BuyCheapKeys Official PolicyLast updated: September 2026

Privacy Policy

How BuyCheapKeys collects, processes, protects, and respects your personal data under GDPR and CCPA.

Official department contact:[email protected]

1. Scope & Data Protection Commitment

  • This Privacy Policy explains how BuyCheapKeys collects, uses, stores, and safeguards personal information when you browse our catalog, register an account, enable Google Authenticator 2FA, join our Affiliate Program, or purchase digital keys.
  • For all data protection, GDPR, CCPA, or privacy inquiries, you can contact our Data Protection Team directly at [email protected].

2. Categories of Personal Data We Collect

  • Identity & Account Data: Name, email address, hashed password, Google OAuth identifier (if signing in with Google), and encrypted TOTP 2FA status.
  • Transaction & Delivery Data: Order history, delivered digital keys, currency/region preferences, and tokenized payment references (full card details are processed directly by PCI-DSS Level 1 gateways such as Stripe and PayPal and never stored on our servers).
  • Technical & Anti-Fraud Data: IP address, browser user-agent, country geolocation (used to warn you before buying region-locked keys), session cookies, and affiliate referral attribution cookies.

3. Legal Bases & Purposes of Processing

  • Contractual Necessity: To deliver purchased activation keys instantaneously, send order confirmations, and manage your digital library (/dashboard/library).
  • Legitimate Interest & Fraud Prevention: To prevent unauthorized account access, carding, multi-accounting coupon abuse, and automated scraping.
  • Legal & Tax Compliance: To comply with statutory accounting, Anti-Money Laundering (AML), and tax reporting obligations (retained for 5 to 7 years as required by law).

4. Third-Party Disclosures & Publisher Verification

  • We never sell your personal data. We share strictly necessary transaction data only with regulated payment processors (Stripe, PayPal, crypto gateways), wholesale key fulfillment APIs, and game publishers/developers when verifying activation timestamps during a disputed key claim.

5. Your Rights (GDPR / CCPA / International)

  • You have the right to access, rectify, export (portability), restrict, or request deletion of your personal data at any time.
  • To exercise your privacy rights or request account erasure, email [email protected] from your registered email address.