Privacy Policy

1. Information We Collect

We only collect information necessary to provide safe, reliable gift card trading and automated payout services:

• Account Identifiers: Full legal name, email address, mobile phone number, date of birth, and gender provided during registration.
• Identity Verification Data (KYC): Bank Verification Number (BVN) resolution for Nigerian payouts, government-issued identification cards, and proof of address where mandated by financial regulations.
• Transaction & Gift Card Data: Details of gift cards submitted for exchange (card brand, denomination, card numbers, redemption codes, card images, and purchase receipts), transaction timestamps, payout settlement requests, and order statuses.
• Banking & Settlement Information: Bank account numbers, account holder names, bank names, and Mobile Money numbers used strictly for processing your payouts. We never store credit/debit card CVV codes or online banking passwords.
• Device & Technical Information: IP address, mobile device identifiers (device model, operating system version), unique application installation identifiers, app logs, and diagnostic crash data to prevent fraud.

2. How We Use Your Information

OgaCard uses your information strictly for legitimate business and regulatory purposes, including:

• Verifying your identity and safeguarding your account against unauthorized logins and identity theft.
• Processing gift card submissions, validating redemption codes, crediting your multi-currency wallet, and executing bank payouts.
• Preventing fraudulent activities, duplicate redemptions, money laundering, and unauthorized access.
• Sending critical transaction updates, trade receipts, rate change alerts, and customer support communications.
• Complying with applicable laws, including Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) regulations.

3. Security & Biometric Data

We treat your security with bank-grade defenses:

• Local Biometric Authentication: Biometric login (Fingerprint and Face ID) is processed entirely locally on your device via hardware secure enclaves (Apple Secure Enclave / Android KeyStore). OgaCard never transmits or stores raw biometric templates on external servers.
• Transport & Storage Encryption: All communications between your mobile device and our backend servers are secured with TLS 1.3 encryption. Sensitive records are encrypted at rest using industry-standard AES-256 encryption.
• Transaction PIN: Sensitive transactions and withdrawal requests require a secret 4-digit security PIN known only to you.

4. Information Sharing & Third Parties

We do not sell, rent, or trade your personal information to advertisers or unaffiliated third parties. We only share information with third parties in the following limited circumstances:

• Licensed Payment Settlement Switches: Regulated commercial banks and licensed payment aggregators solely to route and credit your bank accounts or Mobile Money wallets.
• Identity Verification Providers: Regulated identity verification partners to validate KYC documents as legally required.
• Legal & Regulatory Authorities: If required by court subpoena, applicable law, or regulatory directives from governmental authorities.

5. Data Retention & Account Deletion Rights

You have full ownership of your data and the following rights:

• Access and Rectification: You can view and update your profile details directly in the OgaCard mobile app.
• Account Deletion: You have the absolute right to request the permanent deletion of your account and associated personal data at any time. You can initiate this directly within the mobile application under Settings → Security & Privacy → Delete Account, or by emailing support@ogacard.net.
• Data Retention: Upon account closure, data that is not subject to statutory financial recordkeeping obligations will be permanently purged from active systems.

6. Children's Privacy

OgaCard services are strictly intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from individuals under the age of 18.

7. Contact Our Data Protection Team

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us: