Privacy Policy

Azure Market, operating the Platform at azuremarket.gg, is the Personal Information Controller responsible for the personal data described in this Policy. All enquiries and requests concerning your personal data may be addressed to support@azuremarket.gg.

This Policy applies to all personal data processed through the Platform. The Platform does not require account registration; by accessing it or placing an Order, you acknowledge that you have read and understood how your personal data is handled as described here.

This Policy may be revised from time to time to reflect the development of our services and any applicable regulatory requirements. You are advised to review this page periodically to remain aware of the version in force. Capitalised terms not defined in this Policy have the meaning given to them in our Terms & Conditions.

• Personal Data: any information from which your identity is apparent or can reasonably and directly be ascertained.
• Processing: any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and erasure.
• Personal Information Controller: the entity that determines the purposes and means of Processing, being us.
• Personal Information Processor: a third party to whom Processing is outsourced, such as our payment, email, and hosting providers.
• Data Subject: the individual to whom Personal Data relates, being you.

We collect only the data necessary to process payment and deliver Orders. Registration is not required and we do not maintain customer accounts.

Information you provide

• Contact information: the email address supplied at checkout, used to issue receipts and to verify ownership of an Order.
• Game account information: player ID, server or zone, and, for Account-Quoted Orders, your game account email address.
• Login Codes: single-use verification codes supplied for Account-Quoted Orders. See Section 4.
• Payment information: the GCash mobile number from which payment is remitted, together with amounts and reference numbers.
• Payment report information: where you report a payment discrepancy: the amount, remitting mobile number, contact email address, any note you provide, and a screenshot of your GCash receipt. Receipt screenshots ordinarily display your name and mobile number.
• User content: star ratings and review text you submit.

Information collected automatically

• IP address: recorded solely to enforce request rate limits and protect the Platform from abuse. It is retained for approximately 24 hours and is not used for profiling or advertising.
• Transaction records: Order contents, amounts, timestamps, and status history.

We do not collect or store game account passwords, GCash PINs or MPINs, full payment card numbers, or location data. We do not acquire Personal Data about you from third-party sources, and we do not operate analytics or advertising trackers on the Platform.

Login Codes constitute the most sensitive category of data we handle and are subject to specific controls:

• they are encrypted immediately upon receipt and are never stored in readable form;
• they are disclosed to the Fulfilment Partner solely for the purpose of completing the Order to which they relate;
• they are erased once delivery has been initiated, and any unused code expires and is deleted automatically within approximately 30 minutes; and
• they are never included in email correspondence, receipts, or system logs.

We Process Personal Data for the following purposes:

• to process payment and deliver Orders;
• to issue receipts and communicate the status of an Order;
• to verify ownership of an Order for tracking, support, refunds, and review submission;
• to reconcile payments and investigate payment discrepancies;
• to detect, prevent, and investigate fraud, abuse, and unauthorised access;
• to publish verified reviews on the Platform;
• to maintain transaction records required for accounting, tax, and dispute purposes; and
• to comply with legal and regulatory obligations.

We do not use Personal Data for automated decision-making producing legal effects, and we do not send marketing communications without separate consent.

• Performance of a contract: Processing necessary to fulfil an Order, issue receipts, and administer refunds.
• Consent: the use of your game account email and Login Code to access your Game Account for delivery, given by means of the confirmation required at checkout. Consent may be withdrawn, though withdrawal does not affect Processing already carried out.
• Legitimate interests: fraud prevention, payment reconciliation, and maintaining the security and integrity of the Platform.
• Legal obligation: retention of transaction records for accounting, taxation, and regulatory compliance.

We do not sell Personal Data and we do not disclose it for advertising purposes. We disclose the minimum data necessary to the following categories of recipient:

• Fulfilment Partners: for Standard Top-Ups, your player ID and server or zone. For Account-Quoted Orders, your game account email address and Login Code, transmitted through a private messaging channel used exclusively for Order fulfilment. Fulfilment Partners do not receive your checkout email address or your GCash mobile number.
• Payment providers: PayMongo, for payment processing. Where payment is completed on a provider's own page, payment details are collected directly by that provider and are not accessible to us. We transmit only an Order identifier and the amount payable.
• Email service provider: Resend, for the delivery of receipts and Order notifications.
• Hosting and infrastructure providers: Supabase and Cloudflare, which store and transmit data on our behalf under contract.
• Competent authorities: where disclosure is required by law, court order, or lawful regulatory request, or is necessary to establish, exercise, or defend a legal claim.

