Privacy Policy

Who we are

This policy explains how PrestigeMart collects, stores and uses the details of people who visit our website or buy from us. PrestigeMart is responsible for that data, and you can reach us using the details below.

What we collect

• Your Roblox username, so we know who should receive the R$ or in-game gift.
• An email address or WhatsApp number, so we can reach you about your order.
• Your transaction ID and the payment receipt required at checkout, so staff can check the payment.
• The game, selected items, quantities and any gamepass link needed for delivery.
• Messages and details you send when asking for help or requesting an unlisted item.
• If you create an account, your account email and a hashed version of your PrestigeMart password. We do not store your plain password.

What we never collect

• Your Roblox password or 2-step codes.
• Your wallet PIN or login.

How we use it

To verify payments, deliver orders, answer your messages, keep a record of sales and send relevant store announcements to registered accounts. We do not sell your details or share them with advertisers.

Authorized staff can review orders, receipts and support requests in our dashboard and connected Discord tools. If email delivery is configured, our email provider processes the messages we send you about your account, order or store announcements. Announcement emails go to individual recipients; customer email addresses are not shared with other recipients.

You can stop announcement emails using the unsubscribe link in any announcement or email preferences. Order updates and account-security emails continue separately.

Who we share it with

We only share what each service needs to do its job for us:

• Cloudflare hosts this website, stores order records and receipts, and runs our AI support helper.
• Our email provider sends the order, account and announcement emails described above.
• Discord carries order and support notifications to our staff, and the tickets you open there.
• NOWPayments processes existing crypto payments started before we switched to bank transfer, under its own privacy policy.
• Your bank or payment provider processes the payment you send, under its own privacy policy. We use the receipt and transaction ID you provide, together with payment details available in our merchant bank records, to match and verify your transfer.
• Authorities or payment providers, when the law requires it or when we need order and payment records to answer a payment dispute or prevent fraud.

Our service providers may process information outside Pakistan. Access is limited to what is needed to provide the service, manage orders and protect the website.

How we protect it

The website only works over an encrypted (HTTPS) connection. Account passwords are stored as hashes, never as plain text. Customer accounts can access their own orders, and staff access is restricted by authentication and permissions. Payment receipt retention is described below. No online service can guarantee complete security.

AI support

Our optional AI support helper uses Cloudflare Workers AI to process your questions, recent conversation and a limited summary of your own orders when you are signed in. We do not send it your account email, payment receipts, transaction IDs or staff notes. Text you type may itself contain personal information, so do not share passwords or wallet secrets. AI conversation history stays in the open page and clears when you reload or change account. If you choose “Talk to staff”, recent chat messages are sent to our support system. AI can make mistakes; staff handle payment disputes and order changes.

Group eligibility follow-ups

If you ask staff to follow up when you can receive a group payout, they can record your name, Roblox username, chosen contact method (WhatsApp, Discord or email), contact details and relevant notes. The system periodically checks group eligibility. Staff send follow-up messages manually and record when they contacted you. These records are restricted to staff; ask us to correct or remove your details or stop follow-ups. Archived and contacted records remain for support history, but automatic eligibility checks stop.

How long we keep it

Active payment receipt files are removed automatically 30 days after an order is delivered or rejected. Open orders keep their receipts while staff are working on them. Order records stay so we can keep track of sales. Restricted backups and copies already sent to our support tools may retain information separately; contact us with a deletion request so we can review those copies too.

Basic website statistics

We count approximate visits and browsers active in the last two minutes to understand how the shop is doing. This uses a random browser session that renews after 30 minutes away. It is not linked to your account, name, email or order. The statistics request does not send page addresses or browsing history. The server keeps daily session digests for about two days to avoid counting the same visit twice, then removes them; daily totals remain. Live browser presence is kept only in server memory. We respect your browser’s Do Not Track and Global Privacy Control settings for these visit statistics. Hosting providers may separately process network information to operate and protect the service.

On your device

This site uses browser storage for your saved details, cart, preferences, sign-in session and support chat. Use “Clear device details” on My orders to clear saved checkout details, or clear this website’s data in your browser settings to remove its other local data. Clearing your browser does not delete account records, orders or messages already saved with us.

Children

Purchases must be made by an adult. If you are under 18, a parent or legal guardian must place the order and pay. If you think a child has given us their details without a parent’s permission, contact us and we will delete them where we can.

Your choices

• Ask for a copy of the details we hold about you.
• Ask us to correct details that are wrong.
• Ask us to delete your details. We may need to keep some order records where the law or a payment dispute requires it.
• Stop announcement emails at any time, as described above.

Changes to this policy

If we change how we use your details, we will update this page and the date at the top.

Contact

To ask what we hold about you or to have it removed, contact us through our contact page or with the details at the top of this page.