Policies
Privacy policy
We collect the minimum needed to deliver a top-up: the game account to credit. No phone number, no email, no account and no password are required to place an order. You can optionally give us a phone number after paying if you want delivery updates.
Last updated 24 October 2026
Draft — not yet in force
This document is an unreviewed draft. It describes how the service actually works, but the operating entity’s details are not filled in and it has not been reviewed by a lawyer, so it does not yet form an agreement with anyone. Fill in OPERATOR in src/lib/constants.ts and have both pages — in English and in Khmer — reviewed before accepting live orders.
1. Who is responsible
The operator named in the Contact section below is responsible for the information described here. Contact details are at the bottom of this page.
2. What we collect
When you check the player ID
You enter a player ID and zone ID. We send those to a nickname lookup service (currently Codashop’s account check), and the nickname registered to that account comes back to us. We show you that nickname so you can confirm it is the right account. The nickname comes from the game, not from you — we store the one we were given rather than anything typed in the browser.
When you place an order
- Player ID and zone ID — required. Without them the top-up cannot be delivered.
- The nickname we resolved for that account, kept with the order so it is clear after the fact where a delivery went.
- A phone number — optional, and never required to order. Offered only after payment, if you want a message when your top-up is delivered. It is also used to identify you if you ask for support.
- An email address — not collected at checkout at all.
- The order record itself — which package, the price charged, the currency, the status, and the times it moved through each stage.
When you pay
You pay by scanning a KHQR code with your own banking app. Our system records the payment code it generated and whether that payment arrived — it does not receive or store your bank account details. As with any bank transfer, our own bank statement shows the name of the account that paid; we use that only to match payments to orders and to send refunds back.
Saved in your browser
To save you retyping, this browser remembers the player ID and zone ID you last checked, and — for up to an hour, until you close the tab — the package you chose. These stay on your device and are not sent anywhere until you check an account or place an order. On a shared phone or computer, use “Not your account? Use a different one” to clear the saved ID. Clearing your browser’s site data removes it too.
What we do not collect
- No card details or banking login. Payment happens inside your banking app, and we have no way to see or retrieve your credentials.
- No account and no password. Checkout is as a guest; there is nothing to register and no credentials for us to lose.
- No game login. We only ever need your player ID, never your game password. Anyone asking for your game password is not us.
- No advertising or tracking profile. We do not build one and we do not sell your information to anyone, for any purpose.
Technical information
Your IP address is used, in memory and in the moment, to limit how often a single visitor can check player IDs and create orders. It is not written to your order record. Our server logs record the requests made to the service so we can investigate faults and abuse.
3. Why we use it
- To deliver the top-up you paid for — this is the whole purpose, and it needs the player ID and zone ID.
- To take payment and, where necessary, to refund it.
- To let you track an order and to answer you when you ask for help.
- To keep records of what we sold and refunded, which we need for accounting and tax.
- To detect and prevent fraud and abuse against the service.
4. Who we share it with
We share only what each party needs to do its job, and only with:
- Our top-up supplier — receives the player ID, zone ID, and which package to credit. This is how the diamonds actually arrive. It does not receive your phone number.
- The nickname lookup service — receives the player ID and zone ID, and nothing else, to return the account’s nickname.
- Your bank and the Bakong payment system run by the National Bank of Cambodia — process the KHQR payment under their own terms.
- Telegram — we receive staff notifications there about orders that need attention. They include the order number, package, price, nickname, player ID and zone ID, so that staff can act on them. They do not include your phone number.
- Authorities or advisers — where we are legally required to disclose something, or where we need professional advice on a dispute.
Delivering a top-up for Mobile Legends: Bang Bang (KH) means the player ID is also acted on by the game publisher’s systems, which are outside our control.
5. How long we keep it
We keep order records, including the player ID and contact details attached to them, for as long as we need them to handle refunds and disputes and to satisfy accounting and tax obligations — which in practice means several years rather than weeks.
Where we have blocked a phone number or player ID for fraud or abuse, we keep that entry for as long as the block is needed; deleting it would simply undo the block.
6. Tracking an order
An order is looked up with its order number together with a secret access token issued when the order was created and stored in your browser. That pairing is what protects it, so treat your order link as private — anyone who has both values can see that order’s status, package, and the player ID it was sent to.
7. Security
Your banking details stay with your bank and never reach us. Access to order records is restricted to staff who need it, behind individual authenticated accounts. Passwords and tokens are masked in our logs. No service can promise perfect security, but we do not hold the category of data — card numbers and banking logins — that would make a breach most damaging.
8. Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Contact us with your order number. Two honest limits: we cannot delete records we are required to keep for accounting, and we cannot delete a fraud block without defeating its purpose. We will tell you if either applies to your request.
A delivered top-up cannot be undone by a deletion request — the diamonds are in the game account, and that is outside our systems.
9. Children
This storefront is not intended for children, and orders should be placed by someone able to enter into a contract. If you are a parent or guardian who believes a child has ordered here, contact us and we will help.
10. Changes
If we change this policy we will update the date above. Where a change materially affects how we use what we already hold, we will make that clear rather than quietly editing the text.
11. Related terms
Our terms and conditions cover ordering, delivery, and refunds — in particular, why the player ID you enter matters so much.
Contact
Trading as DOG TOPUP.
Telegram @sct_sctt · nornsochetra@gmail.com
A registered legal entity and address are not published yet — see the notice above.
