PRIVACY POLICY

1. Information We Collect

We may collect:

• Name, email address, telephone number and delivery address;
• GachaGo member ID and account information;
• Token, voucher, redemption, order and transaction information;
• Customer-service communications;
• Device, browser, IP address and website usage information; and
• Payment-related information processed through authorised payment providers.

GachaGo generally does not receive or store customers’ complete card details.

2. How We Use Information

We may use personal information to:

• Create and manage customer accounts;
• Send Email OTP verification codes;
• Process Token purchases, gift redemptions and orders;
• Arrange deliveries and provide customer support;
• Maintain transaction and account records;
• Prevent fraud, misuse and security incidents;
• Improve our website and services; and
• Comply with applicable legal and regulatory requirements.

3. Sharing of Information

We may share necessary information with trusted service providers, including payment providers, website hosting and database providers, email service providers, delivery companies and professional advisers.

Information may also be disclosed when required by law, regulation, court order or a lawful request from an authority.

We do not sell customers’ personal information.

4. Payments

Payments may be processed by third-party payment providers. Their processing of payment information may also be governed by their own privacy policies and terms.

5. Cookies and Local Storage

GachaGo may use cookies, browser storage or similar technologies to keep customers signed in, remember preferences, maintain website security and improve website performance.

Customers may control cookies through their browser settings, but disabling them may affect certain website functions.

6. Data Security and Retention

We use reasonable administrative and technical measures to protect personal information against unauthorised access, loss, misuse or disclosure.

Information will be retained only for as long as reasonably necessary for the purposes described in this policy or as required by law.

7. Customer Rights

Subject to applicable Malaysian law, customers may request access to or correction of their personal information, withdraw consent where applicable, or ask questions about how their information is handled.

Some information may need to be retained to meet legal, security, accounting or transaction-record requirements.

8. Children’s Privacy

Customers under 18 should use GachaGo with the knowledge and permission of a parent or legal guardian.

9. Changes to This Policy

We may update this Privacy Policy when our services or legal requirements change. The latest version and update date will be displayed on this page.