Application, Identity and Photograph Policy

Identity verification helps 6membership determine whether an application appears to concern the person, household, business or organisation represented.

It also helps prevent impersonation, duplicate applications, altered cards, unauthorised representation, stolen payment use and misuse of higher-tier relationships.

Verification is a risk-control process. It does not guarantee that every false document, impersonation attempt or identity error will always be detected.

The information requested should be proportionate to the selected tier, applicant category, age, payment value, geographic coverage, requested relationship and identified risk.

An ordinary Starter application should not automatically require the same evidence as a high-value Elite application, business relationship or private 6clement Joshua consideration request.

6membership may request stronger evidence where information is inconsistent, payment ownership differs, predecessor membership cannot be confirmed or fraud indicators are identified.

Only information reasonably relevant to the verification purpose should be requested.

Applicants should not upload unrelated financial records, medical information, passwords, complete banking credentials or other unnecessary private information.

Where a document contains information that may lawfully be obscured without undermining verification, the upload instructions may permit appropriate redaction.

A verification decision should consider the available evidence rather than relying only on a single visual impression, technical flag or formatting error.

Where reasonably possible, an applicant should receive an opportunity to correct a genuine quality problem or explain a material inconsistency before a final adverse decision.

This opportunity may be limited where there is credible fraud, impersonation, security risk, repeated evasion or a legal restriction.

This Policy governs the collection and use of identity materials.

The Privacy and Data Protection Notice governs the broader processing of personal information.

The Membership Card, Certificate and Public Verification Policy governs approved cards, public status checks and card misuse.

Basic identity information may include first name, middle name, last name, date of birth, age range, gender where relevant and lawful, nationality, country of residence and applicant category.

It may also include an Application Reference, existing Membership ID and information needed to distinguish the applicant from another person with a similar name.

Verification may use a registered email address, telephone number, residential address, business address, city, state, region and country.

Proof of address may be requested where geographic coverage, payment review, legal obligations or the nature of the membership relationship makes it reasonably necessary.

A clear, recent and recognisable photograph of the applicant is ordinarily required.

The photograph may be used to support application review, identity matching, card production, duplicate detection, card replacement and impersonation investigations.

Where required, supporting evidence may include a government-issued identity document, passport, driving licence, national identity record, birth record, proof of address or another reliable document appropriate to the applicant and jurisdiction.

The acceptable document type may differ according to country, age, applicant category and verification purpose.

A document will not be requested merely because it is available where a less intrusive method is sufficient.

A permitted younger applicant may require evidence concerning age, parent or guardian identity, relationship and authority.

The evidence may include a birth record, guardianship record, consent declaration or another document legally sufficient for the relevant jurisdiction.

An applicant acting for a business or organisation may be asked to provide registration information, operating address, representative identity, position, authorisation, beneficial-owner details or signatory evidence.

A person must not claim to represent an entity without appropriate authority.

Where the payer differs from the applicant or primary representative, 6membership may request the payer’s name, relationship, payment authority and a reasonable explanation.

For payments processed through Flutterwave, 6membership may receive and compare limited payer and transaction information returned by Flutterwave with the application record for payment verification, fraud prevention, refund handling and dispute resolution.

A Flutterwave transaction response, payer name, email address or payment-method category supports the relevant payment check but does not independently prove every aspect of legal identity or authority.

The purpose is to prevent unauthorised payment use, fraud, money laundering, unexplained third-party funding and refund disputes.

The photograph must show the actual person whose individual identity is connected to the application.

For a household, business or organisation application, the photograph must show the approved primary representative unless the form expressly requests another person.

A person must not submit a celebrity, public figure, family member, employee, customer or unrelated individual as the applicant image.

The photograph should be sufficiently recent to represent the applicant’s current appearance.

The face should be recognisable and should not be hidden by excessive blur, darkness, glare, masks, hands, objects or extreme camera angles.

Reasonable religious, cultural, disability and medical accommodations will be considered where identity can still be verified appropriately.

