Privacy Policy

Privacy Policy Effective Date: August 20, 2026 KING-BEST ENTERPRISES CO., LTD Contents KING-BEST ENTERPRISES CO., LTD ("we," "us," or "our") operates the Flipza mobile application and related services (collectively, "Flipza" or the "Service"). We respect your privacy and process personal data in accordance with applicable data protection laws. This Privacy Policy explains what data we collect, how we use and share it, how long we retain it, and the choices and rights available to you. Please read this Policy before using Flipza. 1. Scope and Data Controller This Policy applies when you register an account, submit a gift card transaction, manage your wallet or withdrawals, add a bank account, contact customer support, or otherwise use Flipza. Data ControllerKING-BEST ENTERPRISES CO., LTD Registered Address5F, No. 5, Sha Lun Rd., New Taipei City, Taiwan Privacy EmailNatividadGarcilazo334@outlook.com 2. Data We Collect We follow the principle of data minimization and collect only data reasonably needed to provide and protect the Service. Depending on the features you use, we may process the following data. Account and Contact Data Email address and email verification codes. User ID, account identifiers, login tokens, account status, and registration time. Nickname, profile image, and WhatsApp contact information if you choose to provide them. Authentication credentials such as passwords and PINs. Passwords and PINs should be protected using appropriate technical measures, and we will not ask you to send them by customer support email. Referral codes, referral relationships, rewards, and membership status. Gift Card, Order, and Wallet Data Gift card brand, issuing country or region, card type, face value, and quote information. Gift card numbers you enter and gift card images you upload. Order number, order status, transaction time, transaction amount, wallet balance, reward balance, and related transaction history. Review records generated to verify transactions, prevent fraud, resolve disputes, and provide customer support. Protect sensitive information. Do not include identity documents, payment card PINs, bank passwords, or other sensitive data that is not required to complete a transaction in gift card images, notes, or support messages. Bank Account and Withdrawal Data Bank name, bank code, bank account number, and account holder name. Withdrawal amount, status, time, and related settlement records. We use this data to verify bank accounts, process withdrawals, maintain settlement records, and prevent fraud. Flipza will not ask for your online banking password or bank card PIN. Images and User Content Profile images and gift card images you choose to select or capture. Customer support requests, attachments, and communication records. Notes or other content you voluntarily submit through the Service. Device, Network, and Usage Data Device model, operating system and app version, language, and country settings. IP address, request time, login and security events, errors, and diagnostic information. Product interaction records needed to protect accounts, troubleshoot issues, and prevent misuse. The current version does not access or collect precise location, contacts, microphone data, or advertising identifiers for advertising purposes, and we do not use your data to track you across apps or websites owned by other companies. If our practices change, we will update this Policy and obtain permission where required. 3. Camera and Photo Access Flipza requests system permission only when you choose to use these features: Camera: to take a profile photo or gift card images for transaction submission and verification. Photos: to select a profile photo or gift card images from your photo library. Refusing camera or photo access does not prevent you from using unrelated features, but you may be unable to capture or select required images. You may revoke these permissions at any time in iOS Settings. Revoking device permission does not automatically delete data previously uploaded; you may request deletion as described in Section 9. 4. How We Collect Data We collect data: Directly from you when you register, complete your profile, add a bank account, submit a gift card, or contact support. Automatically when you use the Service, such as basic login, security, and diagnostic records. From service providers engaged for bank account verification, settlement, cloud storage, security, or legal compliance. From lawful sources, where permitted, to investigate fraud, disputes, or illegal activity. 5. How and Why We Use Data Depending on the circumstances, we process data to perform our contract with you, based on your consent, for our legitimate interests, or to comply with legal obligations. We use data to: Create, verify, and maintain accounts and authenticate logins. Provide quotes, receive transaction materials, review submissions, and process gift card orders. Manage wallet balances, rewards, bank accounts, and withdrawals. Send verification codes, transaction updates, security alerts, and essential service notices. Provide customer support and handle complaints, refunds, or disputes. Detect duplicate accounts, fraud, abuse, unauthorized access, and other security risks. Maintain, troubleshoot, and improve the reliability and performance of the Service. Maintain business and transaction records and comply with accounting, tax, anti-fraud, anti-money laundering, consumer protection, regulatory, and judicial requirements. Establish, exercise, or defend legal claims. We do not sell your personal data and do not use it for third-party targeted advertising or cross-app or cross-website tracking. 