Privacy Policy

The data controller for personal data collected through eyadstore.gg is Eyad Store Limited, a company incorporated in Hong Kong (Business Registration No. 79843946), with its registered office at RM 1307, 13/F, Kenbo Commercial Building, 335-339 Queen's Road West, Hong Kong. For purposes of Hong Kong's Personal Data (Privacy) Ordinance, Eyad Store Limited is the data user. You can contact us at info@eyadstore.gg.

Eyad Store Limited determines why and how personal data collected through this website is processed. We collect data when you browse the website, register, place an order, complete identity verification when required, or contact support. We use it to operate the website, deliver orders, provide support, process payments and refunds, prevent fraud, secure accounts, and meet legal and regulatory obligations. Personal data is stored using access controls and the security safeguards described in this policy and is retained only for the periods described below or as otherwise required by law.

Individuals may access website data only in an authorized capacity for Eyad Store Limited, under Eyad Store Limited's instructions and on a need-to-know basis.

As described below, Eyad Store Limited shares personal data only when necessary with payment providers, fulfillment partners, fraud-prevention and security services, hosting and technical service providers, authentication, email, file-storage and analytics providers, professional advisers, and public authorities where required by law. These recipients may process data only for the relevant service, legal, security, or compliance purpose.

Eyad Store Limited is a Hong Kong–registered digital goods marketplace (Business Registration No. 79843946) operating at RM 1307, 13/F, Kenbo Commercial Building, 335-339 Queen's Road West, Hong Kong.

When we refer to "Eyad Store," "we," "us," or "our" in this policy, we mean Eyad Store Limited only. "Eyad Store" remains the customer-facing brand name used on the website.

Account & Identity Information: When you create an account or place an order, we collect your name, email address, and any username or display name you provide. If identity verification (KYC) is required for high-value transactions, we may request a government-issued ID or proof of address.

Order & Transaction Data: We collect details necessary to fulfill your purchase, including the product selected, in-game player ID or delivery identifier, billing address, payment method details (processed securely by our payment partners — we never store full card numbers), and order history.

Technical & Device Data: Hosting, account, payment and security services process technical information such as IP addresses and request details to operate and protect the store. Optional analytics and advertising tags are separate and are disabled unless you opt in as described below.

Communication Data: If you contact our support team, we retain the content of your messages, any attachments, and your contact information to resolve your inquiry and improve our service.

Cookie & Analytics Data: Essential cookies and storage maintain sessions, carts and preferences such as currency and language. The separate Privacy choices controls manage optional analytics and marketing. Rejecting optional tracking does not disable authentication, payments or essential security.

Order Fulfillment: We use your data to process, deliver, and confirm purchases. This includes transmitting necessary details (such as player IDs or account emails) to our authorized fulfillment network to complete delivery.

Customer Support: We use your contact and order information to respond to inquiries, troubleshoot delivery issues, process refund requests, and keep you informed about order status updates.

Fraud Prevention & Security: We analyze transaction patterns, IP data, and behavioral signals to detect and prevent fraudulent orders, unauthorized account access, payment abuse, and money-laundering risk. This protects both you and our platform, and supports our compliance obligations and those of our payment partners.

Platform Improvement & Marketing: If you enable both optional categories, Google Analytics, Google Ads, Google Tag Manager and Meta Pixel may process browsing and device information for measurement and advertising. Our application sends only restricted public page paths and aggregate commerce amounts, not player recipients, account credentials or order identifiers.

Legal Compliance: We may process your data to comply with applicable laws, respond to lawful requests from authorities, enforce our Terms & Conditions, or protect the rights and safety of our users and business.

Optional Analytics & Advertising: Google (Google Analytics, Google Ads and Google Tag Manager) and Meta (Meta Pixel) are optional integrations. Their tags are not loaded before both analytics and marketing consent. Google sign-in, when you choose it, is a separate authentication service.

