Effective Date: 1 January 2025

Last Updated: January 2026

Governing Law: Laws of the United Arab Emirates

Jurisdiction: Courts of the Emirate of Dubai, UAE

Data Controller: AlfareedCard — [email protected]

At AlfareedCard (“we,” “our,” or “us”), your privacy is our highest priority. We are fully committed to protecting your personal information and ensuring the highest level of security, transparency, and confidentiality across all our digital services.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect your personal data when you access and use our website, mobile application, and related features (collectively, the “Services”). It also outlines your legal rights regarding your personal data and how you can exercise those rights.

By accessing or using AlfareedCard, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform immediately.

This Privacy Policy Covers:

• 1. Information We Collect — The types of personal and non-personal data we collect.
• 2. How We Use Your Information — The purposes for which your data is processed.
• 3. How We Share and Disclose Information — When and how your data may be shared with third parties.
• 4. Data Security & Retention — The measures we take to protect your information and how long it is retained.
• 5. Your Rights & Choices — Your legal rights regarding your personal data and how to exercise them.
• 6. Cookies & Tracking Technologies — How and why we use cookies and similar technologies.
• 7. Changes to This Privacy Policy — How updates to this policy will be communicated.
• 8. Contact Information — How to contact us regarding privacy-related matters.

We are committed to handling your personal data in accordance with applicable UAE data protection laws, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), and recognized international security standards. If you have any questions regarding this Privacy Policy or how your information is processed, please contact our Customer Support Team at: [email protected]

1. Information We Collect

When you use AlfareedCard, we collect certain types of information to provide, maintain, secure, and improve our digital services. The information we collect includes the following categories:

1.1 Personal Information

We collect personal information that you voluntarily provide to us when registering on our website, making a purchase, or contacting customer support. This information is necessary to deliver a secure and personalized digital experience. It may include:

• Full name — for account identification and billing purposes.
• Email address — for sending order confirmations, digital delivery, updates, and service communications.
• Phone number — for customer support, account verification, and urgent notifications.
• Billing address — for payment verification and fraud prevention.

1.2 Account Information

When you create an account with AlfareedCard, we collect and store account-related information including:

• Login credentials — Verification code used to sign in.
• Account preferences — language, notification settings, and communication preferences.
• Order history & transaction records — including purchased digital products, prices, discounts, refunds, and disputes.
• Account security data — including login activity and other security-related information used to detect unauthorized access.

1.3 Payment Information

To process your transactions, we collect the necessary payment details through secure third-party payment gateways. This may include:

• Payment method type.
• Transaction reference numbers.
• Payment status and history.

AlfareedCard does not store sensitive payment information such as full card numbers or CVV security codes. All payments are processed using encrypted and PCI DSS-compliant payment providers to ensure the highest security standards.

1.4 Device & Usage Information

When you browse or interact with our website or application, we may automatically collect certain technical information, including:

• IP address.
• Browser type and version.
• Device type and operating system.
• Website usage behavior and interaction data.
• Cookies and tracking technologies.

This data helps us improve website performance, enhance security, and personalize your experience.

1.5 Customer Support Data

When you contact our support team, we may collect and store:

• Inquiry details and communication records.
• Feedback, reviews, and survey responses.
• Records related to service issues, complaints, or dispute resolution.

This information is used strictly to improve service quality and support efficiency.

2. How We Use Your Information

At AlfareedCard, we use your personal data to provide a seamless, secure, and personalized digital shopping experience. Your information is used strictly for the following purposes:

Order Processing and Delivery

To efficiently process your digital card and game card purchases and ensure transactions are completed accurately and promptly, including sending digital codes to your registered account or email.

Customer Support

To respond to your inquiries, resolve issues related to your account or orders, and provide timely assistance for any service-related concerns.

Personalized Recommendations

To enhance your experience by offering tailored suggestions, promotions, and services based on your preferences, previous interactions, and purchase history.

