© 2016 GiftByCrypto · in effect since 2016
Account data: name, email, phone number, country, password (hashed), Google/Apple sign-in identifiers. Verification data: government ID documents, only when required by our AML/KYC Policy. Transaction data: orders, cards submitted for sale, wallet ledger, withdrawal details (crypto addresses, bank details), blockchain transaction IDs. Technical data: IP address, device and browser information, cookies, activity logs. Communications: support messages and dispute records.
To provide the service (deliver codes, process sales and withdrawals), prevent fraud and abuse, comply with legal obligations (AML/KYC, tax, sanctions screening), secure accounts, and respond to support requests.
We share data only with payment and blockchain infrastructure providers, SMS and email providers, identity verification providers, banking and payout partners, professional advisers, and authorities where legally required. We never sell personal data.
Account and transaction records are retained while your account is active and thereafter as required by anti-money-laundering and tax laws (typically 5–8 years). Fraud-related records may be retained longer to protect the Platform and its users.
TLS encryption in transit; gift card codes encrypted at rest with AES-256; hashed passwords; access controls and audit logging on all sensitive data.
Depending on your location: access, correction, deletion (subject to legal retention), portability, and objection. Requests: [email protected].
We use essential cookies for sessions and security. Analytics, if enabled, is anonymized.
Data may be processed in countries other than yours with appropriate safeguards. The Platform is not for anyone under 18; accounts of minors are deleted when identified.
What we keep for compliance. To meet anti-money-laundering and fraud-prevention duties we process your identity document, the country and name on it, your device and network identifiers, your wallet addresses, transaction history, balance checks of the cards you sold and the outcome of every review. Identification and transaction records are kept for five (5) years after the account closes or the last transaction, whichever is later, and may be kept longer where a law, an investigation or a dispute requires it.
Sharing for compliance. We share records with payment partners, card issuers and verification providers to check a transaction, and with regulators, courts and law enforcement where the law requires or permits it. We do not sell personal data.
Grievances. When you register a grievance, the ticket, your messages and the Grievance Officer's answers are stored with the transaction they concern and are shared with our central support team, which answers grievances for all our gift card sites. Grievance records are kept for five (5) years.
Automated decisions. Fraud and sanctions screening is partly automated (device, address, velocity and list checks). A freeze or refusal that results from it can be contested through a grievance and is then reviewed by a person.
Your requests. You may ask for a copy of your data, a correction, or deletion of what we are not required to keep, at [email protected] or through a grievance (category "My personal data"). We answer within 30 days.
Live chat is for registered customers. Create a free account (or log in) and verify your e-mail to chat with us — or e-mail [email protected] and we will reply there.
Create a free account I already have an account — log in ✉ [email protected]