Payment Providers: The website includes integrations with PayPal, Stripe, Cryptomus, Payssion, PayerMax and Antom. The provider involved depends on the payment method you select and which methods are available. Payment processing is separate from optional tracking consent.

Fulfillment Partners: To deliver your digital goods, we share necessary order details (such as product type and in-game identifiers) with our authorized distribution network. These partners are contractually required to use your data solely for order fulfillment and to maintain strict confidentiality.

Fraud & Security Services: We may share limited transaction data with anti-fraud and risk-assessment services to verify transactions and prevent abuse.

Hosting & Technical Services: The website uses Vercel for hosting, MongoDB for database storage, Resend for transactional and authentication email, and UploadThing for uploaded files. These services support store operations rather than optional advertising. Relevant data is processed according to the service used; this list does not mean that every provider receives every visitor's information.

Professional Advisers: We may disclose information to our lawyers, accountants, auditors, insurers, or other professional advisers where reasonably necessary to obtain advice, manage risk, establish or defend legal claims, or meet compliance obligations.

Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Optional tracking is off by default. Accept all enables both analytics and marketing. Reject nonessential leaves both off. Preferences lets you save the two choices independently, with neither preselected on a first visit. Because the current Google Tag Manager container can combine purposes, all optional tags remain off unless both choices are enabled; analytics consent alone never enables marketing.

Your consent choice is saved in this browser's local storage under eyadstore:tracking-consent:v1 for up to 180 days, until you change it or clear browser data. This preference record contains the version, two boolean choices and an update timestamp, not an account or order ID. If browser storage is unavailable, optional tracking remains off.

Use Privacy choices, available throughout the website and in the footer, to change or withdraw consent. Withdrawal closes our event gate immediately and reloads an actively tagged page to discard loaded scripts. It does not undo data already sent to a provider. Browser settings can also remove existing cookies or storage; withdrawing consent does not promise deletion of all provider cookies.

Optional tags do not run on checkout, payment results, account, order, authentication, support, KYC, admin, COD Mobile, Pokemon GO or recipient-entry service pages. Dynamic product URLs and URLs containing a query string or fragment are also excluded. Application tracking does not send search strings, receipt tokens, payment IDs, credentials, player IDs or delivery recipients. Navigating from a tagged page into an excluded page uses a new document to keep tags out of private pages; known public pages can keep normal in-page navigation.

We implement industry-standard security measures to protect your data, including TLS/SSL encryption for all data transmitted between your browser and our servers, secure payment processing through PCI-compliant partners, access controls that limit employee access to personal data on a need-to-know basis, and regular security reviews of our systems and processes.

While no system is completely immune to risk, we are committed to maintaining robust safeguards and responding promptly to any potential security incidents.

Order records, transaction data, and associated billing information are retained for a minimum of 3 years to comply with financial regulations, support dispute resolution, and prevent fraud.

Account information is retained as long as your account remains active. If you request account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as outstanding disputes or compliance obligations).

Optional analytics and advertising data may also be retained by the relevant provider under its service settings and policies. Withdrawing browser consent stops future optional tracking by this website; requests about data already held can be sent to info@eyadstore.gg.

Depending on your jurisdiction, you may have the right to access a copy of the personal data we hold about you, correct inaccurate or incomplete information, request deletion of your data (subject to legal retention requirements), object to or restrict certain types of data processing, and receive your data in a portable format.

To exercise any of these rights, contact us at info@eyadstore.gg with your request and proof of identity. We respond to all verified requests within 30 days.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete it.

As a global digital marketplace headquartered in Hong Kong, your data may be processed in jurisdictions outside your country of residence. We ensure that any cross-border data transfers are conducted with appropriate safeguards and in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Effective date" at the top of this page indicates the last revision. Continued browsing does not opt you in to optional tracking; use Privacy choices to give or change that consent.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us at info@eyadstore.gg. You may also write to us at: Eyad Store Limited, RM 1307, 13/F, Kenbo Commercial Building, 335-339 Queen's Road West, Hong Kong.