01 Who we are
BeiKe card is operated by 盐城焙客科技有限公司, a company registered in China. This company is the controller of the personal data described in this policy.
Registered address
江苏省盐城市亭湖区江苏明珠世贸商城E6幢135室
Room 135, Building E6, Jiangsu Mingzhu World Trade Mall, Tinghu District, Yancheng, Jiangsu, China.
Privacy enquiries
privacy@beikecard.com
Customer support
support@beikecard.com
The app is intended for customers in Nigeria. It lets customers submit gift cards for review, follow trades, manage bank instructions, request a manual bank transfer of accepted amounts, and use available rewards and support features. The displayed balance records amounts payable for accepted trades and eligible rewards. It is not a customer top-up or customer-to-customer transfer service.
02 Information we collect
We collect information you provide and the records needed to operate the features you use.
- Account and profile
- Name or user name, email address, country, account ID, invitation code, password verification data, and optional phone number and profile picture.
- Gift-card transactions
- Card brand, issuing country, currency, face value, card format, codes and photographs you submit, quoted amounts, review results, status history and transaction timestamps.
- Bank instructions and withdrawals
- Account holder name, bank name, bank account number, withdrawal amounts, PIN verification data, processing status and bank transfer references.
- Customer support
- Messages, photos or other supported attachments you choose to send, related account or transaction references, and delivery or read records.
- Membership and rewards
- VIP level, qualifying transaction activity, task progress, coins, coupons, wheel results, invitation relationships and reward history.
- Technical and security records
- Login sessions, verification-code requests, security and administration events, and request information such as IP address, request time and browser or device details recorded by the service or hosting infrastructure.
Photo access is limited to images you choose through the device's picker or camera features. Some photographs may contain metadata. Do not upload unrelated identity documents, other people's personal data or unnecessary financial information. Do not send passwords, verification codes, withdrawal PINs or gift-card codes in support chat.
The current app does not request access to your contacts, microphone or precise device location, and we have not integrated advertising or third-party behavioural analytics in the current app.
03 Why we use your information
- Provide the service: create and maintain accounts, assess submitted cards, calculate quotes, record accepted trades, maintain rewards and carry out bank instructions. We rely on performance of our contract with you or steps you request before entering it.
- Protect accounts and resolve issues: send verification messages, investigate suspicious or duplicate activity, provide support and resolve disputes. We rely on legitimate interests in operating a safe, reliable service where those interests do not override your rights.
- Meet legal obligations: respond to lawful requests and preserve records where applicable law requires it.
- Optional uses: where a particular use requires consent, we will explain it and obtain that consent separately. You may withdraw consent without affecting processing already lawfully carried out.
Information required to create an account, assess a card or process bank instructions is necessary for that feature. You can choose not to provide it, but we may then be unable to provide the corresponding service. Optional profile information is not required to trade.
05 Where data is processed
- The current customer service and its database and uploaded files are hosted on Alibaba Cloud in London, United Kingdom.
- Account verification emails use Alibaba Cloud Direct Mail in Frankfurt, Germany.
- Our authorised customer-support, trade-review and finance personnel may access records from China and Nigeria.
- Public website delivery and enterprise email involve their providers' infrastructure and routing, which may process technical or correspondence data in other countries.
This means information provided in Nigeria may be stored or accessed outside Nigeria. We restrict staff access and use encrypted connections. International processing must have an applicable basis and safeguards under the Nigeria Data Protection Act 2023. The locations listed here do not, by themselves, establish an adequacy decision or your consent to a transfer. Our production transfer documentation and provider arrangements remain part of pre-launch review. Contact privacy@beikecard.com for information about the arrangements relevant to your data.
06 How long we keep information
The operator approved the standard 90-day schedule on 29 October 2026. Staff currently check which records are due, verify outstanding matters and recorded exceptions, and carry out or arrange the necessary deletion. Hourly automated checks and file-removal retries have been prepared but are not enabled. No activation date has been set. Reaching a retention deadline does not itself prove that every copy has been erased; staff must verify completion.
