Privacy Policy

This Privacy Policy explains what information VibolShop (“we”, “us”) collects, how we use it, and the choices you have. It applies to our website and services. We aim to collect only what we need to run the Service securely and reliably.

• Account information — your email, username, and display name. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Transaction information — deposits, orders, wallet balance and ledger, and the game/player details you enter to fulfill a top-up.
• Payment information — payment references and on-chain transaction hashes. We do not store full card numbers; card-style rails, where offered, are handled by the payment provider.
• Device & usage information — IP address, browser/user-agent, and activity logs used for security, fraud prevention, and troubleshooting.

• To create and secure your account and authenticate sign-in (including Google Sign-In).
• To process deposits and orders, credit your wallet, and deliver top-ups.
• To detect and prevent fraud, abuse, and unauthorized access.
• To provide support, send service notifications, and improve the Service.
• To comply with legal obligations and enforce our Terms.

If you choose “Continue with Google”, Google sends us a signed identity token that we verify to confirm your email and basic profile (name and picture). We use this only to create or sign in to your account. We do not receive your Google password, and you can revoke access at any time from your Google account permissions.

We support KHQR (Bakong) and USDT (BEP20). To verify payments we exchange the minimum necessary data with the relevant networks — for KHQR, a transaction reference is checked against the Bakong system; for USDT, we read public on-chain transfers to the deposit address. We never collect your banking passwords or private keys.

We use strictly necessary cookies and similar technologies to keep you signed in (for example, a secure, HttpOnly session/refresh cookie) and to remember preferences such as language. These are required for the Service to function. We do not use them to build advertising profiles.

We do not sell your personal information. We share it only as needed to operate the Service:

• Service providers — infrastructure, payment networks, and fulfillment partners acting on our behalf.
• Game publishers — the player details required to deliver your top-up.
• Legal & safety — where required by law, or to protect our users, the Service, or our rights.

We keep information for as long as your account is active and as needed to provide the Service, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. Transaction and audit records may be retained longer where the law requires it.

We use technical and organizational measures to protect your information, including encrypted transport, hashed passwords, scoped access, and revocable sessions. No method of transmission or storage is completely secure, but we work to protect your data and respond to incidents.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can manage much of your data from your account, or contact us to make a request. We will respond consistent with applicable law.

The Service is not directed to children under the age required by these Terms, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will take appropriate steps to remove it.

We may process and store information in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this Policy and applicable law.

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

For privacy questions or requests, contact us at [email protected].