The ManyChat-vs-alt call in Nigeria sits on NDPA 2023, NDPC registration, BVN KYC and the Paystack/OPay/Moniepoint stack.
1. NDPA 2023 + NDPC. The Nigeria Data Protection Act 2023 was signed on 12 June 2023, superseding the earlier NDPR 2019 (which remains cited in transitional guidance) and creating the Nigeria Data Protection Commission (NDPC) as the statutory regulator. Key obligations: (a) principles of processing (S.24) — lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, accountability; (b) grounds for processing (S.25) — consent, contract, legal obligation, vital interests, public interest, legitimate interests; (c) special category data (S.30) — explicit consent or other conditions; (d) data subject rights (S.34-38) — access, rectification, erasure, portability, objection, response within 1 month; (e) data controllers of major importance (DCMI) registration with NDPC (S.44) — thresholds published by NDPC based on volume and sensitivity; (f) DPO designation (S.32); (g) breach notification within 72 hours of awareness to NDPC (S.40); (h) cross-border transfer restrictions (S.41-43) — adequacy decision, standard contractual clauses, or consent + safeguards; (i) sanctions (S.48) — administrative fines up to N10M or 2% of annual gross revenue (whichever is higher) for major violations.
2. CBN + payment ecosystem. The Central Bank of Nigeria regulates all payment activity under the CBN Act 2007, the Banks and Other Financial Institutions Act (BOFIA) 2020, and the Payment Systems Vision (PSV 2025 rolling forward). CBN licenses categories of PSPs — Super Agent, Mobile Money Operator (MMO), Payment Solution Service Provider (PSSP), Payment Terminal Service Provider (PTSP), Payment Solution Service (PSS) — with distinct capital requirements. NIBSS operates the underlying NIP rail (real-time interbank transfer, dominant retail payment mechanism, tens of billions of transactions annually). eNaira (October 2021 launch) is CBN's CBDC. Bank Verification Number (BVN) is mandatory for all bank accounts; National Identification Number (NIN) is mandatory and increasingly linked to BVN.
3. NCC + SIM/BVN/NIN. The Nigerian Communications Commission regulates telecoms and imposed SIM re-registration linked to NIN starting 2020, tightened multiple times through 2024. Marketing SMS/WhatsApp broadcast is regulated under the NCC Consumer Code of Practice.
4. FIRS + VAT + eInvoice. Federal Inland Revenue Service. VAT 7.5% (raised from 5% in 2020). Companies Income Tax (30% large, 20% medium under the SME framework). FIRS eInvoice programme rolling out under a phased schedule beginning with large taxpayers — verify current FIRS circulars for the tier your SME falls in. Personal Income Tax administered by State Boards of Internal Revenue (LIRS in Lagos, etc.).
5. FCCPC + consumer rights. Federal Competition and Consumer Protection Commission under FCCPA 2018 — consumer rights on product quality, deceptive marketing, unsolicited contact. Cold WhatsApp broadcast without consent risks FCCPC and NDPC action simultaneously.
Data Controller of Major Importance (DCMI, S.44). The NDPC publishes thresholds and criteria for who qualifies as a DCMI — typically based on volume of data subjects processed and sensitivity of processing (financial services, health, telecoms, large ecommerce are frequently caught). DCMIs must register with NDPC via the NDPC portal (ndpc.gov.ng), pay the applicable registration fee, and file annual compliance audits.
DPO (Data Protection Officer, S.32). Required for public bodies, DCMIs, and controllers with core activities involving regular systematic monitoring or large-scale processing of sensitive data. May be an employee or external consultant. NDPC maintains a register of licensed Data Protection Compliance Organisations (DPCOs) that can serve as external DPOs.
Breach notification (S.40). Within 72 hours of awareness to NDPC — describing nature, categories of data subjects and records affected, likely consequences, and measures taken. If high risk to data subjects, notify them without undue delay.
Cross-border transfer (S.41-43). Permitted where: (a) the recipient country has an adequate level of protection as determined by NDPC; (b) appropriate safeguards are in place — standard contractual clauses, binding corporate rules, certification; (c) explicit consent of the data subject; (d) necessary for contract, public interest, legal claims. For a SaaS panel hosted outside Nigeria (Wati in Hong Kong, ManyChat in US, Kommo in US, Sleekflow in Singapore, BossBot international), the SME needs SCCs in the DPA and consent language in the customer intake.
