Privacy Policy

1. Who We Are

Galaxy ("we", "us", "our", or "the Platform") operates the digital earning and task marketplace available at digitalminer.net. We are the data controller responsible for the personal information collected through this website and associated mobile experiences.

This Privacy Policy applies to all users of the Platform — whether you are a registered member, a visitor browsing our public pages, or a business contact. It describes in detail what personal data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over it.

We are committed to handling your personal information in accordance with applicable data protection laws and to being transparent about our practices. We believe you should know exactly what happens to your data, in plain language, without having to read pages of legal jargon to find the answer.

By creating an account, depositing funds, completing tasks, or otherwise using any part of our Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of This Policy

This Privacy Policy covers all services offered through digitalminer.net, including but not limited to:

• The user registration, login, and account management system.
• The task marketplace — browsing tasks, submitting proof, and receiving rewards.
• Investment plan management — depositing, earning daily returns, and plan maturity.
• The withdrawal system — requesting and receiving crypto payouts.
• The referral programme — sharing links and receiving commission.
• The binary trading feature — placing directional trades on crypto and commodity prices.
• Spin the wheel, lottery, and bonus features.
• Live support chat and the helpdesk ticketing system.
• In-platform notifications (bell, Telegram, email, and web push).
• KYC identity verification when required by our compliance team.

This policy does not cover third-party websites or services linked from our Platform, including payment processors or social networks. We encourage you to review the privacy policies of any third-party services you use.

3. Information We Collect

We collect information in three main ways: information you give us directly, information generated automatically by your use of the Platform, and information received from third parties.

3.1 Information You Provide Directly

• Registration data — your full name, email address, and a password of your choosing. This is the minimum required to create an account.
• Profile information — your preferred display currency, country of residence, and any optional profile details you choose to add.
• KYC / identity verification documents — if our compliance team requests identity verification (for withdrawals above certain thresholds or for fraud investigation), you may be asked to provide a government-issued photo ID, a selfie, and/or proof of address. These documents are handled with the highest level of care and stored securely.
• Financial information — when you deposit funds, we record the transaction amount, the payment method used, and the reference number assigned by the payment processor. We do not directly store full card numbers or bank account details; all card/bank data is handled exclusively by our payment processor (Paystack, OxaPay, or similar authorised providers).
• Withdrawal wallet addresses — the cryptocurrency wallet address you provide when requesting a withdrawal. This is required to send your funds to you.
• Task submissions — screenshots, URLs, and any written content you submit as proof of task completion.
• Support communications — messages you send through our live chat, helpdesk tickets, or any email you send to us. We retain these to resolve your issue and to improve support quality.
• Two-factor authentication data — if you enable 2FA, we store the TOTP secret required to verify your identity at login.
• Telegram account details — if you link your Telegram account for notifications, we store your Telegram Chat ID (a numeric identifier) solely to send you platform notifications.
• Feedback and survey responses — if you participate in optional surveys, rate a task, or submit feedback, we collect those responses.

3.2 Information Collected Automatically

• Log data — every time you access the Platform, our servers automatically record your IP address, the date and time of access, the pages or resources requested, the HTTP response code, and the referrer URL.
• Device and browser information — the type of device you use, your operating system, browser name and version, screen resolution, and preferred language. This helps us ensure the Platform works correctly on your device.
• Session data — information about your current session, including login time, last activity time, and session token. We use this to keep you securely logged in and to detect and terminate suspicious sessions.
• Security events — login attempts (successful and failed), password changes, two-factor authentication events, and other security-relevant actions. These are recorded in a security log visible to you in your account.
• Transaction and activity history — every credit, debit, deposit, withdrawal, task submission, trade, spin, and investment action is permanently logged in our ledger for audit, compliance, and dispute resolution purposes.
• Geolocation data — we derive approximate country and city information from your IP address using a geolocation database. We do not use GPS or precise location tracking. Geolocation is used for fraud detection, regulatory compliance, and to display localised content.
• Referral tracking — if you arrived at the Platform via a referral link, we record the referrer's ID to attribute the referral correctly.

3.3 Information from Third Parties

• Payment processors — when a payment is confirmed or fails, our payment processors send us a notification (webhook) containing the transaction status, amount, and reference number. We do not receive raw card or bank details from them.
• Crypto network data — for crypto deposits, we may receive blockchain confirmation data from the relevant network to confirm receipt of funds.
• Market data providers — for trading features, we receive live price data from Binance, CoinGecko, and similar public market data APIs. This data is not linked to your personal information.

4. Legal Basis for Processing

Where applicable data protection law requires us to identify a legal basis for each type of processing, we rely on the following:

5. How We Use Your Information

We use the information we collect for the following specific purposes:

5.1 Providing the Platform

• Creating and maintaining your account, including storing your balance and transaction history.
• Authenticating your identity at each login, including 2FA verification where enabled.
• Processing your deposits and routing funds to the correct wallet account.
• Crediting task rewards after admin review or automatic approval.
• Calculating and crediting daily investment returns and principal repayments.
• Processing withdrawal requests and sending funds to your specified crypto wallet address.
• Tracking referral links and crediting commissions to referrers accurately.

