Privacy Policy

How NaNaTopUp.com collects, uses, and protects your information.

1. Introduction

NaNaTopUp.com ("we", "us", "our") is a gaming top-up service operated by NaNa TopUp Co., Ltd., based in Phnom Penh, Cambodia. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how you can control your information.

2. Information We Collect

2.1 Information you give us

• Game account information — Your in-game User ID and Server/Zone ID (required to deliver your purchase)
• Payment information — KHQR transaction reference IDs from Bakong, ABA, Wing, ACLEDA, or other supported banks. We never collect or store your bank card numbers, CVV, or banking passwords.
• Contact information — If you contact our support, we save your Telegram handle or message content to help you

2.2 Information collected automatically

• Technical data — IP address, browser type, operating system, device type, screen size
• Usage data — Pages visited, time on site, referrer URL, language preference
• Cookies — Small text files stored on your device for site functionality and analytics

3. How We Use Your Information

We use your information only for these purposes:

• Order processing — Delivering your purchased game currency to the correct game account
• Customer support — Answering your questions and resolving order issues
• Fraud prevention — Detecting and blocking suspicious orders to protect both you and our service
• Service improvement — Understanding which features and games are most popular
• Legal compliance — Complying with Cambodian laws and any lawful requests from authorities
• Marketing (with your consent) — Sending you optional updates about new games, promotions, or features

4. How We Share Your Information

We share your information only with these parties, and only when necessary:

• Game publishers — We pass your Game User ID to official game publisher APIs (Moonton, Garena, Tencent, etc.) to deliver your purchase
• Payment processors — Bakong, ABA, Wing, ACLEDA, and other licensed Cambodian banks process your KHQR payment
• Analytics providers — Google Analytics, Facebook Pixel (anonymous usage data only)
• Cloud and hosting providers — Cloudflare (CDN, security), Hostinger (server hosting)
• Legal authorities — When required by Cambodian law or court order

We DO NOT sell, rent, or trade your personal data to advertisers or third parties.

5. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

• Essential cookies — Required for site functionality (cart, language preference, security). Cannot be disabled.
• Analytics cookies — Help us understand how visitors use our site (Google Analytics, Facebook Pixel)
• Marketing cookies — Used to measure the effectiveness of our advertising (Facebook Pixel, Meta Conversions API)

You can control cookies through your browser settings. Blocking essential cookies may break site functionality.

6. Data Retention

We keep your information only for as long as necessary:

• Order records — 2 years (for warranty, refund, and dispute resolution)
• Support conversations — 1 year
• Technical/access logs — 90 days
• Marketing preferences — Until you withdraw consent

7. Data Security

We protect your data with industry-standard measures:

• HTTPS / SSL encryption on all pages — protects data while in transit
• Secure server hosting with Cloudflare DDoS protection and Web Application Firewall
• Encrypted database with restricted access only to authorized staff
• No card storage — all payments go directly through your bank's KHQR system; we never see your card
• Regular security updates for our software and dependencies

8. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Correction — Ask us to fix any incorrect information
• Deletion — Request deletion of your data (subject to legal retention requirements)
• Withdrawal of consent — Opt out of marketing communications at any time
• Portability — Receive your data in a machine-readable format
• Complaint — File a complaint with the Cambodian Ministry of Posts and Telecommunications

To exercise any of these rights, email us at [email protected] with proof of identity (so we can confirm the request comes from you).

9. Children's Privacy

Our service is intended for users 13 years and older. We do not knowingly collect personal data from children under 13. If you believe a child has provided us their information without parental consent, please contact us and we will delete it promptly.

If you are between 13 and 18 years old, please use our service only with the consent of your parent or legal guardian.

10. International Data Transfers

Some of our service providers (Google, Facebook, Cloudflare) are based outside Cambodia. When we share necessary data with them, they protect it under their own privacy frameworks, which include similar or stronger protections than Cambodian law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For major changes, we will post a notice on our homepage. Your continued use of NaNaTopUp.com after any change means you accept the updated policy.

12. Contact Us