Privacy Policy

This Privacy Policy explains how GiftXD, LLC ("we," "us" or "our"), which operates RedeemMyGiftCard, collects, uses, shares and protects personal information when you visit this website or use our gift card selling service in our Telegram bot, @giftcard_redemption_bot (together, the "Service").

We are a money services business registered with FinCEN. Federal law requires us to collect and keep certain information about the people we pay. This Policy explains what that means for you.

1. Information We Collect

On this website. This website has no accounts or forms and does not ask for personal information. Our hosting and security providers automatically record standard technical data, such as IP address, browser type, device type, pages visited and the time of each visit, to deliver the site, keep it secure and understand how it is used. If we add analytics, it will measure pages visited, not identify you.

From Telegram. When you open the bot, Telegram shares your Telegram user ID, username, display name, language setting and the messages, photos and files you send to the bot.

Identity verification. To sign you up and keep you verified we collect your full name, date of birth, home address, phone number, email address, nationality, images of your government-issued ID, and a selfie or live photo, plus the results of checks run on them. Some of this may be collected directly by our identity verification provider.

Biometric information. To confirm that you are the person on your ID, our verification provider may create a face geometry template from your selfie and ID photo and compare them. See Section 4.

Gift card information. For each card you submit we collect the brand, card number, code, PIN, balance, expiration date and security code where the card has them, photos of the card and receipts you send, and the outcome of checking and redeeming the card.

Payment information. The cryptocurrency addresses you give us, the payments we send to them, and the related blockchain transaction records.

Compliance information. Results of sanctions, watchlist and fraud screening, blockchain analytics on your addresses, risk ratings, your verification level and limits, and records of any review of your account.

Device and location information. When you use our Telegram Mini App, we may receive your IP address and device and browser information, which we use to secure your session and prevent fraud.

Communications. Your messages with us in the bot and our replies.

2. How We Use Information

We use personal information to:

• create and run your account and process your sales and payments;
• verify your identity and location, and confirm you are eligible;
• comply with anti-money-laundering, sanctions, recordkeeping, tax and other legal obligations, including reporting to regulators and law enforcement when required;
• detect, prevent and investigate fraud, stolen cards, scams and abuse, including protecting people who may be victims of gift card scams;
• set and enforce limits;
• communicate with you about your sales, your account, the daily rates and changes to our terms;
• translate messages into your language;
• secure, maintain and improve the Service; and
• enforce our Terms of Service and defend legal claims.

We do not sell your personal information, and we do not share it for targeted advertising.

3. Legal Bases (EEA, UK and Similar Laws)

Where laws such as the GDPR apply, we rely on these legal bases: performing our contract with you (running your account and sales); complying with legal obligations (identity verification, anti-money-laundering, sanctions, recordkeeping); our legitimate interests (fraud prevention, security, improving the Service), which we balance against your rights; and your consent where the law requires it, such as for biometric processing in some places. You may withdraw consent at any time, but that does not affect processing before the withdrawal, and we may then be unable to provide the Service.

4. Biometric Information

If you complete a selfie check, our identity verification provider may extract a face geometry template from your selfie and your ID photo solely to confirm that they match and to prevent fraud. By completing the selfie check you consent to this.

We do not sell, lease, trade or otherwise profit from biometric information. We and our provider keep it only as long as needed for verification and fraud prevention and as required by law, and in any case delete biometric templates no later than three years after your last interaction with the Service, unless a longer period is legally required.

5. How We Share Information

We share personal information only as follows:

• Service providers who act for us, such as identity verification, sanctions and blockchain screening, cloud hosting and databases, website hosting and security, translation and AI processing, and messaging. They may use it only to provide their services to us.
• Card issuers and merchants, to the extent needed to check and redeem the cards you sell.
• Blockchain networks, which publicly record the payments we send; anyone can see a public blockchain transaction, though not your name.
• Regulators, law enforcement and government authorities, when the law requires it or we believe in good faith it is needed to comply with the law, respond to legal process, or protect against fraud or harm. This includes reports we are required to make and may not be allowed to tell you about.
• Professional advisers, such as lawyers, accountants and auditors, under confidentiality duties.
• A buyer or successor if we are involved in a merger, acquisition, financing or sale of assets, subject to this Policy.
• Anyone else with your consent.

Telegram receives the messages you exchange with the bot under Telegram's own privacy policy.

6. How Long We Keep Information

We keep personal information as long as your account is open and afterward as long as the law requires or allows. U.S. anti-money-laundering rules generally require us to keep identity, transaction and compliance records for at least five years. We may keep information longer when needed for a legal claim, an investigation or a regulator's request. Biometric templates are kept as described in Section 4. When we no longer need information we delete or de-identify it.

7. How We Protect Information

We use administrative, technical and physical safeguards designed to protect personal information, including access controls, restricted staff access and secure hosting. No system is completely secure, so we cannot guarantee security. Keep your Telegram account secure and tell us right away in the bot if you think it has been compromised.

8. International Transfers

We are based in the United States and process information there and in other countries where our service providers operate. Those countries may have different data protection laws than yours. Where the law requires, we use appropriate safeguards, such as standard contractual clauses, for these transfers.

9. Your Rights and Choices

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct inaccurate information;
• ask us to delete your information;
• object to or restrict some processing;
• receive your information in a portable format;
• withdraw consent; and
• not be discriminated against for exercising these rights.

To make a request, message us in the bot. We will verify your identity before acting on it and respond within the time the law requires. You may use an authorized agent where the law allows; we may ask for proof of authority.

Some rights are limited by law. In particular, we cannot delete information we are legally required to keep, such as identity and transaction records under anti-money-laundering rules. If we deny a request, we will explain why, and where the law provides one, how to appeal. You may also complain to your local data protection authority.

U.S. state privacy rights. Residents of California and other states with consumer privacy laws have the rights listed above as those laws provide. Information we collect and keep to comply with financial privacy and anti-money-laundering laws may be exempt from parts of those laws. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you.

10. Cookies

This website does not use advertising or tracking cookies. Our hosting and security providers may set cookies that are strictly necessary to deliver and protect the site. If we add analytics, we will update this Policy.

11. Children

The Service is only for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we will close the account and delete the information unless the law requires us to keep it.

12. Links to Other Services

This website links to Telegram and to other sites, such as reportfraud.ftc.gov. Their privacy practices are governed by their own policies, not this one.

13. Changes to This Policy

We may update this Policy. We will post the new version here with a new effective date and, for material changes, tell you in the bot.

14. Contact Us

Questions or requests about this Policy can be sent to GiftXD, LLC in our Telegram bot, @giftcard_redemption_bot.