Privacy Policy
1. Who we are
FlashCash Global is a digital-goods store operated from Lebanon. We sell gaming gift cards, in-game top-ups, and related digital services through the FlashCash Global Android application. This policy explains what personal data we collect through the app and the services behind it, why we collect it, and the choices you have.
2. Data we collect
- Account data — your mobile phone number (required; we sign you in with one-time SMS codes), your name, and optionally an email address and a password (stored only as a secure hash).
- Identity verification (KYC) — before your first purchase we ask you to verify your identity. We collect the details you submit (full name, date and place of birth, place of residence, document type and number) and photos of your government-issued identity document (front and back, or the passport photo page).
- Financial data — your in-app wallet balance, wallet top-up requests, payment records, and your order and transaction history.
- Device data — a push-notification token issued by Firebase Cloud Messaging, used to send you order updates.
- Game account data — player IDs or game-account identifiers you enter or choose to save at checkout, so we can deliver your purchase.
What we do not collect: your location, your contacts, or advertising identifiers. The app contains no advertising and no third-party analytics SDKs.
3. How we use your data
- Signing you in securely with SMS one-time codes.
- Verifying your identity and preventing fraud, as required before purchases.
- Fulfilling and delivering your orders.
- Operating your wallet and keeping accurate transaction records.
- Providing customer support.
- Sending push notifications about your orders.
We do not use your data for advertising, and we never sell your personal data.
4. Service providers
We share data only with the providers needed to run the service, and only for that purpose:
- Microsoft Azure — hosting and file storage for our servers and your data.
- Monty Mobile — SMS delivery; receives your phone number in order to deliver sign-in codes.
- Google Firebase — push-notification delivery; receives your device's push token.
- Game-ID verification service — receives only the player ID you type, to confirm it exists; never your name or identity documents.
5. Storage and security
All traffic between the app and our servers is encrypted in transit (HTTPS). Passwords are stored only as secure hashes. Identity-document photos are stored at long, unguessable web addresses. Access to customer data is limited to authorized staff.
6. Data retention and account deletion
We keep your data while your account is active. When your account is deleted — in the app or by request — we:
- permanently remove your phone number, email, name, and saved game IDs;
- permanently delete your identity-verification record and your ID photos;
- sign out all of your sessions and remove your device's push registration.
Order and payment records are retained — detached from your account profile — for accounting, fraud prevention, and legal compliance. Delivery details you entered at checkout (such as game or account identifiers) may remain part of those records.
7. Your rights
You can delete your account at any time from the app (Menu → Delete account) or by following the instructions on our account-deletion page. For access or correction requests, contact us at support@salehcard.com.
8. Children
FlashCash Global involves financial services and is not directed at persons under 18.
9. Changes to this policy
We may update this policy from time to time. The current version is always available at this address, with the date of the last update shown below.
10. Contact and governing law
Questions about this policy: support@salehcard.com. This policy is governed by the laws of Lebanon.