Is BushBucks Legal? What is my risk?

Membership-based loyalty programmes in South Africa (e.g., paid-membership clubs like the Gravel Club, offering points, discounts, exclusive deals, or rewards tied to purchases or ongoing fees) are primarily governed by the Consumer Protection Act 68 of 2008 (CPA), with no dedicated licensing regime. They are treated as ordinary commercial arrangements subject to consumer-protection rules, rather than regulated financial products or schemes requiring prior approval from authorities like the Financial Sector Conduct Authority (FSCA), National Consumer Commission (NCC), or others.

Core Definitions under the CPA

  • Loyalty programme: Any arrangement or scheme in the ordinary course of business in which a supplier (or association of suppliers, or third party on their behalf) offers or grants a consumer any loyalty credit or award connected to a transaction or agreement.
  • Loyalty credit or award: Includes any benefit, right to goods/services/benefit, or point/credit/token/device (tangible or intangible) that accumulates to entitle the holder to claim goods, services, or benefits—regardless of how it is labelled.

Membership fees are explicitly accommodated (e.g., no prohibition on charging them, and certain admin-fee bans apply only in non-membership contexts). The programme can be points-based, tiered (e.g., Rookie to Legend levels), or benefit-driven, as long as rewards tie to the core supply of goods/services rather than recruitment.

Loyalty credits/awards function as a legal medium of exchange (equivalent to cash) when tendered for goods/services within the programme. Suppliers cannot refuse valid redemption if they have capacity.

Key Legal Obligations and Prohibitions (CPA Section 35)

Section 35 sets strict consumer protections. Suppliers/sponsors must:

  • Clearly disclose in all offer documents/promotions: nature of the programme/credit/award; related goods/services; steps for participation or benefits; and contact details for access.
  • Maintain sufficient supply of rewards to meet reasonably anticipated demand.
  • Accept loyalty credits as full or partial consideration (no refusal if capacity exists).
  • Not require consumers to: buy additional goods/services, pay extra fees/surcharges (beyond the membership fee itself), or perform extra actions to redeem.
  • Not supply inferior-quality goods/services compared to what cash-paying customers receive on the same day.
  • Not impose admin/processing/handling charges on redemptions (the exception for membership-fee programmes is narrow and does not allow blanket extras).

Restrictions on availability (e.g., blackout periods) are allowed but limited to a maximum of 90 days per calendar year in total, with at least 20 business days’ written notice to members beforehand.

Prohibited conduct (applies to new and pre-existing programmes for post-commencement offers, redemptions, and supplies):

  • Offering participation or credits with no intention of providing them, or not as described.
  • Any misleading, deceptive, or fraudulent marketing tied to the programme (cross-references general marketing rules in CPA Chapters 4 and 5).

Section 34 (trade coupons) expressly does not apply to loyalty programmes.

Licensing and Registration Requirements

There is no licensing, registration, or prior approval required specifically for operating a membership-based loyalty programme under the CPA, FSCA, FAIS Act, National Payment System, or any other general statute. Extensive searches of official sources, FSCA materials, and legal commentary confirm zero references to loyalty/rewards/membership schemes needing an FSP licence, e-money authorisation, or NCC registration.

  • General business compliance still applies: register a company/close corporation/trust via CIPC; register a business name if trading under a name other than the legal entity’s (under CPA s80–81 and Companies Act).
  • If the programme processes personal information (membership details, points balances, purchase history), comply with the Protection of Personal Information Act 4 of 2013 (POPIA). Loyalty account numbers qualify as personal information; you must appoint an information officer (automatic for some entities), obtain lawful processing grounds (usually consent or legitimate interest), ensure security, and allow data-subject rights (access, correction, deletion). No separate “registration” with the Information Regulator is currently mandatory, but voluntary notification exists and breaches attract significant administrative fines or civil claims.
  • Sector-specific rules may apply indirectly (e.g., a bank’s rewards programme must also comply with banking conduct standards; gambling-like elements with chance-based jackpots could trigger National Gambling Board licensing—but standard purchase-tied loyalty does not).
  • If points become freely transferable outside the programme or redeemable for cash in a way that mimics e-money, National Payment System rules could theoretically apply, but this is rare and not the case for typical closed-loop membership loyalty schemes.

