Privacy policy

1. Information we collect

We only collect what we need to deliver your orders and keep the service safe.

• Order details: the game, package and price, the game account details you enter (such as Player ID, Server ID, Riot ID or username), the in-game name the game returns, and the order number.
• Account details, if you create an account: username, email address and password. Your password is stored only in protected (hashed) form by our sign-in provider; we can't read it.
• Wallet: your balance and the history of money added and spent.
• Payment information from ABA PayWay or Bakong: the transaction reference, amount, status and the account it was paid to and from. We never see or store your card number or bank login.
• Messages you send our support team, by Telegram, email or other channels.
• Technical information: IP address, browser and device type, and server logs, used for security and to prevent fraud.

We never ask for your game account password. Never share it with anyone, including people claiming to be us.

2. How we use it

• to process your payment and deliver your top-up;
• to show your order status and history, and manage your account and wallet;
• to answer support requests, and to investigate failed or disputed orders;
• to prevent fraud, abuse and unauthorised access;
• to keep the records that accounting and tax rules require;
• to improve the service, for example by fixing errors.

3. Who we share it with

We don't sell your personal data. We share only what each partner needs to do its job:

• Top-up suppliers receive your game account details and the package, to deliver the order.
• ABA PayWay, Bakong (National Bank of Cambodia) and the banks in the KHQR network receive the amount and order reference, to process and confirm the payment.
• Service providers that run the website for us: hosting and security (Cloudflare), database and sign-in (Supabase), and the messaging service our team uses for order alerts.
• Authorities, when the law requires it.

4. Where your data is stored

Our service providers store data on servers that may be outside Cambodia, including elsewhere in Asia. By using the service, you understand that your information may be processed in those countries.

5. How long we keep it

We keep order and payment records for as long as accounting and tax rules require, and to handle disputes. Account details are kept while your account is open. When you close your account, we delete or anonymise your personal data, except for records we must keep by law.

6. Security

The whole site uses HTTPS encryption. Passwords are hashed, sign-in attempts and other sensitive actions are rate-limited, and only authorised staff can see order data. No system is completely secure, but we work to protect your information and will act quickly if something goes wrong.

7. Cookies

We use a few cookies and similar browser storage to keep you signed in and remember your preferences. We don't use advertising or tracking cookies. See our Cookie policy for the full list.

8. Your rights

You can ask us to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your account and personal data, except records we must keep by law;
• stop a use of your data you object to, where we have no overriding reason to continue.

Contact us using the details below. We may ask you to prove the account is yours, and we reply within 30 days.

9. Children

Our service isn't meant for children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.

10. Changes to this policy

If we change how we handle your data, we will update this page and its date. For important changes, we will also show a notice on the website.

11. Contact