Privacy Policy

1. What this document is

This policy explains what personal data we collect when you use the Site, why we process it and what rights you have.

The data operator is Oyun Qurdu, which runs the Site. Registration details and contact channels are in the "Contact" section.

The policy is based on the laws of the Republic of Azerbaijan "On Personal Data", "On Information, Informatisation and Protection of Information" and "On Electronic Commerce".

2. What we collect

You give us:

• your name, email address and phone number;
• your game account ID, server or username - solely to fulfil an order;
• a payment receipt or transfer confirmation, where you upload one;
• the text of support requests and any files attached to them.

Collected automatically:

• IP address and technical information about your browser and device;
• records of actions on the Site: sign-in, orders, payments, acceptance of these terms;
• cookies (section 9 below).

We do not collect your full card number, its expiry date or its CVV. Payment takes place on the page of the bank or payment provider; only the result of the payment reaches us.

3. Why we process it

• Performing the contract: accepting the order, passing it to the supplier, delivering the code, keeping your balance.
• Managing your account: registration, sign-in, confirmation of email and phone number.
• Contacting you: order status, codes, refunds and support replies.
• Security: detecting fraudulent orders, stolen cards and attempts to take over an account.
• Legal obligations: accounting, tax and lawful requests from state bodies.
• Record-keeping: recording which version of the terms and of this policy you accepted, and when.

Marketing messages are sent only if you have separately agreed to them, and you can opt out at any time.

4. Legal basis

Data is processed on these grounds: the conclusion and performance of the contract; your consent, given at registration; obligations laid down by law; and the Seller's legitimate interest in the security of the Site and the prevention of fraud.

5. Who we share it with

Data is shared only to the extent necessary, and only with:

• Suppliers - to fulfil the order. For products requiring a direct top-up, the player ID is passed to the supplier; for products delivered as a code, no personal data is passed at all.
• Payment providers and banks - to take and return payments.
• Messaging services - where we send you a notification, your number or address reaches that service.
• State bodies - only on an official request made in the manner prescribed by law.

We do not sell data and do not pass it to third parties for advertising.

6. Transfers outside the country

Some of our suppliers are located outside Azerbaijan. The minimum data needed to fulfil an order - a player ID, for instance - is transferred to their servers. This transfer is necessary for the performance of the contract.

7. How long we keep it

• Account data - for as long as the account exists;
• order and payment records - for the period the law requires accounting documents to be kept;
• records of your acceptance of these terms - kept until that period ends even after the account is deleted, because in a dispute they are the only proof that the contract was concluded;
• support correspondence - one year after the request is closed;
• technical logs - up to 12 months.

Once the period ends, data is deleted or reduced to a form that cannot identify a person.

8. Your rights

You have the right to:

• be informed about the processing of your data;
• obtain a copy of it;
• have inaccurate data corrected;
• have it deleted, except for documents the law requires us to keep;
• withdraw your consent, which does not make earlier processing unlawful;
• object to processing and lodge a complaint.

Write to us through the "Support" section. We answer within 10 business days. You may also take a data-protection complaint to the competent state authority of the Republic of Azerbaijan.

Deleting your account does not delete order and payment records: those are kept for the period set by law.

9. Cookies

The Site cannot work without cookies. We use:

• Essential cookies: your sign-in session, the cart, the chosen language, form protection.
• Statistical cookies: records showing, in aggregate, which parts of the Site are used.

You can delete or block cookies in your browser settings; sign-in and the cart will then stop working.

10. Security

The connection runs over an encrypted channel (HTTPS). Passwords are never stored in readable form - only as a hash that cannot be reversed. Access to the database and the admin panel is restricted and logged.

No system is absolutely secure. If a data breach occurs, we inform the affected users and the competent authority as required by law.

11. Minors

The Site is intended for people aged 18 and over, and we do not knowingly collect children's data. If we find that we have, the account is closed and the data deleted. A parent or legal representative can make such a request through the "Support" section.

12. Changes

When the policy changes, the new version is published on the Site with its date. Where the change is substantial, we ask you to confirm it again.

13. Contact

For any question about personal data, open a request in the "Support" section or write to us through the channels listed in the "Contact" section.