Sanctions (S.48). Administrative fines up to ₦10 million or 2% of annual gross revenue in the preceding financial year, whichever is higher, for a data controller of major importance; lower tiers for others. Criminal sanctions for wilful violations (S.49). NDPC has issued compliance directives and public sanctions notices since operational stand-up.
Data Protection Compliance Organisations (DPCO). NDPC licenses DPCOs — independent firms that can audit and file compliance returns on behalf of controllers. A SME preparing for its first NDPC audit typically engages a DPCO (accounting firms with data privacy practice, specialist consultancies).
Nigeria's payment landscape is one of the most active fintech ecosystems in Africa. Key players a WhatsApp panel must integrate cleanly with:
Paystack. Nigerian, founded 2015, acquired by Stripe 2020 in a landmark African fintech exit. Card, bank transfer, USSD, QR, mobile money aggregation. Standard fee ~1.5% + fixed for Nigerian cards (verify current tariff), capped at ₦2,000 for local cards.
Flutterwave. Nigerian-headquartered, founded 2016, unicorn 2021 (~US$3B valuation at peak). Payment gateway, virtual cards, cross-border, PSSP + PSS licensed. Fee similar to Paystack.
OPay. Chinese-owned, Nigerian-operated, valuation past US$2B by mid-2020s. Started as ride-hailing / super-app; now dominant mobile-money / agent-banking with millions of wallets. Merchant Pay via short-code + POS.
Moniepoint. Agency banking pioneer + business banking. Unicorn valuation reached in 2024 rounds. Millions of merchant customers using Moniepoint POS terminals.
PalmPay. Africa-focused fintech, HQ Lagos, growing wallet count.
Kuda. UK-registered, Nigeria-operated challenger bank, microfinance bank licence upgraded to CBN commercial-adjacent over time. Millions of customers.
FairMoney, Carbon, Renmoney. Digital lenders / mobile-first banks.
Wema Bank ALAT. Digital banking arm of Wema Bank.
GTBank Habari, Access Bank, First Bank, Zenith Bank, UBA. Tier-1 traditional banks with digital channels.
NIBSS. Nigeria Inter-Bank Settlement System. Operates NIP (NIBSS Instant Payment) — the dominant retail payment rail; NAPS (NIBSS Automated Payment Services); the NIP QR code standard.
eNaira. CBN's CBDC launched October 2021. Adoption has been slower than headline projections; useful for specific use cases.
WhatsApp Pay is not launched in Nigeria as of the current window. In-chat payment routes through a WhatsApp-delivered payment link to Paystack/Flutterwave/OPay Merchant / Moniepoint checkout / NIP transfer with account number and BVN validation.
The mix that actually converts in Nigeria:
WhatsApp Business. Overwhelmingly dominant channel for customer communication across sectors. Almost every Lagos SME, Abuja retail, Onitsha wholesale trader has a WhatsApp Business number. Meta pricing categorical (marketing / utility / authentication / service) — verify current Nigeria rates.
Instagram DM. Very strong for fashion (Lagos fashion scene), beauty, food, cosmetics, event services. Instagram Shopping adoption growing.
Phone calls. Culturally central. A customer who moves from WhatsApp to a call is signalling strong intent. Panels that cleanly hand off to call (via a click-to-call button, via Africa's Talking IVR, via a callback flow) capture this conversion moment.
SMS. OTP + banking notifications + NIP transfer alerts + merchant reminders. Bulk SMS via Termii, Bulk SMS Nigeria, SmartSMS, Multitexter, Africa's Talking.
Facebook Messenger. Discovery via Marketplace and buy-and-sell groups; less used for direct commerce than IG DM.
USSD. Still critical for older customers, non-smartphone users, and payment shortcodes (966# GTBank, 894# First Bank, *901# Access, MoMo shortcodes). A WhatsApp flow that ignores USSD fallback loses a segment.
Absent from the stack. LINE, WeChat, Viber near-zero in Nigeria. Telegram present in tech circles and some crypto communities. A panel selling 12 channels of which 8 are unused in Nigeria is over-priced.
Marketplaces. Jumia Nigeria (part of Jumia Technologies AG, NYSE-listed) is the largest e-commerce marketplace; Konga (bought back by Zinox 2018) continues; Jiji for classifieds. Small vendors on Jumia/Konga can add WhatsApp post-order communication.