The photograph should ordinarily contain only the applicant.

Group photographs, event photographs and images in which the applicant cannot be clearly distinguished may be rejected for card and verification purposes.

Minor adjustments for lighting, orientation or cropping may be acceptable where they do not misrepresent identity.

Beauty filters, face replacement, artificial ageing, artificial de-ageing, face reshaping, identity-changing retouching and comparable alterations are not permitted where they materially affect verification.

6membership may request an unfiltered replacement where the submitted image cannot be reliably assessed.

An entirely artificial, synthetic or computer-generated face must not be submitted as an applicant photograph.

An artificial image representing a person who does not exist cannot establish a real membership identity.

An image generated from the applicant’s appearance may still be rejected where it does not faithfully and verifiably represent the applicant.

A screenshot of a social-media profile, membership card, printed photograph or another screen may be rejected where image quality or ownership cannot be established.

6membership may ask for a new photograph taken or uploaded directly by the applicant.

The application interface may impose supported file types, size limits, dimensions and quality requirements.

A file may be compressed, resized or rejected where it is excessively large, corrupted, unsupported or unsafe.

Compression and card cropping must not intentionally change the applicant’s identity or physical appearance.

An applicant who cannot satisfy an ordinary photograph instruction because of disability, injury, medical condition, religious practice or another protected circumstance may request a reasonable alternative.

The alternative must still provide a sufficiently reliable method of confirming identity.

A submitted document must be authentic and connected to the person or entity represented.

A document must not be forged, purchased, stolen, unlawfully obtained, digitally fabricated or altered to change a material fact.

A certified or translated copy may be requested where reasonably necessary.

Where the verification purpose requires a current document, an expired document may be rejected.

An expired document may still be considered for a limited historical fact where legally appropriate and supported by additional evidence.

Required names, dates, document type, issuer, photograph and validity information must be sufficiently visible for the requested check.

A document may be rejected where glare, cropping, obstruction, low resolution or missing pages prevents reliable review.

Upload instructions may allow an applicant to obscure an identifier or field that is not necessary for the particular check.

Redaction must not hide the applicant’s identity, document authenticity, authority, validity or another fact relevant to the review.

6membership may request an unredacted or differently redacted version where the submitted copy cannot support the verification purpose.

A complete national identity, passport, licence or registration number should not be displayed publicly on a membership card or public verification page.

Where a number is stored for verification, access should be restricted and a masked or partial version should be used where the full number is unnecessary.

Applicants must not submit email passwords, banking passwords, card security codes, complete card numbers, account PINs, email OTPs or authentication secrets as identity evidence.

An authorised reviewer must not request those credentials.

Where a document is not written in a language supported by the review process, 6membership may request a reliable translation.

The original document may also be required so that the translation can be connected to its source.

For higher-risk decisions, a certified translation may be requested.

A person providing identity information about another person must have an appropriate legal or authorised basis to do so.

6membership may request evidence that a guardian, household representative, business representative, authorised agent or legal representative is permitted to act.

A Family application ordinarily identifies one primary adult representative.

The representative may provide limited information concerning approved household members where appropriately authorised.

Household information must not be used to add unrelated persons or create unauthorised individual memberships.

A child under 13 must not independently submit identity information or a membership application.

Where an authorised process permits limited information concerning a child, the information must be supplied and managed by an appropriately verified parent or guardian.

Where participation is permitted, an applicant aged 13 to 17 may require verified parent or guardian involvement.

6membership may verify both the younger applicant and the parent or guardian.

The verification process should be proportionate to the selected tier, the younger applicant’s age and the applicable legal requirements.

The younger applicant’s photograph may be required where the membership card will identify that applicant.

The parent or guardian may also be required to provide their own identity evidence to establish authority.

The guardian’s photograph must not be substituted for the younger applicant’s photograph on a card intended to identify the younger applicant.

Information concerning a younger applicant should be limited to the verification, consent, safety, administration and legal purposes that justify its collection.

A younger applicant’s photograph must not be used for unrelated promotion or public advertising merely because a guardian approved the membership application.