Criminal Offences and Penalties

Running a compliant membership loyalty programme is not criminal. Criminal exposure arises only if the programme crosses into prohibited territory:

  1. Pyramid and related schemes (CPA s43 / equivalent provisions) It is an offence to promote or knowingly participate (directly or indirectly) in:
    • Pyramid schemes (compensation primarily from recruiting new participants rather than genuine sales of goods/services).
    • Chain-letter schemes.
    • Multiplication schemes (unrealistic interest).
    • Any other fraudulent schemes/scams. Key risk for membership programmes: Heavy emphasis on referral bonuses, recruitment commissions, or “membership value” derived mainly from signing up others (rather than from the operator’s actual supply of discounted goods/services) can recharacterise it as a pyramid. Standard purchase-based points + membership fee = safe; MLM-style “earn by recruiting members” = high risk.
  2. Fraudulent or misleading offers (CPA s35(1), s42, general fraud provisions) Offering credits/participation with no genuine intention to honour them, or systematically failing to supply as advertised, constitutes prohibited conduct and can be an offence.
  3. General CPA offences (ss 110–111)
    • Contravention of prohibited conduct (including loyalty rules or pyramid bans) → criminal offence.
    • Penalties: fine or imprisonment up to 12 months (most cases); up to 10 years for certain aggravated breaches (e.g., related to compliance notices under s107).
    • Administrative fines (National Consumer Tribunal): up to the greater of 10% of annual turnover or R1 million, considering factors like duration, profit gained, prior contraventions, etc. (s112).
    • Vicarious liability for directors/employees possible (s113).
  4. Other potential criminal exposure
    • Common-law fraud or theft (if funds collected for membership are misappropriated).
    • Money-laundering offences under the Financial Intelligence Centre Act if the operator becomes an “accountable institution” and fails to report suspicious transactions (unlikely for a pure loyalty operator).
    • POPIA criminal sanctions (rare): wilful interference with investigations or certain reckless disclosures can attract fines/imprisonment, but most breaches are administrative/civil.

Enforcement occurs via the NCC (complaints, investigations, compliance notices), National Consumer Tribunal (fines, orders), provincial consumer courts, or ordinary courts (civil claims for damages, refunds, or contract rescission). Consumers have strong redress rights (e.g., force redemption, claim damages for non-supply).

Other Important Legal Aspects

  • Contract law & unfair terms: Membership agreements must be in plain language (CPA s22), fair/reasonable (ss 48–52), and cannot waive CPA rights. Fixed-term memberships are capped at 24 months (with renewal rules).
  • Tax/VAT: Points issuance and redemption have specific SARS treatments (e.g., no output VAT on points at issuance in many structures; input tax apportionment issues). Constitutional Court precedent (Clicks case) affects section 24C allowances for future redemption liabilities. Not licensing-related but affects structuring.
  • Advertising & promotions: Must comply with general CPA marketing rules (no bait, no negative option, clear disclosures).
  • International operators: Must still comply if targeting South African consumers; data transfers under POPIA may require safeguards.

In summary, no licence is needed, but rigorous adherence to CPA s35 is mandatory. The main criminal pitfalls are operating (or being perceived as) a pyramid scheme or a fraudulent scheme with no intent to deliver promised benefits. Compliant programmes operate freely and are common in retail, banking, travel, and other sectors in South Africa.

For tailored advice consult a South African attorney specialising in consumer law or retail regulation, as outcomes are highly fact-specific. Official CPA text and NCC guidance remain the authoritative sources.