Privacy Policy & Terms of Service

1. Scope and Regulatory Jurisdiction

This Privacy Policy applies to all services provided by CardJoya Financial Technologies across the Federal Republic of Nigeria and the Republic of Ghana. Our data practices comply with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act 2023, and the Data Protection Act of Ghana (Act 843).

2. Information We Collect

When using our website, mobile application, or WhatsApp support desk, we may collect the following information:

• Contact Information: Phone number (WhatsApp), full name, email address.
• Payout Credentials: Bank name, account number, or mobile money wallet details (e.g., MTN MoMo, Vodafone Cash) solely to disburse funds.
• Transaction Data: Gift card images, card serial numbers, denominations, redemption receipts, and timestamped transaction IDs.
• Technical Data: IP address, device identifier, browser type, and cookies used to secure your session.

3. How Your Information is Used

We process your data strictly for legitimate operational purposes:

• Validating gift card balances and confirming card ownership.
• Executing automated cash payouts directly to your designated bank account or mobile wallet.
• Providing real-time transaction receipts and customer service updates.
• Preventing financial fraud, chargebacks, and illegal gift card laundering under applicable AML/CFT standards.

4. Anti-Money Laundering (AML) & Fraud Policy

CardJoya enforces a zero-tolerance policy against cards acquired through illicit means, unauthorized store breaches, or fraudulent chargebacks. We cooperate fully with statutory financial intelligence agencies (including NFIU in Nigeria and FIC in Ghana). Any suspected fraudulent submission may result in transaction freezing and notification to authorities.

5. Gift Card Verification Terms

When you submit a card for redemption, you represent and warrant that you are the lawful holder of the card and that the card is valid and unused. Due to the irreversible nature of digital codes, once cash is disbursed to your account, the transaction is final and irrevocable.

6. Data Retention and Security Protocols

We implement industry-leading technical measures, including end-to-end 256-bit SSL encryption for data in transit and AES-256 encryption for sensitive records at rest. Card images and PIN information are permanently sanitized from active cache memory after verification is finalized.

7. User Rights

In accordance with NDPR and Act 843, you have the right to request access to your personal transaction history, request correction of inaccurate bank credentials, or request account closure. To exercise your data rights, contact our Data Protection Officer at privacy@cardjoya.com.