Privacy Policy
Last updated: 20 October 2026
This policy explains what personal data we collect when you use lekamas.com and lekamas.fr (the "Site"), why, who we share it with, and what your rights are.
1. Data controller
GSBP INTERNATIONAL CO., LIMITED, 19H Maxgrand Plaza, No. 3 Tai Yau Street, San Po Kong, Kowloon, Hong Kong ("Lekamas", "we").
For any question about your data or to exercise your rights: our live support (24/7) or the Contact Us & Complaint page, mentioning "Personal data".
2. Data we collect
| Category | Data | Where it comes from |
|---|---|---|
| Account | First and last name, email address, phone number (optional), password (stored hashed, never in plain text), language | You, when you register or in "My account" |
| Login with an external account | Google, Discord, Apple, Microsoft or Facebook account ID, verified email address, first and last name if the service provides them | The service you choose, with your consent |
| Orders | Game, server, quantity, character name, delivery method, amount, billing address, order history | You, when you order |
| Payment | Payment method used, transaction status and reference. We do not receive your full card number. | Our payment providers |
| Support | Messages exchanged by chat, email or contact form, screenshots you send | You |
| Reviews | Review, rating, display name; for Trustpilot invitations: name, email and order number | You |
| Technical data | IP address, browser and device type, pages viewed, approximate country and city derived from the IP address, cookies | Your browser |
3. Why we use it (and on what basis)
- To fulfil your order: process payment, deliver the Kamas, send you order emails, manage your account and the VIP programme. Basis: performance of the contract.
- To help you: answer your questions and complaints, process refunds. Basis: performance of the contract.
- To prevent fraud and secure the Site: verify payments, detect suspicious orders, protect the Site against attacks. Basis: our legitimate interest in preventing fraud.
- To save you time: pre-fill the country and city of your billing address from your approximate location. Basis: our legitimate interest; you can change these fields.
- To invite you to leave a review on Trustpilot or on the Site after a delivery. Basis: our legitimate interest; you can refuse these invitations at any time.
- To measure how well our ads work (Google Ads, Google Analytics). Basis: your consent, given in the cookie banner.
- To meet our legal obligations: accounting, answering authorities. Basis: legal obligation.
We do not sell your personal data.
4. Who we share it with
We only share the data needed with providers working for us:
- Hosting and security: our hosting provider; Cloudflare (content delivery network, protection against attacks).
- Payment: depending on the method chosen, Unlimit (Cardpay), Checkout.com, Sunrate, PayPal, Binance Pay, NOWPayments.
- Fraud prevention: MaxMind (minFraud).
- Login: Google, Discord, Apple, Microsoft or Facebook, only if you choose to log in with them.
- Support: tawk.to (live chat); our email delivery provider.
- Reviews: Trustpilot.
- Advertising and analytics: Google (Google Ads, Google Analytics), only with your consent.
- Backups: encrypted online storage (Google Drive) for backup copies of our database.
We may also disclose data to authorities when the law requires it, or to defend our rights (for example in case of fraud or a chargeback).
5. Transfers outside the European Union
Lekamas is based in Hong Kong and some providers are located outside the European Union, in particular in the United States. Where needed, these transfers are covered by the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
6. How long we keep it
- Account: as long as your account exists. You can ask for it to be deleted at any time.
- Orders and invoices: as long as required by our accounting and tax obligations (up to 7 years).
- Fraud prevention: as long as needed to detect and handle fraud, then for the limitation period for payment disputes.
- Support: as long as needed to handle your request and keep a record in case of a complaint.
- Cookies: see section 7.
7. Cookies
- Necessary cookies (always on): session and inventory, language, currency, security of login with an external account, Cloudflare protection, remembering your cookie choice.
- Advertising measurement cookies (Google Ads, Google Analytics): set only if you accept them in the cookie banner.
- Third-party services: live chat (tawk.to) and Trustpilot widgets may use their own cookies to work.
You can change your choice at any time with the Cookies link at the bottom of every page.
8. Your rights
You can ask at any time for:
- access to your data and a copy of it;
- correction of inaccurate data (most of it can be changed in "My account");
- erasure of your data, except data we must keep for legal reasons;
- restriction of processing, or to object to it, in particular to review invitations;
- portability of your data;
- withdrawal of your consent to advertising cookies, at any time.
To exercise your rights, contact us via live support or the Contact Us & Complaint page. We may ask you to confirm your identity (for example from your account's email address). We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the data protection authority of your country (in France: the CNIL; in the UK: the ICO).
9. Security
The Site is only available over an encrypted connection (HTTPS). Passwords are stored hashed, access to our systems is restricted and our backups are encrypted. As no system is 100% secure, we recommend using a unique password for your Lekamas account.
10. Minors
If you are a minor, you must have the consent of your parents or legal guardian to create an account or place an order.
11. Changes
We may update this policy, for example if we add a service or a provider. The update date is shown at the top of this page. If there is a significant change, we will let you know on the Site or by email.