Communication

To provide essential updates on your orders, delivery status, account activity, and other relevant information regarding our products and services.

Marketing and Promotions

With your explicit prior consent, we may send promotional materials, newsletters, and exclusive offers. You can opt out of these communications at any time by using the unsubscribe link in promotional emails or by adjusting your account notification preferences.

Account Management

To manage your AlfareedCard account, update profile information, process payments, and maintain accurate records of your purchases and transaction history.

Legal Compliance

To meet applicable UAE laws, regulations, and obligations, including tax requirements, anti-money laundering regulations, and dispute resolution.

Fraud Prevention and Security

To monitor and analyze account activity for suspicious behavior, protect against unauthorized access, and maintain the overall integrity and security of our platform.

Website Functionality and Performance

To improve the performance, usability, and security of our website and application by analyzing user behavior and addressing technical issues.

Service Enhancement

To review feedback and user activity to refine and improve our services, ensuring a smooth and satisfying experience for all users.

Your information is always handled responsibly and in accordance with applicable data protection laws. We never use your personal data for purposes beyond those explicitly stated in this Privacy Policy without your prior written consent.

3. How We Share and Disclose Information

At AlfareedCard, your privacy is our top priority. We do not sell or rent your personal information to third parties under any circumstances. However, in certain specifically defined cases, we may share your data with trusted partners to provide our services efficiently and in compliance with applicable law. These circumstances include:

Service Providers and Partners

We may share necessary information with third-party service providers who support essential operations, including payment processing, order fulfillment, digital delivery, customer support, and website infrastructure. These providers are contractually bound to use your data only for the specific services they perform on our behalf and in full compliance with applicable privacy laws and this Policy.

Affiliate and Marketing Partners

If you participate in promotional offers or campaigns, we may share limited and necessary information with authorized affiliate partners to provide tailored deals and services. All shared data is protected under strict confidentiality agreements and cannot be used for purposes beyond those authorized.

Legal Compliance and Law Enforcement

We may disclose your information when required to comply with applicable UAE laws and regulations, respond to valid and legally binding requests from competent authorities, court orders, or government agencies, or to address fraud, financial disputes, or tax requirements. All such disclosures are made in good faith and strictly within the bounds of applicable law.

Fraud Prevention and Security

To safeguard our platform, users, and business operations, we may share information with authorized security and fraud detection providers for the purposes of transaction verification, risk assessment, and protection against unauthorized access, identity theft, or financial fraud.

Business Transfers and Corporate Transactions

In the event of a merger, acquisition, corporate reorganization, or sale of assets, your information may be transferred as part of the transaction. We will ensure that the receiving entity is bound by confidentiality obligations and upholds the privacy commitments outlined in this Policy. You will be notified of any such transfer and its implications.

User-Requested Disclosures

If you authorize or explicitly request the sharing of your data with third parties — such as through social media integrations, referral programs, or external payment services — we will disclose your information accordingly and only to the extent of your authorization.

Aggregated and Anonymized Data

We may share non-identifiable, aggregated, and anonymized data with business partners, advertisers, or research institutions for analytics, business insights, and service improvements. This information never contains personally identifiable details and cannot be used to identify any individual user.

Any shared information is handled securely and in strict accordance with UAE data protection regulations. Your data is only disclosed when necessary to provide our services, fulfill legal obligations, or when you have provided explicit consent.

4. Data Security & Retention

4.1 Data Security

At AlfareedCard, we are committed to protecting your personal information and implementing robust, industry-standard security measures to prevent unauthorized access, alteration, disclosure, or destruction of your data. Our key security measures include:

Encryption and Secure Transactions

Sensitive information, including payment details and personal data, is encrypted using industry-standard protocols (TLS/SSL) both in transit and at rest. All transactions are processed through secure, PCI DSS-compliant payment gateways to prevent unauthorized access.

