Privacy Policy

Welcome to GameTopUp. We respect your privacy and take care to protect your personal information. This policy explains what we collect, why we collect it, and what choices you have.

By using our website and services you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

We collect only the information needed to provide our services. Typical categories:

• Account & contact: name, email, phone, hashed password, and support messages.
• Game details: BGMI UID, Free Fire player ID, nickname, and order history for top-ups.
• Payment & transaction: payment confirmation, transaction IDs, and billing info (we do not store full card/CVV).
• Technical & usage: IP address, device type, browser, logs, and basic analytics.
• Support attachments: screenshots or files you provide to help resolve an issue.

We avoid collecting unnecessary sensitive personal data unless you explicitly provide it for a specific purpose.

We use data to operate and improve our services. Key uses include:

• Processing orders and delivering in-game top-ups quickly and accurately.
• Verifying payments, preventing fraud, and resolving disputes.
• Running your account, sending important updates and order receipts.
• Improving the website, understanding usage, and debugging issues.
• Complying with legal obligations, tax or regulatory requirements when needed.

We do not sell your personal data to third-party marketers. Marketing messages (if any) can be opted out of.

We use cookies and similar technologies to provide core functionality and basic analytics.

• Essential cookies keep you logged in and remember your session.
• Performance cookies help us measure and improve the site.
• Security cookies are used for fraud detection and abuse prevention.

You can control cookies from your browser, but disabling essential cookies may break key features like login or order processing.

We work with trusted third-party service providers to operate our service. Examples:

• Payment processors to handle transactions (we do not store full card numbers or CVV).
• Hosting providers, CDNs and analytics services for site performance.
• Email/SMS providers for notifications and OTPs.

We share only the minimum data necessary with these providers and require them to protect your information. Review their privacy policies for details about their handling of data.

We use modern security practices to protect data:

• HTTPS (TLS) for encrypted connections.
• Passwords are hashed using strong algorithms (we never store plain text passwords).
• Access controls so only authorized staff can access sensitive systems.
• Logging, rate-limiting and automated protections against common attacks.
• Regular backup and routine security checks to reduce risk.

No online system is perfectly secure. In case of a breach we will follow legal requirements and notify affected users when appropriate.

We keep personal data only as long as needed for legitimate purposes:

• Order and transaction records are kept for accounting, tax and dispute resolution.
• Inactive account data may be archived or deleted after a reasonable period.
• Logs and analytics data are retained in aggregated or anonymized form where possible.

Exact retention periods depend on the type of data and legal requirements. Contact us if you need specifics for your account.

Depending on your jurisdiction, you may have rights such as:

• Access and receive a copy of personal data we hold about you.
• Correct or update inaccurate information.
• Request deletion or restriction of processing where allowed by law.
• Opt out of marketing communications at any time.

To exercise your rights, contact us at the address below. We may need to verify your identity before responding.

Our services are intended for users who meet the applicable minimum age (typically 13–18 depending on your country). Minors should use the site only with parental or guardian permission.

If you believe we have collected personal data from a child without required consent, contact us and we will take steps to remove it.

We may transfer data to service providers or partners in other countries to operate the service. When transfers occur, we take steps to protect your data, such as contractual safeguards or standard protections.

Contact us if you want information about a specific international transfer.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will show when this page was last revised.

• For major changes, we may provide additional notice on the site or by email.
• Continuing to use the site after updates means you accept the revised policy.

If you have questions, privacy requests, or a data subject request, please contact:

• Email: support@yourdomain.com
• Contact page: Contact Us

For security issues or vulnerability reports, please include clear details so we can investigate and respond quickly.