1. Data We Collect
To operate the Service, we collect the following data:
- Transaction data: game User ID, Server ID, phone number, purchase amount, payment method.
- Account data (optional): name, email, phone number provided during account registration.
- Technical data: IP address, browser user agent, access logs for security purposes.
- Device data: device type, operating system, screen resolution (anonymous).
2. Purpose of Data Use
Data is used strictly for:
- Processing transactions and delivering digital products to the correct account.
- Sending transaction status notifications via WhatsApp or email.
- Detecting and preventing fraud, money laundering, or abuse.
- Improving service quality through aggregate (anonymous) analytics.
3. Sharing Data with Third Parties
We do NOT sell your personal data. Data is only shared with:
- Game publishers (Moonton, Garena, HoYoverse, etc.) — limited to the User ID for delivery validation.
- Payment gateway (Dinger Asia) — in accordance with PCI-DSS requirements.
- Legal authorities — when there is a legally valid official request.
4. Cookies & Tracking
We use essential cookies to maintain login sessions and store preferences (language, theme). Analytics cookies (Google Analytics, Meta Pixel) are used to understand visitor behavior in aggregate.
You can disable cookies through your browser settings, but some features may not work optimally.
5. Data Security
Data is transmitted with TLS 1.3 encryption, stored encrypted at-rest with AES-256, and accessed on a least-privilege basis. Security audits are conducted quarterly by an independent third party.
Nonetheless, no system is 100% invulnerable. In the event of a data breach incident, we will notify affected users within 72 hours in accordance with applicable law.
6. Data Retention
Transaction data is retained for 5 years for tax compliance and auditing. Active account data is retained while the account has not been deleted. After account deletion, data is permanently removed within 30 days unless retention is required by law.
7. User Rights
Under applicable data protection laws, you have the right to:
- Access and request a copy of the personal data we hold.
- Correct inaccurate or incomplete data.
- Request data deletion (right to be forgotten).
- Withdraw consent for data processing at any time.
- Object to the processing of your data.
8. Children's Privacy
The Service is not intended for children under 13 years of age. If we become aware that data has been collected from a child under that age without parental consent, the data will be deleted promptly.
9. Policy Changes
This policy may be updated from time to time. Material changes will be announced via email or a banner on the site at least 14 days before taking effect.
10. Data Protection Officer Contact
For privacy questions or to exercise your data rights, contact: