PRIVACY POLICY

Effective Date: March 1, 2026

Paradise Pay ("Paradise Pay," "we," "us," or "our"), operated by Wildcard Technologies Limited (the "Data Controller"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you access or use our website, mobile applications, and related services (collectively, the "Platform").

This Policy is drafted to comply with the Ghana Data Protection Act, 2012 (Act 843) and reflects widely accepted African and international data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

1. Scope

This Privacy Policy applies to:

• Visitors to the Platform.

• Registered users and ticket purchasers.

• Event organizers using Paradise Pay.

• Partners interacting with the Platform.

*By using the Platform, you acknowledge that you have read and understood this Policy.*

2. Information We Collect

We collect information necessary to operate an event ticketing and experience platform across Ghana and other African markets.

2.1 Personal Information You Provide

• Full name.

• Email address.

• Phone number (including mobile money–linked numbers).

• Date of birth (where required for age-restricted events).

• Government-issued identification (only where legally required).

2.2 Transaction and Usage Information

• Ticket purchase history and event attendance.

• Payment references and transaction IDs.

• Customer support communications.

• Device data, IP address, browser type, and log information.

2.3 Payment Information

Payments are processed by licensed third-party payment providers, including banks and mobile money operators. Paradise Pay does not store:

• Card numbers.

• Mobile money PINs.

• Wallet credentials.

3. How We Use Personal Information

We use personal data to:

• Provide, operate, and improve the Platform.

• Process ticket purchases and facilitate payments.

• Deliver digital tickets and event communications.

• Enable access control, fraud prevention, and security.

• Comply with legal, tax, and regulatory obligations.

• Communicate service updates and important notices.

*Marketing communications are sent only where permitted by law or with your consent. You may opt out at any time.*

4. Legal Basis for Processing

Under applicable data protection laws, we process personal data on one or more of the following grounds:

• Consent provided by you.

• Performance of a contract, including ticket purchases.

• Legal obligations under Ghanaian or other applicable laws.

• Legitimate interests that do not override your fundamental rights and freedoms.

5. Data Sharing and Disclosure

We may share personal data with:

• Event organizers (limited to data required to deliver events).

• Payment processors, banks, and mobile money operators.

• Technology, hosting, analytics, and customer support providers.

• Regulators, law enforcement, or public authorities where required by law.

*All third parties are required to process data securely and only for specified purposes.*

6. Cross-Border Data Transfers

Paradise Pay operates across multiple African markets. Personal data may be processed or stored outside your country of residence.

Where cross-border transfers occur, we implement appropriate safeguards consistent with the Ghana Data Protection Act and applicable regional standards to ensure continued protection of your data.

7. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil the purposes outlined in this Policy.

• Meet contractual, accounting, or regulatory requirements.

Data that is no longer required is securely deleted, anonymized, or archived in accordance with applicable law.

8. Your Data Protection Rights

Subject to applicable law, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete data.

• Request deletion or restriction of processing.

• Withdraw consent where processing is consent-based.

• Object to certain forms of processing.

• Lodge a complaint with the Data Protection Commission of Ghana or another competent authority.

Requests may be submitted using the contact details below.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access.

• Accidental loss or destruction.

• Misuse, alteration, or disclosure.

*Despite these measures, no system is completely secure, and we cannot guarantee absolute security.*

10. Cookies and Similar Technologies

Paradise Pay uses cookies and similar technologies to:

• Enable core platform functionality.

• Analyze usage patterns.

• Improve performance and user experience.

You may manage cookie preferences through your browser or device settings.

11. Children’s Privacy

The Platform is not intended for children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, or our operations. Updates will be posted on the Platform with a revised effective date.

13. Contact Information