Access Controls

Only authorized personnel with a legitimate and documented need can access personal data. All staff members with access to personal data are bound by strict confidentiality obligations and undergo regular security training.

Continuous Monitoring

Our systems are regularly monitored for potential vulnerabilities, unauthorized activity, and emerging security threats. We conduct periodic security assessments and penetration testing to identify and address weaknesses proactively.

Compliance with Security Standards

Our security practices align with UAE Federal Decree-Law No. 45 of 2021 (PDPL), PCI DSS standards, and internationally recognized best practices to protect your data from cyber threats, breaches, and unauthorized use.

While we take all reasonable and technically feasible precautions, no method of online transmission or electronic storage is completely secure. We encourage users to follow best practices, such as using strong and unique passwords, enabling two-factor authentication where available, and avoiding sharing sensitive information over unsecured or public networks.

4.2 Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Retention periods are determined based on the following:

Account and Transaction Records

Account details, order history, and payment information are retained for the duration of your active account and for a minimum period of one (1) year thereafter, in accordance with UAE tax, accounting, and legal requirements.

Legal and Regulatory Compliance

Certain information may be retained for a longer period if required by applicable UAE law, regulatory obligations, anti-money laundering regulations, or to resolve active disputes and prevent fraud.

Marketing Preferences

If you opt out of marketing communications, we retain your contact information solely to honor your preferences and prevent further promotional messages from being sent.

Once the applicable retention period ends, your data is securely deleted or irreversibly anonymized, ensuring it is no longer identifiable or retrievable. You may request early deletion of your personal information at any time by contacting our Customer Support Team, subject to applicable legal retention requirements.

5. Your Rights & Choices

At AlfareedCard, we are committed to transparency and giving you full control over your personal data. In accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable data protection laws, you are entitled to the following rights:

Right to Access

You have the right to request confirmation of whether we process your personal data, and to obtain a complete copy of the personal information we hold about you, along with details on how it is used and the legal basis for processing.

Right to Rectification

You may request corrections or updates if any of your personal data held by us is inaccurate, incomplete, or outdated. We will process such requests promptly and confirm the corrections made.

Right to Erasure (“Right to Be Forgotten”)

In the Alfareed Card mobile app, you can delete your account directly:

open the Profile tab and tap “Delete Account”. After confirmation, your account and personal information are permanently removed.

What is deleted: your name, email address, phone number, account credentials, saved preferences, and the link between your account and your past orders.

What is retained: purchase records — order number, amount, date and country — are kept as financial records required by UAE tax regulations.

Identifying details within those records are removed after two (2) years.

You may also request deletion by contacting support at the address below.

Right to Restrict Processing

You can request that we limit or restrict the processing of your personal data under specific conditions, such as when you contest its accuracy, when processing is unlawful but you oppose erasure, or when we no longer need the data but you require it for legal claims.

Right to Object to Processing

Where your data is processed on the basis of legitimate interests or for direct marketing purposes, you have the right to object to such processing at any time. We will cease processing upon receipt of a valid objection, unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Data Portability

Where applicable, you may request that we provide your personal data in a structured, commonly used, and machine-readable format. You may also request the transfer of your data directly to another service provider, where technically feasible and in accordance with applicable law.

Right to Withdraw Consent

Where our processing is based on your prior consent, you have the right to withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw consent by contacting us or adjusting your account preferences.

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to file a formal complaint with the relevant data protection authority in the UAE. We strongly encourage you to contact us first so we can address your concerns directly and promptly.

Exercising Your Rights

To exercise any of these rights or to inquire about your personal data, please contact our Customer Support Team at [email protected]. For security and verification purposes, we may need to confirm your identity before processing your request. All requests will be:

• Acknowledged within five (5) business days of receipt.
• Processed and resolved within thirty (30) calendar days, or within any timeframe required by applicable law.
• Handled in full compliance with UAE PDPL and other applicable data protection regulations.