Instagram-first Lagos fashion / beauty / food SME:
ManyChat may still fit — its IG DM + Messenger flow-builder is genuinely strong. Add a WhatsApp handoff via BSP-connected panel for the substantive commerce conversation. Paystack / Flutterwave payment link on the WhatsApp side. FIRS invoice generated from accounting (Zoho Books Africa, QuickBooks, Sage Business Cloud, ERP).
WhatsApp-dominant SME across retail / clinic / services / professional:
WhatsApp-first panel. Wati (Hong Kong, wide adoption in Nigeria), BossBot, Sleekflow (SG/HK), Kommo (US), Sendbee, Interakt — each with DPA + NDPA cross-border clause. Local Nigerian integrators (Termii, Sendchamp, Chatize, MyBusiness360, JooMag Nigeria) can bundle WhatsApp + SMS + email + payment in a single stack tuned to Nigerian workflows.
Large marketplace seller (Jumia Nigeria, Konga, Jiji):
Panel + Marketplace API integration (Jumia Seller Center / Konga Seller API) + Paystack + Flutterwave. Post-sale customer-communication moves to WhatsApp after the marketplace-mediated purchase.
Fintech / regulated / bank / large corporate:
Direct Meta BSP relationship + Nigerian systems integrator (Verto, Interswitch, Systemspecs, Callphony, Signal Alliance, Softcom, Craftsilicon Nigeria, Cellulant Nigeria). NDPC full compliance stack (DPO + audit + DCMI registration). Panel with audit trail, matter/product segregation, and export capability for regulatory response.
BossBot positions on segments 2-3: NDPA-DPA ready, Paystack/Flutterwave/OPay Merchant payment link, English + Pidgin English + Yoruba/Igbo/Hausa template support for the regional flavours, pricing calibrated to Nigerian SME margins (not benchmarked to US SaaS SMEs where the AOV is 3-5× higher).
Panels to avoid in Nigeria. Anything without a Paystack / Flutterwave connector; anything requiring USD-only billing with no Naira invoicing option (FX volatility makes budgeting nightmarish); anything selling 'WhatsApp Pay Nigeria' (does not exist).
(1) SaaS subscription. ManyChat Pro US$15/month base scaling with contacts; Wati Growth US$49-99; Kommo Advanced US$29-49/user; Interakt from ~US$30; BossBot Starter US$49; local Nigerian integrators typically ₦25,000-100,000/month.
(2) Meta WhatsApp Business Platform conversation charges. Categorical (marketing / utility / auth / service) — verify current Nigeria rates via Meta pricing reference. Rates have revised several times.
(3) BSP number. US$15-40/month typical; some panels bundle.
(4) Payment gateway. Paystack ~1.5% + fixed capped at ₦2,000 for local cards; Flutterwave similar; OPay Merchant / Moniepoint / PalmPay Merchant per current tariff.
(5) SMS + USSD fallback. Termii / SmartSMS / Multitexter per-message cost; USSD short-code lease and per-session fee.
(6) NDPC compliance + accounting. DCMI registration fee (if applicable), DPO retainer (external DPCO ₦100,000-500,000/month depending on scope), accounting software + accountant for FIRS VAT + PAYE + Companies Income Tax + Personal Income Tax to State IRS.
(7) FX exposure. Naira has been highly volatile 2023-2025 under CBN reform. USD subscriptions materially larger in Naira terms year-on-year — budget with FX buffer or prefer Naira-billing vendors.
(a) No NDPC registration or engagement. The data controller is the SME. NDPC has been actively issuing directives and sanctions notices post-NDPA 2023 stand-up. 'We used a foreign SaaS' does not shift responsibility.
(b) Buying a contact list and blasting WhatsApp marketing. NDPA S.25 requires a lawful basis (consent for marketing); FCCPC action possible on top; and Meta will down-rate the sender quickly.
(c) Charging via a personal bank account and skipping FIRS. Common shortcut for micro-SMEs; catastrophic if revenue crosses VAT / CIT thresholds and the FIRS audits.
(d) USD subscription without FX planning. Given Naira volatility, a fixed US$99/month vendor contract in month one becomes materially higher in Naira in month twelve. Budget with FX buffer or prefer Naira-billed vendors.