5.2 Communications

• Sending essential transactional emails — deposit confirmations, withdrawal approvals/rejections, task approval/rejection notices, security alerts for password or email changes.
• Sending in-platform notifications via the notification bell, Telegram, and web push (where you have granted permission).
• Responding to your support requests via live chat or helpdesk tickets.
• Sending optional weekly earnings digest emails to keep you engaged (opt-out available any time).
• Sending service announcements for major platform changes, scheduled maintenance, or emergency security notices.

5.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions, bot activity, multi-accounting, and abuse of the rewards system.
• Maintaining a security event log that you can review at any time to spot unauthorised access.
• Verifying your identity through KYC when withdrawal thresholds or risk signals trigger a review.
• Analysing IP addresses, devices, and behavioural patterns to identify suspicious activity.
• Enforcing our one-account-per-person policy and identifying duplicate registrations.

5.4 Compliance and Legal

• Complying with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Responding to lawful requests from law enforcement or regulatory authorities.
• Maintaining transaction records for the legally required retention periods.
• Resolving disputes, enforcing our Terms of Service, and protecting our legal rights.

5.5 Platform Improvement

• Analysing aggregated, anonymised usage patterns to understand which features are most used and to identify areas for improvement.
• Debugging technical errors using log data and error reports.
• Testing new features with subsets of users (A/B testing) based on anonymised cohorts.

We will never use your personal data for purposes incompatible with those listed above without first obtaining your consent or having another lawful basis.

6. Automated Decision-Making and Profiling

Some of our fraud-detection and risk-assessment processes involve automated analysis of your account activity — for example, flagging unusual login patterns, comparing your device fingerprint to previously seen sessions, or identifying behavioural signals consistent with bot activity.

Where an automated process results in a material decision about your account (such as a temporary account hold), you have the right to request a manual review by our team. Contact support and we will assign a human reviewer to your case within 48 hours.

We do not use your personal data to build advertising profiles or to make predictions about your creditworthiness outside the Platform context.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device by your browser. They allow the Platform to recognise your browser across requests and sessions. Similar technologies include local storage (used by our dark/light theme preference), session storage, and web push subscription tokens.

7.2 Cookies We Use

7.3 What We Do Not Use

We do not use third-party advertising cookies, Google Analytics, Facebook Pixel, or any other cross-site tracking technology. We do not sell or broker access to your browsing behaviour. The only analytics we perform is on aggregated, anonymised server logs that we process ourselves.

7.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to view, delete, or block cookies on a per-site basis. However, blocking the session cookie will prevent you from logging in. You can revoke web push notification permission at any time in your browser's site settings.

8. How We Share Your Information

We do not sell, rent, or trade your personal data to any third party for their own commercial purposes — ever.

We may share your information in the following limited circumstances:

8.1 Payment Processors

To process deposits, we pass transaction data to our authorised payment processors (currently Paystack and OxaPay). These processors receive the minimum information necessary to process the payment and are bound by their own strict privacy and security standards. We do not share your full financial data beyond what is required for the specific transaction.

8.2 Email and Notification Providers

To deliver transactional and notification emails, we use an SMTP email relay. Your email address and the content of the email are processed by this provider solely to deliver the message. We do not share your profile or financial data with email providers.

8.3 Telegram

If you link your Telegram account, we use Telegram's Bot API to send you notification messages. We share only your Telegram Chat ID (provided by you) and the notification content. We do not share your email, balance, or transaction history with Telegram.

8.4 Hosting and Infrastructure

Our Platform is hosted on shared web hosting servers. Server administrators may have technical access to the underlying database for maintenance purposes. We use access controls and server-level security to limit this exposure.

8.5 Legal Requirements

We may disclose your personal information if we are required to do so by law, court order, subpoena, or lawful request by a public authority. We will, where permitted, notify you of any such request before disclosing your data. We will not disclose your data in response to informal or unverified requests.

8.6 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of our business, your personal data may be transferred to the new entity as part of the transaction. We will notify registered users of any such transfer and any resulting changes to this Privacy Policy at least 30 days in advance.

8.7 Aggregated and Anonymised Data

We may share aggregated, anonymised statistics about Platform usage (e.g. total number of users, total withdrawals paid out) publicly for marketing purposes. Such data cannot be used to identify any individual user.

9. International Data Transfers

Our Platform serves users globally. Your personal data may be stored on servers located in different countries. Whenever your data is transferred across international borders, we ensure that appropriate safeguards are in place — whether through the use of standard contractual clauses, adequacy decisions, or other recognised legal mechanisms.

