Privacy Policy
What data Play Cards collects, why, how long it is kept, and how to request account deletion.
This page explains what we collect, why, and for how long. It is written from how the store actually behaves, not from a generic template.
What we collect
- Account data: username, email address and phone number. The number is required at sign-up because it is how we reach you about your orders.
- Signing in with Google: if you choose it, we receive your email, display name and profile picture from Google. We never access your password or any other content in your account.
- Order data: what you bought, the player or account ID you entered for the top-up, and the status of each order.
- Wallet data: your deposits, charges and refunds, and the payment reference.
- Technical data: IP address, browser type, and the pages you visited.
- AI assistant chats: if you use it, your messages are stored to improve the service and diagnose faults.
Why we collect it
- To fulfil your order: top-up details are sent to the relevant provider to deliver what you bought — this is the primary purpose.
- To protect your account and balance: technical data exposes unauthorised sign-in attempts and prevents abuse.
- Support: we cannot follow up on an order problem without a record of the order itself.
- Measurement and advertising: to know which channels actually bring visitors.
Advertising and visit measurement
We use measurement tools from Meta to understand the effect of our ads. Your email or phone number may be sent to them hashed into an unreadable form to match a visit to an ad. We do not sell your data and do not share it with third parties for marketing.
How long we keep it
- Site visit logs: deleted automatically after 180 days.
- AI assistant chats: deleted automatically after 30 days.
- Reseller API request logs: deleted automatically after 14 days.
- Account, order and wallet data: kept while your account exists — it is your statement and purchase history, and deleting it would destroy the proof of what you paid.
Protecting your account
Passwords are never stored in readable form. Your session expires automatically after 3 days, so you sign in again — a deliberate measure that limits the impact of any leak from your device. You can also enable two-step verification from your account settings.
Your rights
- Access and correction: you can edit your account data from the account page at any time.
- Account deletion: message us through the support page inside your account and we will delete your account and personal data. Financial records required to prove completed transactions are retained.
- Objection: you may ask us about any use of your data and object to it.
Cookies
We use one essential cookie to keep you signed in — without it the site does not work. Advertising measurement tools may set their own cookies, which you can block from your browser settings.
Changes to this policy
We update this page on any material change. Continuing to use the store afterwards means you accept the updated version.