Privacy
CHAJA stores what it needs to take payment, deliver a top-up, and answer a support request. Card numbers are handled by the payment provider. CHAJA does not ask you to type a card number into this site when a provider checkout is used.
What we store
- Game, pack, price, currency, and the player or account identifier you submit.
- An optional email or phone, used to attach a guest order to an account and to answer support.
- Order ID, payment reference, provider reference, and fulfillment attempt status.
- A hashed session cookie if you create an account. The password is stored only as a hash.
What we do not store
Payment provider secrets, full card data, and raw webhook payloads that are not required to prove the payment. Logs are written to omit passwords, API keys, and signature secrets.
Who sees it
Operators with a support, finance, or operations role can see the order they need to deliver or refund. Another customer cannot open your order by guessing a short code. The order ID itself is a long private reference — treat it like a receipt link.
Retention
Orders, payments, and audit records are kept for accounting and dispute handling. You can ask support to close an optional account. Financial records of a completed purchase are retained.