(e) Assuming WhatsApp Pay is imminent for Nigeria. No Meta announcement. All in-chat payment claims resolve to Paystack / Flutterwave / OPay Merchant / Moniepoint / GhanaPay-adjacent Nigerian rails — a link that leaves the chat, not a native flow.
Platform migration for a Nigerian SME running on WhatsApp Business API is not a software swap — it is an operational transition that must protect existing client-conversation continuity, template-approval status, and Meta Business Verification standing. The 4-phase migration playbook Nigerian SMEs use:
Phase 1: Pre-migration audit (weeks 1-2):
- Inventory current-state — active WhatsApp Business Phone Numbers, approved template categories (with utility vs marketing categorisation), integration points (Paystack / Flutterwave / Moniepoint / CRM / booking platform), staff roles and access, current opted-in contact list with consent-record.
- Contract review — outgoing platform's cancellation notice period (typically 30 days), data-export capability, historical-message retention obligations under NDPA 2023.
- Cost model — projected pass-through cost + subscription tier on new platform vs current baseline; break-even calculation for switching costs.
Phase 2: New-platform setup (weeks 3-4):
- Meta Business Account may need reconfiguration if switching BSP — some BSPs manage under their umbrella account, others require dedicated tenant.
- Template resubmission — templates must be re-approved on the new BSP's Meta relationship; parallel approval submission can start while old platform still running.
- Payment-integration test — Paystack / Flutterwave webhook re-configuration and end-to-end payment test flow.
- NDPA opt-in / consent migration — historical opted-in contacts require fresh opt-in confirmation on the new platform to maintain lawful basis; broadcast opt-in-refresh message before migration cut-over.
Phase 3: Parallel-run window (weeks 5-6):
- Both platforms live with 20-40% of new traffic routed through new platform for real-world validation.
- Monitoring — template hit-rate, response time, payment webhook success, staff comfort with new interface.
- Issue log — every friction point captured for pre-cut-over resolution.
Phase 4: Cut-over + old-platform sunset (weeks 7-8):
- Full traffic routed to new platform; old platform in read-only mode for historical-reference access.
- Client-communication broadcast — subtle 'we've updated our WhatsApp system' message where any visible change might confuse regular clients.
- Old-platform contract cancellation at end of notice period.
- Historical-message archive — retention per NDPA + regulatory-sector requirement (typically 6 years for financial / legal / medical; 3-5 years for general commercial).
Common Nigerian-migration failure modes:
- Template rejection on new platform — Meta re-review can flag templates that passed on old platform; keep old platform running until new templates confirmed approved.
- FX-volatility pass-through — USD-billed BSP subscription becomes punitive if migration happens during NGN weakness; consider NGN-native BSP or lock-in annual pricing where offered.
- NDPA consent-refresh incomplete — sending broadcast to historical contacts who don't re-confirm opt-in creates compliance exposure; the 'silent-consent' assumption doesn't survive NDPC scrutiny.
- Staff training gap — new-platform interface differences create workflow disruption if training is compressed; budget realistic 2-week ramp-up for the full team.
USD-billed international BSPs remain the dominant Nigerian WhatsApp Business API stack, but a growing Nigerian-local BSP layer offers NGN-native billing and in-country support that insulates against FX volatility and time-zone gap:
Nigerian-local BSP options:
- Prembly — Nigerian-built identity + compliance + messaging stack; NGN-native billing; integrates with local KYC and payment rails; growing WhatsApp Business API capability.
- KwikChat — Nigerian-focused messaging platform with WhatsApp Business API reseller relationship; NGN pricing; local support.
- Terragon — Nigerian marketing-tech company with WhatsApp channel offering for enterprise segment.
- BusyBot / Nigerian-based agencies — smaller Nigerian tech-agency BSPs reselling under WATI or Meta partnership, with NGN billing and Naija-time-zone support.
When Nigerian-local BSP fits:
- NGN cost predictability — insulates against FX pass-through on monthly subscription line.
- Africa-time-zone support — response times and account-management during West Africa Time business hours rather than US / EU dominant timing.
- Local payment integration — deeper native integration with Paystack, Moniepoint, Interswitch, and local-Nigerian merchant stack.