You can also manage certain preferences — such as opting out of marketing communications — through your account settings or using the unsubscribe option in promotional emails, without needing to contact our support team.

6. Cookies & Tracking Technologies

At AlfareedCard, we use cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and provide personalized content. This section explains the types of technologies we use, their purposes, and how you can manage them.

What Are Cookies and Tracking Technologies?

• Cookies: Small text files stored on your device when you visit our website, enabling us to remember your preferences and improve site functionality and security.
• Web Beacons and Pixels: Tiny graphic elements embedded in emails or web pages that track your interaction with our content and measure campaign effectiveness.
• Scripts: Pieces of code that run on our website to collect information about your interactions, preferences, and usage patterns.

Types of Cookies We Use

• Essential Cookies: Required for the basic and secure operation of our website, including session management, authentication, and network security management. These cannot be disabled without affecting core functionality.
• Performance and Analytics Cookies: Collect anonymized information on how you use our site to help us improve performance, identify errors, and enhance your overall experience.
• Functional Cookies: Remember your preferences, settings, and choices to provide a more personalized and consistent browsing experience.
• Targeting and Advertising Cookies: Track your browsing habits and interests to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.

How We Use Cookies and Tracking Technologies

• Enhancing User Experience: By remembering your preferences and settings, we provide a more efficient, personalized, and seamless browsing experience.
• Analyzing Website Usage: These technologies help us understand how users interact with our platform, allowing us to optimize content, layout, and functionality based on real usage data.
• Marketing and Advertising: Cookies allow us to deliver relevant advertisements based on your interests and browsing behavior, and to measure the success and reach of our marketing campaigns.
• Security: Certain cookies are used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

Managing Your Cookie Preferences

You have the right to control the use of cookies and tracking technologies. Your options include:

• Browser Settings: Most browsers allow you to accept, reject, or delete cookies. Refer to your browser’s help section or settings for specific instructions.
• Opt-Out Tools: For analytics and advertising cookies, you can use opt-out tools provided by services such as Google Analytics Opt-out Browser Add-on.
• Do Not Track: You may enable the “Do Not Track” feature in your browser to signal your preference not to be tracked across websites.
• Cookie Consent Banner: When you first visit our platform, you will be presented with a cookie consent banner allowing you to accept or customize your cookie preferences.

Please note that disabling or rejecting certain cookies — particularly Essential Cookies — may significantly affect website functionality and limit your access to certain features and services on our platform.

7. Changes to This Privacy Policy

At AlfareedCard, we may update or modify this Privacy Policy at any time to reflect changes in our business practices, legal requirements, regulatory obligations, or industry standards. Any revisions will be posted on this page with an updated “Last Updated” date clearly indicated at the top of the Policy.

Where required by applicable UAE law or where changes are material and significantly affect your rights or the way we process your personal data, we will notify you through a prominent notice on our website or application, or via email to your registered address, prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data and any updates to our practices. Your continued use of AlfareedCard after any changes have been posted and — where applicable — after notification has been provided, signifies your acceptance of the updated Privacy Policy.

If you do not agree with the updates, you must discontinue use of the platform immediately and contact our Customer Support Team to exercise your data rights as outlined in this Policy.

8. Contact Information

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy, the way we handle your personal data, or your experience using AlfareedCard, you may contact our Customer Support Team through the following official channels:

Email: [email protected]

Data Protection Inquiries: [email protected]

Website: Contact Us form available on alfareedcard.com

Response Time: We aim to acknowledge all inquiries within 5 business days and resolve them within 30 calendar days.

Our team is committed to addressing your inquiries promptly and professionally, and to assisting you with any issues related to your account, transactions, personal data, or the use of our Services.

We encourage you to reach out with any questions regarding privacy, account management, payments, or platform usage. We are dedicated to maintaining open, transparent, and professional communication with all our users.

---

AlfareedCard — Digital Products Platform  |  Governed by the Laws of the UAE
[email protected]  |  [email protected]