Privacy policy

Nebula Digital Limited ("Card4play", "we", "us", or "our") operates https://www.card4play.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit the Site or use our Services, and describes your rights regarding that information.

By using the Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Site.

1. Information We Collect

We collect information necessary to provide our core Services (required), as well as optional information to improve your experience. We may from time to time introduce new features that require collecting new categories of information; where required by law, we will seek your consent before doing so.

1.1 Information You Provide Directly

  • Account information: name, email address, phone number, username, password.
  • Order and payment information: billing details, payment card information (processed by our PCI-compliant payment partners — we do not store full card numbers), transaction history, redemption codes, top-up account/game IDs.
  • Identity verification (KYC) information: government-issued ID, passport, or other documents where required for anti-fraud or regulatory compliance purposes.
  • Communications: messages you send via customer support, live chat, surveys, or feedback forms.

1.2 Information Collected Automatically

  • Device and usage data: IP address, browser type, operating system, device identifiers, pages visited, click patterns, referring URLs, and timestamps.
  • Location data: approximate location inferred from your IP address.
  • Cookies and similar technologies: see Section 5 below.

1.3 Non-Personal Information

We may also collect aggregated or de-identified data (e.g., general usage statistics) that does not identify you individually. If such data is combined with personal information, we treat the combined data as personal information under this Policy.

2. How We Use Your Information

We use the information we collect to:

  • Process and deliver your orders, including verifying payment and preventing fraud;
  • Create and manage your account;
  • Provide customer support and respond to inquiries;
  • Detect, investigate, and prevent fraudulent transactions, security incidents, and abuse of the Site;
  • Comply with legal, regulatory, and KYC/anti-money-laundering obligations;
  • Improve and personalize the Site and our Services, including analytics on usage patterns;
  • Send transactional communications (order confirmations, security alerts) and, where you have opted in, marketing communications, which you may opt out of at any time;
  • Enforce our Terms & Conditions and protect the rights, property, and safety of Card4play, our users, and the public.

We do not sell or rent your personal information to third parties, and we will not use your personal information for advertising purposes without your consent.

3. How We Share Your Information

We may share your information with:

  • Payment processors and financial institutions, to process transactions and verify payments;
  • Service providers, who perform functions on our behalf (e.g., hosting, customer support tools, fraud prevention, analytics), under contractual obligations to protect your information and use it only for the purposes we specify;
  • Third-party platforms, only to the extent necessary to fulfil a direct top-up you requested (e.g., transmitting the game account ID you provided to complete a recharge);
  • Legal and regulatory authorities, where required by law, legal process, or governmental request, or where necessary to protect our rights, prevent fraud, or ensure the safety of our users;
  • Successors, in connection with a merger, acquisition, restructuring, or sale of assets, subject to the acquiring entity honoring the commitments of this Privacy Policy.

We do not share your personal information with third parties for their own independent marketing purposes without your express consent.

4. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting, tax, or regulatory requirements (e.g., transaction records for anti-money-laundering purposes). When information is no longer needed, we take reasonable steps to delete or anonymize it, though residual copies may persist in backup systems for a limited period until routine deletion cycles occur.

5. Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

  • Keep you logged in and remember your preferences;
  • Analyze site traffic and usage patterns;
  • Measure the effectiveness of our marketing and promotions;
  • Support fraud detection and security.

You can control cookies through your browser settings, including disabling them entirely; however, this may limit certain features of the Site. Where required by applicable law, we will request your consent before setting non-essential cookies.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and, where applicable, at rest;
  • Access controls limiting who within our organization can access personal information;
  • Regular security reviews and monitoring for suspicious activity.

No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your personal information, we will notify you and relevant authorities as required by applicable law, and take reasonable steps to mitigate harm.

You are responsible for keeping your account password confidential and for notifying us promptly at [email protected] if you suspect unauthorized access to your account.

7. International Data Transfers

Card4play is based in Hong Kong, and your information may be processed or stored in Hong Kong or in other jurisdictions where our service providers operate. Where we transfer personal information across borders, we take reasonable steps to ensure it receives an adequate level of protection consistent with this Privacy Policy and applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete information;
  • Request deletion of your personal information, subject to legal retention requirements;
  • Withdraw consent for processing based on consent (this will not affect processing carried out prior to withdrawal);
  • Object to or restrict certain processing, including marketing communications;
  • Data portability, where applicable.

To exercise these rights, contact us at [email protected]. We will respond within a reasonable timeframe, generally within 15 days, after verifying your identity. We may decline requests that are manifestly unfounded, excessive, or prohibited by law.

9. Children's Privacy

Card4play does not knowingly collect personal information from children under the age of 13 (or the relevant minimum age in your jurisdiction) without verifiable parental or guardian consent. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at [email protected] and we will take steps to delete such information.

10. Third-Party Links

The Site may contain links to third-party websites or platforms (e.g., the platforms for which our Products are redeemable). This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Policy on this page with a revised "Last Updated" date, and for material changes, we will provide additional notice (e.g., via email or a prominent notice on the Site) before the changes take effect.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact:

Card4play (operated by Nebula Digital Limited)
Registered in Hong Kong
Email: [email protected]