CediCash Privacy Policy

This Privacy Policy explains how CediCash collects, uses, stores, shares, protects, and otherwise processes personal information in connection with its website, mobile or digital channels, customer support interactions, promotional campaigns, and the Golden 15 game or any other game, draw, raffle, or prize-led promotion operated by the business.

This policy applies to participants, account holders, website visitors, winners, prospective winners, support users, charity representatives involved in approved charity processes, business partners where relevant, and any other individuals whose personal information is processed in the ordinary operation of the CediCash business.

CediCash acts as the data controller for the personal information described in this policy except where another party is clearly identified as the controller for a particular activity.

We process personal information to run the CediCash platform and to operate promotional campaigns including Golden 15 and related prize-led activities.

CediCash will process personal data only on valid lawful grounds and in line with the Data Protection Act, 2012 (Act 843) and related Ghana requirements. Depending on the context, those grounds may include performance of a contract with the participant, compliance with legal or regulatory obligations, protection of legitimate business interests that do not override individual rights, and consent where consent is the appropriate basis.

We do not sell personal information as a general commercial product. We may share personal data only where it is necessary and lawful to do so for the operation of the business or to meet legal obligations.

• Payment and financial service providers: to process ticket purchases, refunds, or payouts.
• Identity and compliance service providers: to verify age, identity, and regulatory integrity requirements.
• Technology and hosting providers: to support secure storage, infrastructure, analytics, and system operations.
• Professional advisers: such as legal, compliance, tax, audit, or risk professionals bound by confidentiality obligations.
• Regulators, law-enforcement, courts, or government bodies: where disclosure is required by law or is reasonably necessary for a lawful investigation or regulatory process.
• Brand or campaign partners: only where necessary for a jointly run campaign and in a way explained to the participant.

Where winner publicity is part of a campaign, CediCash will disclose only the level of information permitted by law, the applicable campaign rules, and the winner's consent or other lawful basis.

We retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected, or for longer where required by law, regulation, audit expectations, dispute resolution, fraud prevention, tax obligations, or record-keeping requirements for regulated promotions.

Subject to applicable law and any lawful limitations, individuals may have the right to request access to their personal information, request correction of inaccurate information, request deletion where deletion is appropriate, object to certain processing, withdraw consent where consent is the basis of processing, or complain about how information is handled.

Where CediCash cannot comply fully with a request because the information must be kept for legal, regulatory, fraud-prevention, or dispute-handling purposes, it will explain that limitation clearly.

You may also have the right to raise concerns with the Data Protection Commission of Ghana where you believe your rights have been infringed.

CediCash will implement appropriate technical and organizational safeguards to protect personal data against unauthorized access, disclosure, loss, alteration, or misuse. Those measures will include access control, authentication, secure transmission, record integrity controls, role-based permissions, vendor oversight, and incident-management procedures.

Because the business handles regulated participation, ticket identifiers, KYC data, and prize-payment information, security will be treated as a core operating function rather than only an IT function.

CediCash may use cookies and similar technologies to keep users signed in, remember session preferences, protect platform integrity, understand website performance, and improve product usability. These technologies may include essential cookies, security cookies, analytics tools, and limited functional tools needed for a digital ticketing platform.

If analytics or advertising technologies are used, we will disclose them accurately.

The Golden 15 terms set a minimum age of 18 years. CediCash therefore will not knowingly permit children to participate in the game or knowingly process children’s participation data for a game-of-chance activity. Where age restrictions apply, CediCash will use age-verification and eligibility controls as part of onboarding, payment, and winner verification.

If the business learns that a child has improperly submitted information in connection with a restricted activity, it will take appropriate steps under its internal compliance procedure and applicable law.

• Data Protection Commission of Ghana: https://www.dataprotection.org.gh/
• Guidelines to Demonstrate Data Protection Compliance: https://dataprotection.org.gh/wp-content/uploads/2025/07/GUIDELINES-TO-DEMONSTRATE-DATA-PROTECTION-COMPLIANCE.pdf
• Gaming Commission of Ghana, FAQs: https://www.gamingcommission.gov.gh/faqs/