1. Introduction
Gacha Grails (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to it.
2. Information We Collect
2.1 Information You Provide
- Name and email address (on account registration)
- Delivery address (when requesting physical card delivery)
- Payment information (processed by our payment gateway — we do not store this)
2.2 Information We Collect Automatically
- Device type, browser, and operating system
- IP address and approximate location
- Pages visited, time spent, and interactions on the Platform
- Purchase history and event participation
2.3 Cookies and Similar Technologies
We use cookies to maintain your session, remember your preferences, and analyse Platform usage. You may disable cookies in your browser settings, though some features may not function correctly as a result.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process purchases and deliver orders
- Send transactional notifications (reveal ready, order shipped, vault expiry reminders)
- Improve the Platform and user experience
- Prevent fraud and maintain Platform security
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We may share your data with:
- Payment processors to complete transactions
- Logistics partners to fulfil physical card deliveries
- Analytics providers to help us understand Platform usage
- Legal authorities if required by law
All third parties are contractually required to protect your information.
5. Data Retention
We retain your account information for as long as your account is active. Transactional records are retained for a minimum of 7 years as required by Malaysian law. You may request deletion of your account and personal data at any time, subject to our legal retention obligations.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw consent for marketing communications at any time
To exercise any of these rights, contact us at privacy@gachagrails.com.
7. Security
We implement industry-standard security measures to protect your data including SSL encryption, secure payment processing, and access controls. No system is completely secure, and we cannot guarantee absolute security.
8. Children
The Platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Platform.
10. Contact
For privacy-related enquiries, contact us at privacy@gachagrails.com.