Privacy policy

PRIVACY POLICY

OfficeLab Private Limited

Last updated:8th August 2026

OfficeLab Private Limited (“we”, “us”, “the Company”) operates raajjecards.com, a platform that lets verified users purchase US Apple Gift Cards using Maldivian Rufiyaa (MVR). This Privacy Policy explains what personal data we collect, why, how we protect it, and the choices you have. It should be read together with our Terms & Conditions.

1. Data We Collect

We collect the following categories of personal data:

Category	Examples	Source
Identity data	Full name, date of birth, nationality, National ID or passport number and scanned copy	Provided directly by you
Biometric data	Selfie / liveness-check video used to match you to your ID	Provided directly by you
Contact data	Email address, phone number, residential address	Provided directly by you
Account data	Username, password (hashed), account status, verification status	Generated on registration
Transaction data	Order amounts, exchange rate applied, bank reference numbers, gift card order history	Generated when you place an order
Payment data	Sending bank name and account details used for a transfer (we do not store full bank credentials/passwords)	Provided directly by you or your bank
Technical data	IP address, device/browser type, log-in timestamps, cookies	Collected automatically

2. Why We Collect It

We use your personal data to:

• Create and administer your account;
• Verify your identity (KYC) before allowing purchases;
• Screen you and your transactions against sanctions, fraud, and politically-exposed-person (PEP) lists;
• Process orders, confirm payments, and deliver gift card codes;
• Detect, investigate, and prevent fraud, money laundering, and other financial crime;
• Comply with our legal obligations, including reporting to the Maldives Monetary Authority (MMA) or law enforcement where required;
• Communicate with you about your account or orders (service messages, not marketing, unless you opt in);
• Improve the security and performance of our platform.

We do not sell your personal data to third parties, and we do not use your ID documents or biometric data for any purpose beyond verification, fraud prevention, and legal compliance.

3. Who We Share Data With

We share personal data only where necessary, with:

• Identity verification providers, to check the authenticity of your documents and run liveness checks;
• Banks and payment-confirmation partners, to match incoming transfers to your order;
• The Maldives Monetary Authority (MMA), Financial Intelligence Unit, police, courts, or other competent authorities, where required by law or in response to a valid legal request;
• IT infrastructure and hosting providers, under confidentiality and data-processing agreements;
• Professional advisers (lawyers, auditors), where necessary for our legitimate business purposes.

We do not share your data with Apple Inc. for marketing purposes; gift card codes are issued to you and any interaction with Apple's systems after delivery is between you and Apple, governed by Apple's own privacy practices.

4. International Data Transfers

Where any of our service providers (e.g., identity verification, cloud hosting) are located outside the Maldives, your data may be transferred to and processed in that country. Where this happens, we require providers to protect your data under contractual terms at least as protective as this policy. [Confirm and name actual vendor locations before publishing.]

5. Data Retention

We retain personal data only as long as necessary for the purposes set out above:

• Identity verification records and transaction history: retained for [X years — many AML regimes require 5 years from account closure or last transaction; confirm the Maldivian requirement] to meet our legal and regulatory obligations, even after you close your account;
• Account and contact data: retained while your account is active, and for a limited period after closure to handle disputes, then deleted or anonymized;
• Technical/log data: retained for 12 Months for security and troubleshooting purposes.

6. Data Security

We apply technical and organizational safeguards to protect your data, including encryption of data in transit, restricted internal access to ID and biometric records on a need-to-know basis, and regular review of our security practices. No system is completely secure, and we encourage you to use a strong, unique password and to safeguard your login credentials.

7. Your Rights and Choices

Depending on applicable law, you may have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data — note that we may be legally required to retain identity and transaction records for the AML retention period described in Section 5, even after such a request;
• Withdraw consent for optional communications (e.g., marketing emails) at any time;
• Lodge a complaint with us, or with the relevant supervisory authority, about how we handle your data.

To exercise any of these rights, contact us at order@raajjecards.com . We may need to verify your identity before actioning a request.

8. Cookies & Similar Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the platform is used. Essential cookies are required for the site to function; you can control non-essential cookies through your browser settings or any cookie banner presented on the site.

9. Children's Privacy

Our services are not directed at, and may not be used by, anyone under 18 years old. We do not knowingly collect personal data from minors. If we learn that we have collected data from someone under 18, we will delete it, except where retention is legally required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or an in-app notice. Continued use of the platform after changes take effect constitutes acceptance.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data, contact us at:

• Email: order@raajjecards.com

12. Governing Law

This Privacy Policy is governed by the laws of the Republic of Maldives.