Identity photographs and documents should ordinarily be submitted through the official 6membership application or document-upload interface.

The interface should use secure transport and private storage appropriate to the sensitivity of the material.

Identity evidence should not be sent by ordinary email unless 6membership specifically requests it through a verified official address and no safer approved route is reasonably available.

The request should identify the Application Reference and the exact evidence required.

Applicants should verify unexpected document requests before responding.

Applicants should not send passports, identity cards, payment evidence or private photographs to an unverified social-media account, personal messaging account or unofficial representative.

A public social profile is not an approved identity-document storage channel.

Identity photographs and documents should remain in private storage rather than unrestricted public storage.

Where temporary signed access links are used, they should expire and should not be treated as permanent public addresses.

Complete identity documents and highly sensitive application evidence must not be stored in ordinary browser local storage merely for convenience.

Temporary client-side processing should be limited and cleared where reasonably possible after secure submission.

Uploaded files may be checked for malware, unsupported formats, corruption or dangerous embedded content.

A file may be quarantined, rejected or removed where it creates a credible security risk.

An authorised reviewer may compare the submitted photograph with identity documents, application information, prior membership records and other relevant evidence.

Manual review may consider whether the photograph appears consistent, whether names and dates align and whether the document appears complete and credible.

A verification code or secure link may be used to confirm access to the registered email address.

Email verification confirms control of the email channel at that time. It does not independently prove every aspect of legal identity.

6membership may compare an application with prior applications, Membership IDs, payment records, guardian records, card reports and administrative history.

This supports predecessor-tier confirmation, duplicate detection and prevention of repeated evasion.

A document may be reviewed for visible consistency, issuer format, validity, alteration indicators and connection to the applicant.

6membership may request additional evidence where a document cannot be reliably assessed.

Acceptance of a document does not mean 6membership guarantees that the issuing authority will always regard it as valid.

A new selfie, short video or liveness step may be requested where impersonation risk, photograph age, document mismatch or another material concern justifies it.

The applicant will be informed of the purpose and expected use before completing the step.

A liveness or video check will not be introduced secretly through a standard photograph upload.

Where an approved third-party identity-verification provider is introduced, the applicant will be informed of the provider’s role and relevant processing information before the provider receives production identity evidence.

Only information reasonably necessary for the verification should be disclosed to the provider.

A new provider must be assessed for privacy, security, retention, international-processing and contractual requirements and added to the Third-Party Service Providers List where applicable.

A provider result or automated risk signal must not be treated as infallible proof of identity, fraud or ineligibility.

An email OTP, photograph, identity document, payment record or public profile may support verification without independently proving every relevant fact.

6membership may consider several pieces of evidence together.

An ordinary applicant photograph is personal information.

A manual visual review or ordinary display of the photograph does not by itself mean that 6membership has created a biometric template.

The photograph must still receive appropriate privacy and security protection.

Biometric processing may arise where specific technical processing extracts facial geometry, templates, measurements or other characteristics for the purpose of uniquely identifying or authenticating a person.

Such processing may carry additional legal and security obligations.

This Policy does not authorise a hidden facial-recognition database or undisclosed biometric profiling system.

A standard photograph upload must not silently activate unrelated facial recognition, emotion analysis or behavioural classification.

Where biometric identity processing is introduced, the applicant will receive an additional notice describing the technology, provider, purpose, lawful basis, retention, sharing and available rights.

The notice will distinguish required verification from optional processing.

A final denial, suspension or revocation should not be based solely on an unexplained automated facial-match result where applicable law requires meaningful human involvement.

A mismatch may be reviewed together with image quality, document condition, accessibility needs and the applicant’s explanation.

Applicant photographs and identity documents must not be used to train a general artificial-intelligence, facial-recognition or image-generation model merely because they were submitted for membership verification.

A materially different research or model-training use would require a separate legal assessment, transparency and any permission required by applicable law.

