Privacy Policy

We may collect identity and contact details; account credentials; order, delivery and wallet history; player/server details needed for fulfilment; payment status, tokens and masked card information supplied by the processor; IP, device and security logs; support messages; and KYC documents where verification is required.

Card details are entered on SIB Pay Hosted Checkout. We do not collect or store full card numbers or CVV on LubanPlay systems.

We use data to create and secure accounts; enter into and perform purchase contracts; collect payment and deliver products; prevent fraud and unauthorised use; meet legal, accounting, tax, sanctions and dispute obligations; provide support; and improve service reliability.

The applicable basis may be contractual necessity, a UAE legal obligation, protection of rights and security, or consent. Marketing requiring consent is optional and may be withdrawn without affecting prior lawful processing.

Sharjah Islamic Bank PJSC, through SIB Pay, processes card payment and 3-D Secure authentication. We receive transaction results, references and masked information needed for reconciliation, refunds and disputes.

We and our payment and fraud partners may use automated rules to flag unusual activity. If a decision materially affects you, contact privacy@lubanplay.com to request human review where applicable.

Necessary data may be shared with SIB Pay, banks and card schemes; gift-card and game-top-up suppliers; hosting, email, messaging, support, identity-verification and fraud providers; professional advisers; and regulators or law enforcement where law requires.

We do not sell personal data. A fulfilment supplier receives only the order and customer fields needed to deliver the selected product.

Some processors, publishers or their infrastructure may be outside the UAE. We assess the destination, necessity and appropriate contractual or legal safeguards and limit data to the stated purpose. Ask the privacy contact for current categories of destinations and safeguards.

Account data is kept while the account is active. Order, payment, delivery and dispute evidence is retained as legally and operationally necessary. Supporting commercial records are generally retained for at least five years, and relevant UAE corporate-tax records may be retained for seven years.

KYC documents and risk data are deleted or de-identified when their purpose and mandatory retention end, unless an investigation, legal hold or dispute requires longer retention.

Controls include restricted access, encryption in transit, secret separation, audit logs, backups and supplier review. No system is risk-free. We investigate and contain incidents and notify authorities or affected people when the applicable UAE framework requires.

Subject to applicable law, you may request access and information, correction, deletion, restriction, marketing objection, portability and review of certain automated decisions. We may verify identity and may retain records required by law after account closure.

Send requests to privacy@lubanplay.com. Consent may be withdrawn prospectively at any time.

Accounts and purchases are for adults aged 18 or over. We do not knowingly collect personal data from a child under 13. Essential cookies support sessions, security and cart functions; non-essential marketing cookies are not used without consent where required.

Material policy changes receive a new effective date and appropriate notice before they take effect.