By using the Platform, you consent to your data being transferred and stored in the countries where our hosting and service providers operate, subject to the protections described in this policy.

10. Data Retention

We retain different categories of data for different periods, based on operational need and legal obligation:

After the applicable retention period, data is securely deleted or anonymised. Anonymised data that cannot be traced back to you may be retained indefinitely for statistical purposes.

11. Security

We take the security of your personal data seriously and implement multiple layers of protection:

• Encryption in transit — all communications between your browser and our servers are encrypted using HTTPS / TLS. We enforce HTTPS-only access and use HSTS headers to prevent downgrade attacks.
• Password hashing — your password is never stored in plain text. We use the bcrypt algorithm with a high work factor to hash passwords, meaning even if our database were compromised, your password would be computationally infeasible to recover.
• Two-factor authentication — we offer optional TOTP-based 2FA. We strongly recommend enabling it in your account settings.
• Session management — each login creates a unique session token. You can view and terminate all active sessions from your account. Sessions expire after a period of inactivity.
• CSRF protection — all form submissions and API calls include a CSRF token to prevent cross-site request forgery attacks.
• Rate limiting — repeated failed login attempts and API abuse are rate-limited and flagged for review.
• Security headers — we apply standard security headers (Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy) to all responses.
• Access controls — database access is restricted by role. Our admin panel uses multi-layer authentication. Support staff can only access the information required to do their job.
• Dependency security — we regularly update our dependencies and monitor for known vulnerabilities.

Despite these measures, no internet-based service can guarantee absolute security. You are responsible for keeping your own login credentials secure, using a strong unique password, enabling 2FA, and logging out on shared devices. If you believe your account has been compromised, contact support immediately.

12. Your Rights

Depending on where you are located, you may have some or all of the following rights over your personal data:

13. Exercising Your Rights

To exercise any of the rights listed above:

• Open the live support chat in your account dashboard and send us a request describing the right you wish to exercise.
• We will acknowledge your request within 48 hours and respond in full within 30 days.
• We may need to verify your identity before processing your request to ensure we are speaking with the account holder.
• All rights requests are free of charge. We will only charge a fee if your request is manifestly unfounded or excessive.

If you believe we have not handled your personal data correctly and you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.

14. Children's Privacy

The Platform is strictly intended for users aged 18 years and older. We do not knowingly collect, store, or process personal data from anyone under the age of 18. Our registration process includes a declaration of age, and we rely on that declaration in good faith.

If we become aware that a user under the age of 18 has registered on the Platform, we will promptly close the account, delete all associated personal data, and reverse any transactions. If you are a parent or guardian and believe your child has created an account, please contact us immediately through the support chat.

15. Third-Party Links

The Platform may contain links to external websites, task targets, news articles, and other third-party content. We are not responsible for the privacy practices of any third-party website. When you click a link to an external site, you leave the Platform and that site's own privacy policy applies.

We do not endorse or make any representations about third-party websites linked from task descriptions. Always review the privacy policy of any site before submitting your personal information.

16. Push Notifications and Telegram

Web push notifications — if you grant permission, our service worker sends real-time browser notifications for events like task approvals, withdrawal processing, and prize wins. You can revoke permission at any time in your browser settings (Settings → Site Permissions → Notifications → digitalminer.net → Block).

Telegram notifications — if you link your Telegram account via the Settings page, we use the Telegram Bot API to send you the same notifications described above. To stop Telegram notifications, visit Settings → Telegram and disconnect your account. You can also block our bot directly in Telegram.

All notifications are transactional — they relate to your account activity. We do not send promotional spam through push or Telegram channels.

17. Marketing Emails and Opt-Out

In addition to essential transactional emails (which cannot be opted out of without closing your account), we may send optional marketing communications, such as weekly earnings digest emails, platform announcements, and promotional campaign notifications.

You may opt out of marketing emails at any time by clicking the unsubscribe link at the bottom of any marketing email, or by contacting support and requesting to be removed from our marketing list. Opting out will not affect transactional emails related to your account activity (deposits, withdrawals, security alerts).

We maintain a suppression list of email addresses that have opted out. If you opt out and later re-register with the same email, your opt-out preference is preserved unless you explicitly re-subscribe.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or best practices. The "Last updated" date at the top of this page will always show when it was most recently revised.

For material changes — meaning changes that significantly affect how we collect or use your data — we will provide at least 14 days' advance notice via:

• An email sent to your registered email address.
• A prominent banner on the Platform when you next log in.
• A notice in the in-platform announcements section.

Continued use of the Platform after a policy change takes effect constitutes your acceptance of the updated policy. If you do not agree with a material change, you may close your account before the change takes effect by contacting support.

For minor changes (e.g. clarifying wording, correcting errors, adding details about existing practices), we may update the policy without prior notice but will always update the date.

19. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through one of the following channels:

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the appropriate data protection authority in your country of residence. We will always cooperate fully with any such authority.