Last updated: May 14, 2026 • Effective for users in Nigeria and worldwide
NDPR & GDPR Compliant10Minute ("we", "us") operates 10minute.com.ng, a platform for exchanging gift cards for Naira. We respect your privacy and follow the Nigeria Data Protection Regulation (NDPR) 2019.
1. What We Collect
When you trade:
- Account info: name, phone number, email, bank account details for payout
- Transaction data: gift card images (front/back), card type, value, codes, timestamps
- Verification: selfie or ID (only for large trades above ₦200,000 to prevent fraud)
- Device info: IP address, browser, device type — to prevent fraud and improve speed
2. How We Use Your Data
- Process trades and send Naira to your bank within 10 minutes
- Verify cards are valid and not previously used
- Send trade updates via SMS, WhatsApp, or push notification (you can opt out)
- Prevent fraud, chargebacks, and comply with Nigerian financial regulations
- Improve rates and app speed based on anonymous usage patterns
3. Who We Share With
We do not sell your data. We only share when necessary:
- Payment partners: Nigerian banks and Paystack/Flutterwave for payouts (only account number and amount)
- Verification services: Smile Identity for KYC checks (with your consent)
- Legal: EFCC, NDPR authorities, or courts if required by Nigerian law
- Hosting: Cloudflare and Google Cloud (data stored in EU/US with encryption)
4. How We Protect You
- All traffic encrypted with HTTPS/TLS 1.3
- Bank details encrypted at rest (AES-256)
- Staff access is logged and limited to trade support only
- Card images blurred automatically after verification
- 2FA available for accounts over ₦500,000 monthly volume
5. Your Rights (NDPR)
As a Nigerian user, you can:
- Request a copy of your data — email us, we reply within 48 hours
- Correct wrong bank details or phone number in your profile
- Delete your account — we erase personal data within 30 days (trade records kept 5 years for CBN compliance)
- Withdraw marketing consent anytime via the "unsubscribe" link or app settings
- Lodge a complaint with NDPB at ndpb.gov.ng
6. Cookies & Tracking
We use essential cookies to keep you logged in and remember rates. We use OneSignal for push notifications. No third-party ads or Facebook pixels. You can block cookies in your browser, but the trade form may not work.
7. Children
10Minute is for users 18+. We do not knowingly collect data from minors. If you believe a child used our service, contact us for immediate deletion.
8. Data Retention
- Active accounts: data kept while you trade
- Card images: 90 days
- Transaction logs: 5 years (CBN anti-money laundering requirement)
- Deleted accounts: anonymized after 30 days
9. Contact Us
Data Controller: 10Minute Technologies
Email: privacy@10minute.com.ng
WhatsApp Support: +234 800 000 1010
Address: Lagos, Nigeria
For privacy requests, include your registered phone number. We verify identity before sharing data.