1. Scope and controller
This policy applies to ZOXERO Store websites, customer accounts, orders, order chat, support tickets and the Creator Program. The data controller is the ZOXERO operating entity identified in the legal business information and on the payment receipt. This policy does not cover a game publisher, bank, card network or payment provider acting under its own privacy notice.
2. Information ZOXERO collects
Account and contact
Email, username, password hash, verification status, security settings and account role.
Orders and delivery
Products, prices, status history, game player ID, platform, server or region details supplied in chat.
Payments
Provider references, amount, currency, fee, tax, discount, payment status and limited card metadata such as brand or last four digits when provided. ZOXERO does not store full card numbers or CVCs.
Support and media
Messages, tickets, attachments, delivery evidence, refund requests and safety-review notes.
Device and security
IP address, browser/device data, timestamps, session events, cookie identifiers and fraud signals.
Creator Program
Channel links, audience description, code attribution, clicks, eligible earnings, payout method and encrypted payout details.
3. Why ZOXERO uses information
- Create and secure accounts, verify email, reset passwords and enforce access controls.
- Quote checkout totals, process payment, fulfil orders and provide receipts.
- Operate private order chat, support, refunds, disputes and delivery evidence.
- Detect fraud, abuse, account takeovers, sanctions concerns and prohibited activity.
- Run Creator code attribution, commissions, reversals and withdrawal review.
- Maintain records required for tax, accounting, payment-provider and legal obligations.
- Improve reliability, measure store performance and diagnose technical problems.
4. Legal bases
Depending on your location, ZOXERO relies on performance of a contract, legitimate interests in operating and protecting the store, compliance with legal obligations, and consent where consent is required. You can withdraw consent for optional processing without affecting processing already lawfully completed.
5. Who receives information
ZOXERO shares only what is reasonably needed with service providers such as payment processing, email delivery, cloud storage/hosting, database infrastructure, fraud and security tools, and analytics that ZOXERO has enabled. Information can also be disclosed to authorities, professional advisers or counterparties when lawfully required, or during a legitimate business reorganization with appropriate safeguards.
Game-delivery information may be submitted to the relevant authorized fulfilment or game channel to complete the top-up. ZOXERO does not sell personal data for money.
6. International transfers
Service providers can process information in countries different from yours. Where required, ZOXERO uses an appropriate transfer mechanism and contractual or technical safeguards.
7. Retention
ZOXERO keeps account and order records only as long as needed for fulfilment, support, fraud prevention, accounting, tax, payment disputes and legal obligations. Security logs and chat attachments can have different retention periods. When retention is no longer necessary, information is deleted, anonymized or securely isolated unless a legal hold applies.
8. Security
ZOXERO uses server-side secret storage, password hashing, access controls, encryption in transit, restricted admin functions and protected payout-detail storage. No internet service is risk-free. Never send a password, complete payment-card number, CVC or one-time code through ZOXERO chat.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to a data-protection authority. Some records must be retained for payment, fraud, tax or legal reasons. Submit a private support ticket from the account concerned so ZOXERO can verify the request safely.
10. Children
ZOXERO is not directed to children who cannot lawfully consent or contract in their location. A parent or guardian should contact support if a child submitted personal information without appropriate authorization.
11. Changes and contact
Material changes will be published with a new update date. For privacy questions or rights requests, use the ZOXERO support-ticket system. For an existing order, use the private order chat so the request can be verified against the correct transaction.