Our database and file storage are hosted on infrastructure located in Mumbai, India, and certain Personal Information Processors engaged by us process data in other jurisdictions, including the United States. Personal Data may therefore be transferred outside the Philippines.

Where such transfers occur, we remain accountable for the Personal Data transferred and engage only processors who are contractually bound to apply a comparable standard of protection, consistent with our obligations under the Data Privacy Act.

• Login Codes: erased upon use, and in all cases within approximately 30 minutes.
• IP addresses: approximately 24 hours.
• System and payment notification logs: 90 days, save for records of payments not yet reconciled to an Order, which are retained until resolved so that unmatched funds are not lost.
• Transaction records, receipts, and payment reports: retained for so long as necessary for accounting, taxation, and dispute resolution purposes, after which they are erased or anonymised.
• Receipt screenshots: retained while the related payment report remains open and for a reasonable period thereafter in the event of dispute.

We implement organisational, physical, and technical measures appropriate to the risks presented by our Processing, including:

• encryption of all traffic between your browser and the Platform using HTTPS;
• encryption of data at rest by our hosting provider;
• separate encryption of Login Codes, with erasure following use;
• storage of receipt screenshots in private storage, accessible only through short-lived links issued to authorised personnel;
• restriction of direct database access from the public internet, such that customer data is reachable only through our own server-side systems; and
• limitation of access to Personal Data to personnel who require it for their duties.

No method of transmission or storage is entirely secure. In the event of a breach involving sensitive personal information which is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and affected Data Subjects within the period prescribed by law.

We do not use advertising cookies, analytics cookies, or tracking pixels. The only cookies set are those strictly necessary to maintain an authenticated session in our staff dashboard; no such cookie is set for customers browsing the Platform.

Certain information is stored locally in your browser and is not transmitted to us: the payment link for an Order in progress, which is cleared once the Order proceeds, and a short list of your recent Order References so that they may be retrieved. The latter expires after 60 days and may be cleared at any time using the Not your device? Forget these orders control on the payment report page.

As a Data Subject under the Data Privacy Act, you have the right to:

• be informed of the Processing of your Personal Data;
• access the Personal Data we hold concerning you;
• rectify inaccurate or erroneous Personal Data, and to have it corrected without delay;
• object to Processing, including where consent is withdrawn, subject to lawful grounds for continued Processing;
• suspend, withdraw, or order the blocking, removal, or destruction of Personal Data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary;
• data portability, being a copy of your Personal Data in a commonly used format;
• be indemnified for damages sustained by reason of unlawful Processing; and
• lodge a complaint with the National Privacy Commission.

To exercise any of these rights, contact support@azuremarket.gg from the email address used at checkout, quoting your Order Reference. Because the Platform does not maintain customer accounts, this combination is the only means by which we can verify that a request is genuine. We will respond within 30 days.

Certain data cannot be erased on request. Records of completed transactions must be retained for accounting and taxation purposes, and data already disclosed to a Fulfilment Partner for the purpose of completing an Order cannot be recalled.

The Platform is not directed at persons under 18 years of age, and we do not knowingly collect Personal Data from children. Where we become aware that such data has been collected, it will be erased. A parent or legal guardian who believes a child has provided Personal Data should contact us.

We may amend this Policy to reflect changes in our Processing activities or legal obligations. Amendments take effect upon publication on this page and the "last updated" date is revised accordingly. Where an amendment is material, we will provide prominent notice on the Platform.

Requests, questions, and complaints concerning this Policy or our Processing of Personal Data should be addressed to support@azuremarket.gg, or by phone at 0927 797 4251. We encourage you to raise any concern with us in the first instance.

If you are dissatisfied with our response, you may lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.