Template
Review with a qualified advisor and align with Nepal's Individual Privacy Act, 2075 before launch.
What we collect
- Account data: name, email, optional phone, and a password hash (we never store your password).
- Order data: items, amounts, and the player identifiers needed for delivery (stored encrypted).
- Payment data: provider transaction references and statuses. We do not receive or store wallet PINs or card numbers.
- Security data: session records, a keyed hash of your IP address, and audit logs of sensitive actions.
Why we use it
To process and deliver orders, verify payments, prevent fraud, provide support, and meet legal obligations.
Sharing
We share only what is necessary with payment providers (to take payment) and fulfilment suppliers (to deliver top-ups). We do not sell personal data.
Retention
- Order and payment records: kept for the period required by tax and accounting law.
- Player identifiers: kept encrypted with the order; can be purged after the refund window.
- Expired sessions and rate-limit records: deleted automatically.
- Unpaid, cancelled orders: eligible for deletion after 90 days.
Your rights
You can request access to or deletion of your personal data through support, subject to records we must keep by law.
Cookies
We use strictly necessary cookies only: a session cookie when you sign in, and an order-access cookie so you can view orders placed as a guest. Your cart is stored in your browser.