- NDPA compliance framing — Nigerian-built platform typically has NDPA compliance built into the product stack from day one, without the retrofit that some international BSPs manage.
When international BSPs still win:
- Feature depth — WATI, respond.io, AiSensy have more mature product capability (shared inbox depth, conversation-routing sophistication, CRM integration breadth).
- Enterprise multi-country deployment — Nigerian operations that span Nigeria + Ghana + Kenya + Egypt benefit from single-vendor pan-African / global coverage.
- Meta relationship maturity — the largest international BSPs have longer-established Meta partnerships that can smooth template-approval and account-verification friction.
Hybrid stack approach:
- Some Nigerian SMEs run international BSP for the primary WhatsApp API + Nigerian-local BSP for specific NGN-native feature (Paystack deep-integration, local KYC verification, Africa-time-zone support tier).
- Multi-BSP requires clear discipline on which conversations route through which BSP; usually resolved by phone-number segmentation (customer-service vs sales vs operations on different WhatsApp numbers each routed through appropriate BSP).
Selection discipline questions Nigerian SMEs should ask:
- What is the total annual cost in NGN including FX-volatility risk vs NGN-native pricing?
- What is the support-response SLA in Africa business hours vs US / EU hours?
- What is the Meta template-approval turnaround via this BSP historically?
- What NDPA-compliance documentation does the BSP provide (DPA + breach-notification workflow + audit-report support)?
- What is the contract cancellation notice period and data-portability provision?
ManyChat's historical strength is multi-channel automation across Instagram DM, Facebook Messenger, WhatsApp, and SMS. For Nigerian SMEs choosing between ManyChat and Nigerian / WhatsApp-first alternatives, the multi-channel question shapes the platform decision:
Where multi-channel matters for Nigerian SMEs:
- Fashion + beauty + wellness verticals — Instagram is the discovery channel; DM conversation converts to booking; WhatsApp continues the relationship post-first-visit. Multi-channel stack keeps the conversation coherent across surfaces.
- Restaurant + hospitality — Instagram / Facebook menu discovery + WhatsApp direct order + Google reviews across the same customer touchpoints.
- E-commerce fashion + accessories — Instagram / TikTok / Facebook shop discovery + WhatsApp customer service + order-tracking; multi-channel platform reduces switching cost.
Where WhatsApp-only stack wins for Nigerian SMEs:
- Compliance-heavy verticals (health / financial / legal) — the NDPA 2023 and sector-regulator compliance load is easier to manage on a single-channel WhatsApp stack than multi-channel.
- B2B / corporate-services — WhatsApp is the operational channel; Instagram is not part of the customer-service flow.
- High-volume repeat-order businesses — WhatsApp automation depth on repeat-order + payment + delivery coordination is where WhatsApp-first BSPs like WATI / respond.io / AiSensy specialise.
Nigerian channel-adoption pattern (2026 reference):
- WhatsApp dominant for direct-order + booking + customer-service across most commerce verticals.
- Instagram second for fashion + beauty + wellness + restaurant + hospitality discovery; DM handoff to WhatsApp is the norm.
- Facebook Messenger legacy strength for older-demographic customers + Facebook Marketplace direct-message.
- TikTok rapidly growing for younger-demographic discovery; direct-message capability less mature than Instagram.
- SMS + voice calls remain critical for security-adjacent, one-time-code, and older-demographic customer segments; Nigerian NCC A2P SMS pricing rules apply.
Multi-channel-platform selection criteria for Nigerian SMEs:
- True channel-parity — does the platform actually handle all channels natively, or is one dominant with weak support for others?
- NDPA + NCC compliance across channels — data-processing, consent, and DND-directive compliance must extend across all channels the platform touches.
- Meta-platform API relationship — for Instagram + WhatsApp + Facebook, the platform's Meta partnership status matters for template approval and API reliability.
- Nigerian-payment integration across channels — Paystack / Flutterwave payment link workflow works well in WhatsApp; less common in Instagram DM native flow.
- Cost of multi-channel — per-message pricing varies by channel; multi-channel usage can compound cost above single-channel WhatsApp-heavy stack.
Data + numbers referenced in this article are sourced from these public documents:
WhatsApp + Telegram + Viber, NDPA-ready DPA + Paystack/Flutterwave integration. 7-day trial, no card.
Start FreeNot ready to sign up yet? Try the free demo →