Privacy Policy
Cardwin Technologies Limited, 177, Bode Thomas Street, Lagos, is responsible for your personal information. We collect only what we need to verify your cards, pay you safely and keep Cardwin secure. This page explains what that is and what you can do about it.
Effective 1 October 2026. Questions about this page? Contact support.
What we collect
- Account details: your name, username, email address, phone number, country and preferred currency.
- Sale details: the gift card type, category, value, card codes and PINs, photos of cards and receipts, and messages you send us about a sale.
- Payout details: bank, mobile money or USDT wallet details you add when you withdraw.
- Wallet history: credits, withdrawals, rewards and adjustments.
- Device and security data: IP address, browser and device type, and sign-in activity, used to detect fraud and protect your account.
- Referrals: if someone referred you, we record that link so the reward can be paid.
How we use it
- To run your account, verify cards and pay your wallet.
- To process withdrawals and send you notices about your transactions, such as status changes and requests for more information.
- To prevent fraud, money laundering and abuse, and to meet legal and regulatory duties.
- To answer support requests and improve the service.
- We do not sell your personal information.
Who we share it with
Only the people and services needed to run Cardwin: payment and payout providers who move your money, email and messaging providers who deliver notices, hosting and storage providers, and authorities where the law requires it. These providers may only use your data to serve us. Our own staff see only what their role needs, and sensitive actions are logged.
How we protect it
- Gift card codes, PINs and payout details are stored encrypted.
- Uploaded images are kept in private storage and are shown only to you and the staff handling your sale.
- Staff accounts use two-step sign-in, and access is limited by role.
- Connections to Cardwin are encrypted in transit.
- No system is perfectly secure. Use a strong, unique password and tell us at once if you suspect misuse.
How long we keep it
We keep account and transaction records for as long as your account is open and for the period the law requires afterwards. Card codes and uploaded images are removed once they are no longer needed to complete, review or defend a transaction. Security logs are kept for a limited period.
Your choices and rights
You can ask us to access, correct, export or delete your personal information, to restrict how we use it, or to object to certain uses. You can update your details any time on your Profile page. Some records must be kept by law, and we will tell you if that limits a request. To make a request, contact support or write to us at Cardwin Technologies Limited, 177, Bode Thomas Street, Lagos. You may also complain to your data protection authority, such as the Nigeria Data Protection Commission.
Cookies
We use only the cookies needed to keep you signed in and secure, plus basic measurement of which pages are used so we can improve them.
Changes
If we change this policy in a meaningful way, we will update the date above and notify you by email or on the site.