Privacy Policy

Information We Collect

We collect only what is necessary to provide the service:

• Account details — the username and email address you provide at registration
• Password — stored as a one-way bcrypt hash; we cannot read your actual password
• Hardware ID (HWID) — used to tie your bot licence to your machine and prevent account sharing
• Transaction history — Stripe payment reference IDs, amounts, timestamps, and your Point balance
• Usage data — which games you use, rental durations, and software download history

Payment Information

All payments are processed by Stripe, a PCI-DSS compliant payment provider. We never store or even see your card number, expiry date, or CVC. Those details go directly from your browser to Stripe; our systems retain only the transaction reference and the amount.

How We Use Your Information

• Authenticating you and keeping you signed in
• Activating bot access for the package and duration you redeemed
• Recording and verifying payment history, including as evidence in payment disputes
• Preventing fraud, account sharing, and stolen-card abuse
• Responding to your questions and support requests

Cookies and Tracking

We use a single session cookie (CB_SESS) to remember that you are signed in, plus a CSRF token to keep forms secure. We do not use advertising cookies, do not track you across other sites, and do not sell your data.

Sharing With Third Parties

We do not sell, rent, or trade your personal information. Data is shared only where required to deliver the service — with Stripe (to process payments) and our hosting provider (which stores the database) — or where legally compelled by a competent authority.

How Long We Keep Data

Account data is retained for as long as your account remains active. Payment records are kept for the period required by accounting and tax law, even after an account is closed, as financial evidence.

Data Security

The site is served entirely over encrypted HTTPS, passwords are hashed with bcrypt, and sign-in attempts are rate-limited to resist password guessing. No system is ever completely secure, so we recommend using a password unique to this site.

Your Rights

You may request access to, a copy of, correction of, or deletion of your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) by contacting our team. Note that deleting your data may end your ability to use the service, and does not extend to records we are legally required to retain.