Before deploying facial-recognition, biometric-template, automated liveness, large-scale identity-matching or another high-risk identity technology, 6membership must assess necessity, proportionality, data minimisation, security, retention, individual rights, provider access and foreseeable harm.

A Data Privacy Impact Assessment or equivalent assessment will be completed where required by the Nigeria Data Protection Act, the General Application and Implementation Directive or another applicable law.

The assessment must consider whether the same verification purpose can reasonably be achieved with less intrusive information or a less intrusive method.

Where the processing concerns a child or another vulnerable person, the assessment must address the additional risks and safeguards relevant to that person.

6membership may compare names, photographs, email addresses, Membership IDs, household relationships, payment references and device or network indicators to identify possible duplicate applications.

A duplicate indicator does not automatically establish wrongdoing.

Legitimate duplicates may arise from an abandoned application, correction attempt, household relationship or technical failure.

Creating a new identity, altering a photograph, changing minor name details or using another payer to avoid a denial, suspension, predecessor requirement or verification request is prohibited.

Where impersonation is suspected, 6membership may preserve relevant application, photograph, document, payment, communication and technical records while the matter is investigated.

Access to the investigation record should remain restricted.

A person reporting that their photograph, name, document or payment method was used without authority may be asked to verify their own identity.

6membership may restrict the disputed application or card while protecting the reporter’s information from the suspected impersonator.

Credible identity theft, forged documents, stolen payment use or serious fraud may be reported to payment providers, affected persons, regulators or lawful authorities where permitted or required.

Any disclosure should be proportionate to the incident and applicable law.

Verification may be marked as accepted where the evidence reasonably supports the required identity, age, authority or eligibility check.

Acceptance concerns the check performed and does not by itself guarantee membership approval.

The application may be paused where the photograph is unclear, information is inconsistent, a document is incomplete or additional authority evidence is reasonably necessary.

The request should identify the issue and the replacement or explanation required without disclosing confidential fraud controls.

6membership may be unable to verify an applicant where reliable evidence cannot be obtained or material inconsistencies remain unresolved.

An inability to verify may result in delay, cancellation or denial according to the Membership Terms.

Where there is credible evidence of forgery, impersonation, stolen identity or deliberate evasion, the application may be restricted without providing details that would enable circumvention.

Relevant records may be preserved and escalated for security, payment, legal or regulatory review.

A verification concern will not ordinarily be published publicly merely because an application was paused or denied.

Public card status may show that a Membership ID is invalid, restricted or revoked without publishing confidential investigation details.

Where an appeal or correction process is available, the applicant may provide better evidence or explain a material error.

An appeal does not require 6membership to accept evidence that remains unreliable, unlawful or unrelated.

After approval, the verified applicant photograph may be used to generate a digital or physical membership card where the card design includes a photograph.

The image may be cropped, resized, compressed or placed against a standard card background.

These production changes must not intentionally alter the holder’s identity or physical characteristics.

A Family, business or organisation card may identify the approved primary representative, the approved entity or both according to the applicable card design.

A logo must not be substituted for a representative photograph where human identity verification is required.

A limited approved photograph may be displayed in a public verification result only where reasonably necessary to confirm that the presented card relates to the approved holder.

The public image should use an appropriate size and quality rather than exposing the original full-resolution upload.

Identity documents, document numbers and private application photographs must not be displayed publicly merely because a Membership ID is checked.

6membership may request a new photograph where the existing image no longer provides reliable recognition.

A materially changed appearance, long membership duration, card replacement or security concern may justify re-verification.

When a card is replaced, reported stolen, revoked or materially corrected, the previous card version may be invalidated.

A saved image of the previous card does not override the current official status.

Identity materials may be used for application review, identity matching, age or authority confirmation, duplicate detection, payment review, membership-card production, public verification, fraud prevention, security investigations, complaints and legal compliance.

Each use must remain connected to an appropriate legal basis and the relevant policy framework.

Submitting an applicant photograph does not authorise its use in advertisements, public endorsements, social-media campaigns, testimonials, promotional banners or unrelated announcements.

