1. Introduction
GiftCash NG ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website giftcashng.com and services.
By creating an account or using our services, you consent to the practices described in this policy.
2. Information We Collect
We collect the following types of information:
- Account information: Name, email address, phone number, country of residence, password (hashed).
- Transaction information: Gift card details (card number, PIN, images), payout method details (bank account, mobile money number, crypto wallet address), order history, wallet balance.
- Device and usage information: IP address, browser type, device information, pages visited, session data.
- Communication records: Emails and messages sent to our support team.
3. How We Use Your Information
We use your information to:
- Process your gift card sales and digital asset exchanges.
- Verify your identity and prevent fraud.
- Process payouts to your chosen payment method.
- Communicate with you about orders, updates, and promotions.
- Comply with legal obligations under Nigerian NDPA, Ghana DPA, Kenya DPA, and other applicable data protection laws.
- Improve our services and user experience.
4. Legal Basis for Processing
We process your personal data based on:
- Your consent when you create an account and submit orders.
- Contractual necessity to fulfill our obligations to you (processing orders and payouts).
- Legal obligations (AML/KYC compliance, tax records, fraud prevention).
- Our legitimate interests in operating and securing our business.
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- Payment processors: Banks, mobile money operators, and cryptocurrency networks to process your payouts.
- Service providers: Email delivery, hosting, and analytics providers under strict data protection agreements.
- Law enforcement: When required by law, court order, or to prevent fraud and illegal activities.
- Card issuers: To verify the validity and balance of gift cards you submit.
We never share your gift card details or personal information for marketing purposes with third parties.
6. Data Security
We implement industry-standard security measures to protect your data:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- Passwords are stored using bcrypt hashing (never in plain text).
- Uploaded card images are stored in restricted-access directories with authentication checks.
- CSRF protection and Web Application Firewall (WAF) to prevent attacks.
- Rate limiting to prevent brute force attacks.
- Regular security reviews and updates.
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal data as follows:
- Active accounts: While your account is active and for 7 years after your last transaction (for AML compliance).
- Transaction records: 7 years after the transaction date (regulatory requirement).
- Card images: Deleted automatically 90 days after the order is completed, unless required for dispute resolution.
- Inactive accounts: Accounts inactive for 3+ years may be anonymized.
8. Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal retention requirements).
- Restriction: Limit how we process your data.
- Data portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Withdraw consent at any time (this will not affect processing already carried out).
To exercise these rights, contact us at support@giftcashng.com.
9. Cookies
We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some features may not work properly.
10. International Data Transfers
Your data may be processed on servers located outside your country of residence. By using our services, you consent to such transfers. We ensure that any international transfer complies with applicable data protection laws.
11. Children's Privacy
Our services are not available to individuals under 18 years old. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact:
