Privacy Policy

Glo Key Digital Ltd (“Glo Key”, “we”, “us”, or “our”) is committed to protecting your personal information in full accordance with the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles (IPPs). This Privacy Policy explains what minimal information we collect during guest checkout, why we collect it, how we safeguard it, and how you can exercise your statutory rights.

1. Minimal Personal Information We Collect (IPP 1–4)

Glo Key operates a privacy-first guest checkout model. You do not need to create a permanent password account or submit credit card numbers to purchase digital gift cards or game top-ups:

• Delivery & Order Contact Details: Your name, delivery email address (used strictly to dispatch your digital gift card codes and order receipts), and optional NZ phone number if provided for high-value fulfilment support.
• Game Top-Up Identifiers: Where you purchase a direct game top-up (delivery_type = game_topup), we collect your designated Player UID, Riot ID, or Server Zone solely to credit your account.
• Public Blockchain Settlement Data: Your BNB Smart Chain (BEP20) transaction hash (txHash), sending wallet address, block number, and USDT amount verified via BSC JSON-RPC nodes.
• Support Enquiries: Information you voluntarily submit via our Contact Glo Key NZ Support Form or email to support@glokey.nz.

2. How We Use Your Information (IPP 10)

We use collected information exclusively for lawful, directly related operational purposes:

1. Verifying your on-chain USDT (BEP20) payment on BNB Smart Chain (Chain ID 56) and preventing duplicate txHash replay fraud.
2. Delivering decrypted NZD gift card PINs or crediting your nominated Game Account / UID.
3. Sending transactional order confirmations and fulfilment updates via Resend HTTP API.
4. Maintaining statutory tax and accounting records required under New Zealand Inland Revenue (IRD) regulations.

3. Encryption, Storage & Security Safeguards (IPP 5)

All payment verification metadata and digital gift card vault entries are protected using authenticated AES-256-GCM encryption inside Cloudflare’s edge infrastructure (Cloudflare Workers & D1 SQLite). Transport-layer communications across glokey.nz are enforced over HTTPS / TLS 1.3.

4. Overseas Service Providers & Disclosure (IPP 11 & IPP 12)

We never sell, rent, or trade customer email addresses or wallet histories. Limited operational data is processed only by trusted infrastructure providers bound by strict security controls:

• Cloudflare, Inc. — Edge hosting, DDoS protection, and encrypted D1 database storage.
• Resend — Transactional email delivery of your digital voucher codes and tax receipts.
• BNB Smart Chain Public RPC Nodes — Read-only verification of public eth_getTransactionReceipt records.

5. Cookies & Local Browser Storage

Glo Key uses zero cross-site behavioural advertising cookies and requires no account registration for instant direct USDT (BEP20) checkout.

6. Access, Correction & Privacy Officer Contact (IPP 6 & IPP 7)

Under Principles 6 and 7 of the New Zealand Privacy Act 2020, you have the right to request access to personal information we hold about you and to request correction of any inaccurate details. Contact our Privacy Officer at:

Privacy Officer — Glo Key Digital Ltd
Level 4, 152 Quay Street, Auckland CBD, Auckland 1010, New Zealand
Email: support@glokey.nz • Phone: +64 9 889 4120

If you are not satisfied with our response to a privacy concern, you may also contact the Office of the New Zealand Privacy Commissioner (privacy.org.nz).