Last updated: January 2025 · Effective for all G-max users
1. Information We Collect
When you create an account and use G-max, we collect the following information:
- Account Information — Username, email address, and password (encrypted with bcrypt).
- Transaction Data — Deposit records, order history, wallet balances, and payment references.
- Usage Data — Pages visited, actions taken, and timestamps for security and audit purposes.
- Technical Data — IP address, browser type, and device information collected automatically.
- Google Data — If you sign in with Google, we receive your name, email, and profile picture from Google.
2. How We Use Your Information
- To create and manage your account securely.
- To process orders and manage your wallet balance.
- To send transactional emails — verification codes, receipts, and order updates.
- To detect and prevent fraud, unauthorized access, and abuse.
- To improve our platform and user experience.
- To comply with legal and regulatory obligations.
3. Information Sharing
We do NOT sell, rent, or trade your personal information to third parties.
Your data is yours. We only share information in these limited cases:
- Payment Processors — Paystack and Flutterwave receive only the data needed to verify transactions (email, amount, reference).
- Legal Requirements — We may disclose data if required by a court order or Nigerian law.
- Service Providers — SMMRaja receives only the service ID, link, and quantity needed to fulfil your orders — never your personal details.
4. Data Security
We take security seriously and implement the following protections:
- Passwords hashed with bcrypt (cost factor 12) — never stored in plain text.
- All traffic encrypted via HTTPS/SSL on gmaxboost.com.
- CSRF tokens on every form to prevent cross-site request forgery.
- Session-based authentication with HttpOnly, SameSite cookies.
- Regular activity logging to detect suspicious behaviour.
No system is 100% secure. We recommend using a strong, unique password and enabling any available security features.
5. Cookies
We use only essential session cookies required for login and site functionality. We do NOT use tracking cookies, analytics cookies, or third-party advertising cookies.
6. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for fraud prevention.
7. Your Rights
- View and update your personal information via your Profile page.
- Request a copy of your data by contacting support.
- Request deletion of your account and data at any time.
- Opt out of non-essential communications (though transactional emails cannot be disabled).
8. Contact Us
For any privacy concerns or data requests, contact us:
We aim to respond to all privacy enquiries within 5 business days.