6. Sharing and Disclosure We share data only as necessary for the purposes described above. Recipients may include: Cloud hosting, object storage, and technical service providers that run servers, store uploaded images, transmit data, monitor security, or troubleshoot the Service. Banks, bank account verification providers, and settlement providers that verify account holder information, process withdrawals, and complete settlements. Customer support providers, professional advisers, and auditors that help handle support requests, disputes, legal, accounting, or compliance matters. Government authorities, regulators, courts, or law enforcement when required by law, valid legal process, or as necessary to protect users, the public, or lawful rights. Parties to a corporate transaction such as a merger, acquisition, reorganization, or asset transfer, subject to reasonable measures to maintain protection consistent with or no less protective than this Policy. We require service providers processing personal data on our behalf to use it only for agreed purposes, maintain appropriate security, and provide the same or an equivalent level of protection required by this Policy and applicable law. We do not disclose personal data to unrelated third parties unless permitted or required by law. 7. International Data Transfers Because we operate from Taiwan and users and technical, cloud storage, or settlement providers may be located in other countries, your data may be transferred to and processed outside your country or region. Data protection rules may differ between jurisdictions. For international transfers, we use safeguards recognized under applicable law, such as data processing agreements, contractual protections, access controls, encryption, or other appropriate measures, and transfer only data needed for the relevant purpose. 8. Data Retention We retain personal data only for the shortest period reasonably necessary for the purposes described in this Policy: Account data is generally retained while your account remains active. Gift card, order, wallet, bank verification, and withdrawal records are retained as needed to complete transactions, resolve disputes, prevent fraud, and satisfy accounting, tax, or other legal obligations. Customer support records are retained as needed to handle requests, review service quality, and resolve potential disputes. Security and diagnostic records are retained as needed to secure the Service and troubleshoot issues. If you remove a bank account or withdraw optional profile data, we delete or de-identify that data from ordinary business systems, but records connected to completed transactions may be retained as required by law. When the applicable retention period ends, we delete or irreversibly anonymize the data. Copies in backups are removed through the normal backup rotation cycle. If law, regulatory requirements, pending disputes, fraud investigations, or legal claims require longer retention, we retain data only to the extent necessary for those purposes. 9. Your Rights and Choices Subject to applicable law, you may request to: Be informed about how we process your personal data. Access or receive a copy of your personal data. Correct inaccurate or incomplete data. Delete your personal data or account. Restrict or object to certain processing. Receive portable data where the right applies. Withdraw consent for processing based on consent, without affecting processing already lawfully performed. Object to a decision based solely on automated processing that produces legal or similarly significant effects and request human intervention. Lodge a complaint with a competent data protection authority. Users in Nigeria may complain to the Nigeria Data Protection Commission (NDPC). Managing Your Data Update editable account or bank information in the app. Revoke camera or photo permission in iOS Settings. Select Profile/Settings > Delete Account and complete email verification to request account deletion. Email NatividadGarcilazo334@outlook.com with a privacy request. To protect you from impersonation, we may request reasonable identity or account verification. We will respond within the period required by applicable law. Following account deletion, account access will be disabled, and related personal data will be deleted or irreversibly anonymized, except for transaction, anti-fraud, dispute, or compliance records we are legally required or permitted to retain. 10. Data Security We use administrative, technical, and physical safeguards appropriate to the nature and risk of the data, including transmission protection, access controls, authentication, logging and monitoring, service provider controls, and data minimization. No internet transmission or electronic storage method can be guaranteed to be completely secure. Keep your password, PIN, email verification codes, and device secure. If you suspect unauthorized access to your account or personal data, contact us promptly using the email below. 11. Children's Privacy Flipza provides services involving gift card transactions and financial settlement and is not intended for anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided data to us, contact us. After verification, we will take appropriate steps to delete the data and close the relevant account. 12. Third-Party Links and Services Flipza may display links to websites, banks, or services operated by third parties. This Policy does not govern processing independently determined by those third parties. Review their privacy policies before providing data. Your use of a third-party link does not authorize that party to use your Flipza data for unrelated advertising tracking. 13. Changes to This Policy We may update this Policy when our features, data practices, or legal requirements change. If a change materially affects your rights or how we use data, we will provide notice through the app, a service notice, or another appropriate method and obtain consent again where required. The latest update date appears at the top of this Policy. 14. Contact Us For questions, complaints, or requests concerning this Policy or your personal data, contact: KING-BEST ENTERPRISES CO., LTD 5F, No. 5, Sha Lun Rd., New Taipei City, Taiwan NatividadGarcilazo334@outlook.com Use the subject line “Flipza Privacy Request” and state the type of request and the email associated with your account. Do not email passwords, PINs, complete gift card numbers, or online banking credentials.