An unrelated promotional use requires separate permission or another legally sufficient basis.

6membership does not intend to sell applicant identity documents or private verification photographs for money.

Identity materials must not be exchanged with advertisers, data brokers or unrelated third parties for commercial profiling.

Private application photographs and documents must not be placed into an unrestricted public gallery.

A limited card or verification display is governed by the approved membership purpose and does not make the original application file public.

Authorised reviewers should not download or retain identity documents on personal devices, personal cloud accounts or informal messaging applications without an approved operational need and appropriate safeguards.

Identity materials may be accessed by authorised application, verification, security, compliance or administrative personnel whose role requires the information.

Access should follow the principle of least privilege.

Private storage, database, hosting and security providers may process identity materials to deliver their assigned services.

The provider should receive only the access and information reasonably necessary for its role.

An approved identity-verification provider may receive photographs, documents or identity fields where the provider is intentionally used for the relevant check.

The provider’s role, location, retention and independent legal responsibilities should be assessed before production use.

Limited identity information may be disclosed to Flutterwave, a participating financial institution, professional adviser, regulator, court or lawful authority where reasonably necessary and legally permitted.

Information shared with Flutterwave should be limited to the payment, payer, transaction, fraud, refund, chargeback or compliance purpose for which it is needed.

A disclosure should be limited to the relevant purpose rather than transmitting the complete application without need.

Where a person credibly reports unauthorised use of their identity, 6membership may disclose limited information necessary to investigate and protect the affected person.

Information that would expose another individual unnecessarily or prejudice an investigation may remain restricted.

Identity documents and original applicant photographs should remain private by default.

Public access must be limited to the specific card or verification fields approved for public display.

Application reviewers, verification administrators, payment reviewers and system administrators should receive only the permissions necessary for their assigned responsibilities.

A person permitted to view a document should not automatically have authority to approve membership, issue a refund, alter status or permanently delete records.

Material access, export, replacement, approval, denial, restriction and deletion actions may be recorded in an administrative audit trail.

Audit logs should identify the authorised actor, action, record, time and relevant reason where appropriate.

Identity materials should be transmitted through encrypted connections and approved interfaces.

Temporary links should expire and should not be publicly indexed.

Storage secrets, privileged database credentials, email-provider secrets, Flutterwave secret credentials, webhook-signature secrets, encryption keys and administrative credentials must remain server-side.

They must not be embedded in a photograph URL, browser bundle, public repository, local storage record, client-visible source code, application log or downloadable asset.

A suspected exposure, unauthorised download, altered document or misuse of identity evidence may be investigated under the security incident process.

Affected persons and regulators will be notified where applicable law requires notification.

Identity materials should be retained only for the period reasonably necessary for application review, membership administration, card production, fraud prevention, complaints, legal obligations and related purposes.

The original identity document may have a shorter active-access period than the core membership or verification record.

For processing governed by the Nigerian framework, where no separate time-bound legal obligation applies after the original purpose has been accomplished, continued storage must be assessed against the storage-limitation requirements of the Nigeria Data Protection Act General Application and Implementation Directive 2025.

Where continued storage beyond an ordinary purpose-completion period is justified by fraud prevention, legal claims, security, membership verification or another lawful purpose, the justification, safeguards and any required Data Privacy Impact Assessment should be documented rather than assuming indefinite retention.

An incomplete application photograph or document may be retained temporarily to allow completion and diagnose technical problems.

Unnecessary draft material may later be deleted or anonymised according to the retention schedule.

A denied or cancelled application may retain limited identity evidence where necessary for refund administration, fraud prevention, appeal handling, repeated-evasion prevention or legal claims.

Full identity documents should be deleted or reduced when the original verification purpose has ended unless a documented continuing purpose, applicable retention requirement, active dispute, investigation or legal hold justifies continued storage.

Continued retention must not become permission for unrelated use.

The approved card photograph and core verification result may remain throughout the active membership and for an appropriate period afterwards where necessary for card production, verification, status history, fraud prevention or disputes.

