Privacy Policy

Last updated: 7 November 2026 · Issued under the Personal Data Protection Act 2010 (Malaysia)

(Registration No. ) is the data controller for personal data collected through this website.

1. What we collect

Order details: email address, optional phone number, items purchased, order amount.
Game account details: the game ID and server you enter for top-ups. We need these to deliver your order.
Technical data: a hashed form of your IP address and browser information, used only for fraud prevention. We do not store your raw IP address alongside your order.
Payment data: handled entirely by our licensed payment provider. We receive only a confirmation that payment succeeded, plus a transaction reference. We never receive your card number or online-banking credentials.

2. Why we collect it

To process and deliver your order, and to send you your codes and receipt.
To answer support requests and resolve disputes.
To prevent fraud, chargebacks and abuse.
To meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not send marketing emails unless you separately opt in.

3. Who we share it with

Our payment provider — to take payment and to handle refunds and chargeback disputes.
Our email delivery provider — to send your codes and receipts.
Our hosting and infrastructure providers — who store data on our behalf under contract.
Authorities — where we are legally required to disclose.

4. Where your data is stored

Data is stored on infrastructure located outside Malaysia. We take reasonable steps to ensure any overseas recipient is bound by protections comparable to the PDPA.

5. How long we keep it

Order records are kept for seven (7) years to satisfy Malaysian accounting and tax requirements. Hashed fraud-prevention data is kept for twelve (12) months. You may ask us to delete your data earlier where we have no legal obligation to keep it.

6. Cookies and local storage

We use local storage in your browser to remember your cart and your language preference. We do not use advertising or cross-site tracking cookies. You can clear this at any time from your browser settings.

7. Your rights

Under the PDPA you have the right to:

request access to the personal data we hold about you;
request correction of inaccurate data;
withdraw consent, subject to our legal record-keeping obligations;
ask us to limit how your data is used.

To exercise any of these, email us with your order number. We respond within 21 days.

8. Security

The site is served over HTTPS. Access to order data is restricted to authorised staff. Passwords for our internal systems are stored as salted hashes, never in plain text.

9. Data breach

If a breach occurs that is likely to cause significant harm, we will notify affected individuals and the relevant authority without undue delay.

10. Children

This site is not directed at children under 13. If you believe a child has provided us personal data, contact us and we will delete it.