Privacy policy

Who we are

GTOP TECH SERVICES ("GTOP", "we") is a Nigerian digital services platform registered with the Corporate Affairs Commission under registration number 9811595, at Aso Street, Parkview Estate, Ikoyi, Lagos State, Nigeria. You can reach us at gtoptechservices@gmail.com or +234 912 488 7245. This policy explains what we collect when you use the platform, why we collect it, and the choices you have.

What we collect

• •Account details you give us: your name, email address and phone number.
• •Wallet and transaction records: amounts, references, the recipient details you enter (phone number, meter or smartcard number), and each order's status.
• •Device and session details: browser, device type, IP address and approximate location, kept so you can review and end sessions you do not recognise.
• •Identity details for funding: to open your dedicated funding account, our payments provider requires a BVN or NIN check. Those details go to the provider for that check.
• •Support conversations and, for reseller accounts, the API requests made with your credentials.

Why we use it

• •To run your wallet, place your orders and show you your receipts and history.
• •To keep your account secure: spotting unusual sign-ins, verifying wallet debits with your transaction PIN, and holding a record of what happened.
• •To meet the requirements our payment and service providers place on us, including identity verification for funding accounts.
• •To answer you when you contact support, and to keep the accounting records a business must keep.

Payments and identity checks

Wallet funding, payouts, your dedicated account and the BVN or NIN identity check are carried out by our payments provider, Niimbu. GTOP does not store your card numbers or bank passwords, and we never ask for them by email, chat or phone.

Who we share it with

We do not sell your personal data, and we do not share it for advertising.

• •Niimbu — to execute your funding, withdrawals and identity checks and to issue your funding account.
• •The operator whose service you are buying — only what is needed to deliver it, such as the phone number or meter number you entered.
• •Regulators, courts or law enforcement, where we are legally required to.

How we protect it

• •Passwords are stored hashed, never in readable form.
• •API secrets are stored as SHA-256 hashes; the signing and webhook secrets stay on our servers, and all four values are shown to their owner exactly once.
• •A transaction PIN can be required for every wallet debit.
• •Administrative actions are written to an audit log, and API access is rate-limited and logged.

How long we keep it

We keep financial and transaction records for as long as we need them for accounting, dispute handling and legal obligations. Other data can be deleted on request where we are not required to keep it.

Your choices

• •Ask us for a copy of your data, or ask us to correct it, by writing to gtoptechservices@gmail.com.
• •Ask us to delete data we are not required to keep.
• •Review and end device sessions yourself from your profile, and manage notifications inside the app.

Changes to this policy

When we change how we handle data, we update this page and the date at the top.

Contact

Questions about privacy, or a request about your data: gtoptechservices@gmail.com or +234 912 488 7245.