| Information | Retention period and starting point |
|---|---|
| Settled trade, transfer and related reward records | 90 days from completion. Trades, payments, withdrawals and rewards that share payment allocations are handled together: the period starts from the latest financial completion in that linked group, once all amounts are settled and no outstanding case or applicable hold protects it. The linked transaction records are then deleted together. |
| Gift-card codes and card images | 90 days from the relevant transaction's completion, using the same latest-completion rule where it belongs to a linked payment group. |
| Support messages and support images | For a transaction-related case, 90 days from completion of the linked transaction or payment group. For a case with no related transaction, 90 days from closure of the support conversation. An open case remains available while it is being handled. |
| Necessary cumulative account statistics | While the account is active, we keep necessary cumulative transaction counts, amounts and reward-qualification totals to maintain account features and accounting consistency. These remain personal data linked to the account. They do not retain individual retired trade IDs, transaction dates, card brands or countries, and are included in account deletion below. |
| Account information after a deletion request | 90 days after identity has been verified and all outstanding account matters have been resolved, subject to a specific justified hold. Necessary account information is otherwise kept while the account is active. |
| Backups | 90 days from each backup's verified creation time. A deleted record may remain in an earlier backup until that backup expires. Older copies with unverified creation times require staff verification; they are not treated as already deleted. |
| Deletion and recovery records | We retain restricted records of completed deletions for up to 90 days where needed to prevent a restored backup from bringing deleted information back. These can include internal identifiers and the limited account totals or retention status needed for that purpose, rather than card codes, images, bank instructions or support-message content. They can still be associated with an individual and are protected as personal data. The prepared automated recovery process is not currently enabled. |
Open trades, unpaid amounts, pending transfers and unresolved support cases protect the relevant records and their necessary payment links while they are being handled. A specific legal obligation, active dispute or security investigation may require a relevant subset to be kept longer. We record the reason, scope and review date, restrict its use and remove or de-identify it when the reason ends. A review date requires another review; it is not permission to keep records indefinitely. You may ask which records are retained and why.
Verification codes have short validity periods; expiry makes a code unusable and does not necessarily delete the related security record immediately. Security records linked to an unresolved investigation are subject to the exception above. Downloaded reports, correspondence and provider-controlled copies require separate staff or provider action under their applicable retention arrangements; clearing application records does not by itself erase those copies.
Deletion records must be kept separately from the application database and backups. Before a restored service is reopened, staff must verify the current independent deletion record, apply completed deletions and retention restrictions, and check for records that have since expired. The prepared automation is intended to support these checks when separately enabled; staff are currently responsible for them. A backup is not a reason to restart an expired retention period.
07 Request account and data deletion
- In the app, open Profile → Delete account and submit your request.
- You can also open the BeiKe card account deletion page without reinstalling the app, sign in and submit the request.
- If you cannot sign in, email privacy@beikecard.com, preferably from your registered email address. Do not send a password, PIN or card code. We may ask for proportionate information to verify that the account belongs to you.
A submitted request immediately stops normal account access and ends active sessions. This initial closure is not the same as completed data deletion. Staff verify identity and review outstanding trades, transfers, disputes and retention obligations. Once verification and resolution are complete, the 90-day account retention period starts. Staff then carry out or arrange removal of eligible account information and dependent records, including the cumulative statistics described in section 6, subject to a specific justified hold and separate backup expiry. Automatic account erasure is not currently enabled.
Submitting a request does not instantly erase database entries, attachments, provider-held copies or backups. Necessary recovery identifiers may remain for the restricted 90-day recovery purpose described in section 6. Where a legal obligation, active dispute or security investigation requires particular records to remain longer, we limit the scope and record a review date. Contact the privacy address for the status of your request, the reason for retained records or any earlier deletion rights available under applicable law.
08 Security and device storage
We use HTTPS for customer-service connections, salted password and PIN verification hashes, encrypted sensitive card and bank fields, encryption for uploaded images, restricted staff access and activity records. These controls reduce risk; they do not mean that every database field is encrypted or that any service can guarantee absolute security.
The app stores a login session token using device secure storage where the native integration is available. The browser version uses session storage. Appearance preferences may be stored locally on your device. These support login and your chosen settings rather than advertising tracking. Logging out clears the active customer session used by the app.
If you suspect unauthorised access, contact support. If a personal-data incident requires notification under applicable law, we will notify the relevant authority and affected people as required.
09 Your choices and privacy rights
Subject to the Nigeria Data Protection Act 2023 and other applicable law, you may request access to your personal data, correction of inaccurate information, deletion, restriction of processing, portability where applicable, or object to processing based on legitimate interests. Where we rely on consent, you may withdraw it.
Send requests to privacy@beikecard.com. We verify identity before disclosing or changing account information and explain any lawful reason for limiting a request. You may complain to the Nigeria Data Protection Commission; you do not have to give up that right to use our service.
10 Automated processing and human review
Software calculates quotes, eligible rewards and membership progress from configured rules, and performs account and transaction checks. Our staff review gift-card acceptance or rejection and manual transfer processing. Contact support if you believe a quote, reward, account restriction or trade decision is wrong and want it reviewed by a person.
11 Children
BeiKe card is not designed as a service for children. If you believe a child has provided personal information without any consent required by applicable law, contact our privacy address so we can investigate and take appropriate action.
12 Changes and contact
We will update the date and version of this policy when our practices change. Where a change materially affects how we use your personal data, we will provide an appropriate notice and seek separate consent where required. This policy does not remove any statutory rights.
Speak to our privacy team
privacy@beikecard.comFor account and trade support:
support@beikecard.com
You can also write to the company address in section 1.