contact:

OSO Money (Pty) Ltd
Suite D1, Nautica Building
13 Beach Road
Cape Town
Western Cape
8005
Republic of South Africa

Email: [email protected]
Reference / Registration No.: 26368

XVII. Changes to this Policy

We may update this Policy from time to time to reflect changes in our Services, technology, legal or regulatory requirements or our data-processing practices.

Where appropriate, material changes affecting Personal Data already collected will be communicated through the Platform, Website, email or another appropriate channel. The latest version will be made available through the Platform or Website.

Last updated: 2 September 2026

← Back to registration