Full identity documents should be reduced or deleted earlier where the continuing membership purpose can be supported by verified fields, an audit result or a limited derivative instead of the complete source document.

This distinction allows 6membership to preserve necessary membership evidence without retaining a full identity document longer than justified.

When a photograph or document is replaced, the earlier file may be removed from ordinary access.

A restricted historical copy or audit record may remain where necessary to explain a card version, correction, fraud concern or legal decision.

Deletion may be paused where identity evidence is relevant to a complaint, chargeback, impersonation report, security incident, regulatory request, court process or legal claim.

A legal hold should restrict ordinary use while preserving the evidence required for the matter.

Deletion from active storage may not immediately remove every encrypted backup copy.

Backup copies may expire under controlled backup cycles and should remain unavailable for ordinary application review.

An applicant should promptly report an incorrect name, date of birth, photograph, representative or document before the application is decided.

The correction may require re-verification and a new declaration.

A material legal-name change may require reliable supporting evidence.

The current name may be updated while the previous name remains in a restricted historical record where necessary to connect payments, applications, predecessor memberships or legal records.

A member may request a replacement where the original photograph is incorrect, outdated, compromised or no longer sufficiently recognisable.

6membership may also request an updated photograph during renewal, card replacement, security review or significant appearance change.

A corrected name or photograph may require a new card version.

The previous card may be invalidated to prevent continued use of the outdated identity record.

Replacement fees, where applicable, must be disclosed before payment.

A correction process must not be used to transfer a membership to another person, replace the approved holder with an unrelated person or conceal earlier fraud.

A material identity change may require a new application rather than an ordinary correction.

A person may also exercise applicable privacy rights concerning inaccurate identity information.

Historical records may be preserved where they accurately show what was submitted or decided at an earlier time.

A person must not apply using a false identity, synthetic identity, stolen identity, deceased person’s identity or another person’s information without authority.

A person must not forge, edit, manufacture, purchase or alter a document or photograph to misrepresent name, age, appearance, nationality, address, authority, validity or eligibility.

A member must not replace their photograph with another person’s image, lend identity evidence or use a correction request to transfer membership.

An authorised reviewer must not copy, distribute, ridicule, publish, sell, threaten with or privately exploit an applicant’s photograph or document.

A reviewer must not request unauthorised payment or personal favours in exchange for approval.

A person must not interfere with upload controls, submit malicious files, manipulate verification records, bribe a reviewer or use technical methods to bypass identity requirements.

Prohibited conduct may result in application denial, membership restriction, card invalidation, revocation, refund review, payment dispute handling, evidence preservation or lawful reporting.

Any consequence remains subject to applicable law and the relevant policy.

Depending on applicable law, a person may request access to identity information, correction of inaccurate information, deletion, restriction, objection or another available privacy right.

The request may require identity verification before protected information is disclosed or changed.

A deletion request does not automatically require removal of evidence needed for fraud prevention, card invalidation, payment records, legal claims, regulatory duties or protection of another person.

Where complete deletion is unavailable, access or ordinary use may be restricted where appropriate.

A person who believes their identity, photograph, document or payment information was used without authority should report the matter promptly.

The report should identify the disputed application, Membership ID, card or communication where known.

The reporter must not publish another person’s private documents while attempting to prove the complaint.

Application photograph, document and verification enquiries should be sent to applications@6membership.com.

The message should include the Application Reference and a concise explanation without attaching unnecessary identity documents in the first email.

Approved-member photograph, name, stolen-card and reissuance matters may be sent to admin@6membership.com.

The member should include the Membership ID and sufficient information to identify the requested correction.

A person may use the applicable complaint or appeal process where they believe identity evidence was mishandled or a verification decision was materially incorrect.

Where the Nigerian data-protection framework applies, the person retains the right to lodge an applicable complaint with the Nigeria Data Protection Commission.

Nothing in the internal process removes a mandatory right to contact a privacy regulator, consumer authority, court or lawful authority.