Privacy policy

1. Introduction

This Privacy Policy explains how JoyTopup Limited ("we", "us"), RM 102, 1/F, THE CLOUD, 111 TUNG CHAU STREET, TAI KOK TSUI, Hong Kong, handles personal data in connection with the XPTopup website and services.

2. Information we collect

• Contact details you provide, such as your email address when you join the early-access list.
• Order details (at launch), such as the game, player ID and the email used at checkout.
• Payment information processed securely by our third-party payment providers — we do not store full card numbers.
• Technical data, such as IP address, device and browser information, and basic usage analytics.

3. How we use your information

• To send you launch updates you have requested.
• To process and deliver orders and provide customer support.
• To prevent fraud and keep our service secure.
• To improve our website and services.
• To comply with legal obligations.

4. Legal bases

We process personal data on the bases of your consent (e.g. marketing emails), performance of a contract (order fulfilment), our legitimate interests (security and improvement), and legal compliance.

5. Sharing your information

We share data only with trusted service providers who help us operate — for example payment processors, fulfilment partners, email and hosting providers — under appropriate confidentiality and data- protection terms. We do not sell your personal data.

6. Cookies & analytics

We use essential cookies to run the site and may use privacy-friendly analytics to understand usage. You can control cookies through your browser settings.

7. Data retention

We keep personal data only as long as necessary for the purposes described here or as required by law, after which it is deleted or anonymised.

8. Your rights

Depending on your location, you may have the right to access, correct, delete or port your data, and to object to or restrict certain processing. You can unsubscribe from marketing emails at any time. To exercise any right, contact us at the address below.

9. Security

We use bank-grade encryption and industry-standard safeguards to protect your data. No method of transmission is completely secure, but we work hard to protect your information.

10. Children

Our services are not directed at children under the age required to consent to data processing in their jurisdiction without parental consent.

11. Changes

We may update this policy from time to time; the "last updated" date reflects the latest version.

12. Contact

For privacy questions or requests, email support@xptopup.com.