Account and Data Deletion

Version 1.0 · Effective date: 10 September 2026

This page explains how to delete your Magic account and what happens to your data. It is referred to from the Google Play listing for Magic, published by ATLAS PAY LIMITED.

1. Before you start — withdraw your money

1.1 Deleting your account does not send you your balance.

1.2 Withdraw your United States dollar balance to a blockchain address you control before you request deletion. If you delete the account with a balance still on it, see section 6.

2. How to request deletion

2.1 From inside the application: Profile → Settings → Delete account.

2.2 You will be asked to confirm with your PIN. We require the PIN rather than an emailed code because closing an account is not something that should be possible with someone else's phone.

2.3 Two things stop the deletion, and the application tells you which:

• An active card. Close the card first. While it is live, a purchase or a refund can still arrive on it.
• A balance you can still withdraw. Withdraw it first. See section 1.

2.4 Without the application. If you cannot sign in, or you have already uninstalled the Magic application, write to privacy@magiccard.me from the email address registered to the account, with the subject "Account deletion".

2.5 We will ask you to confirm your identity before we act. We will not delete an account on the word of someone who cannot show it is theirs — that protection exists for you.

3. How long it takes

4. What is deleted

• your ability to sign in, and your session on every device;
• your name, your email address and your telephone number — the email address is replaced by a marker at a domain that does not exist, because our database will not hold an account with no way in at all;
• your PIN record;
• your profile photograph;
• your link to Telegram, if you had one;
• your payment code, so that a code you may have shared leads nowhere; and
• your push notification token and your device records.

5. What is retained, for how long, and why

5.1 We are required to keep records of customer due diligence and of transactions for at least six years after a business relationship ends. This period is taken from Hong Kong's Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615), which we apply as our standard.

5.2 After deletion we therefore retain:

5.3 How these records are kept. We remove or replace direct identifiers so that the records cannot be read as being about you by someone looking at them.

5.4 We want to be straightforward about what that means. This is de-identification, not irreversible anonymisation. Where a court, a regulator or an auditor lawfully requires us to reconstruct a record, we may be able to do so. Records that can still be re-identified are still personal data, and everything in our Privacy Policy continues to apply to them — including how they are secured and your rights over them.

5.5 At the end of the six-year period these records are not erased. Six years is a minimum, not an expiry date. Our financial ledger is append-only — an entry, once written, is never removed or rewritten — so what happens instead is that we strip identifiers further wherever we can do so without destroying the accounting entry itself. We would rather tell you this than promise a deletion that our books cannot perform.

5.6 Where a court order, a regulatory requirement or an ongoing investigation applies, we keep the record in full until that requirement ends.

6. If there is still money on your account

6.1 If the balance is large enough to withdraw, the application will not let you delete the account until you have withdrawn it. Withdraw it to an address you control, then delete.

6.2 If the balance is smaller than the minimum withdrawal, you cannot withdraw it — no network will carry it. Rather than leave you unable to close your account, we let you delete it and give up that remainder. In that case:

• The application shows you the exact amount that will be lost and asks you to confirm it.
• Nothing is written off unless you confirm that amount. If the balance changes between the moment we show you the number and the moment you confirm — a deposit arrives, for instance — the deletion stops and you are shown the new figure.
• Once confirmed, the remainder is written off and the claim to it ends.

6.3 We would rather tell you plainly that a few dollars are forfeited than trap you in an account you cannot close.

6.4 If you close your account by writing to us and a balance remains that can be withdrawn, we hold it for you and return it to an address you control once we have verified your identity, as set out in clause 13.6 of the Terms of Service. Where the law prohibits us from returning funds — for example under sanctions rules — we will not return them, and we will tell you so where we are permitted to.

7. Deleting part of your data instead

7.1 You do not have to delete the whole account. You may ask us to:

• correct data that is wrong;
• delete your profile photograph or your saved withdrawal addresses;
• withdraw your consent to biometric processing — note that this will usually mean the account is closed, because identity verification is a condition of the funded services; or
• receive a copy of the data we hold about you.

7.2 Write to privacy@magiccard.me. Section 11 of the Privacy Policy sets out your rights in full.

8. Opening a new account later

Deleting an account does not prevent you opening a new one, subject to eligibility and to verification. The new account will be separate; nothing is carried over, including transaction history.

9. Contact

ATLAS PAY LIMITED, Unit 1603, 16/F, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong. Business Registration Number 79950367. Deletion and data rights: privacy@magiccard.me. Balance and account support: support@magiccard.me.