Privacy policy

Version

1.0

Proposed effective date

August 12, 2026

Last updated

August 12, 2026

Operating entity

Hong Kong Lille Mutual Entertainment Limited

Company registration number

79947617

Privacy Contact

support@yoveya.com

This privacy policy describes how Hong Kong Lille Mutual Entertainment Limited (Hong Kong Lille Mutual Entertainment Co., Ltd., company registration number 79947617, hereinafter referred to as "Yoveya" and "We") collects, uses, saves, shares and protects personal data when operating yoveya.com, related websites, accounts, customer service and digital entertainment services.

This policy applies to visitors, registered users, buyers, subscribers, customer service contacts and other individuals who use Yoveya services. Third-party game publishers, recharge/activation providers, identity login providers and payment service providers may process data as independent data controllers, and their respective policies apply at the same time.

If you submit the email address, game UID, regional service or other information on behalf of others, you should ensure that you have the right to provide such information to us and have explained this policy to the relevant individuals.

Data Category

Common Examples | Is it necessary? -----------+---------------------------------------+------------------------

Account and Identity

Nickname, avatar, email address, login provider ID, binding status, account preference | Creating and protecting accounts usually requires

Orders and transactions

Order number, commodity/stall, quantity, price, currency, tax, discount, order status, time record | Need to complete the transaction

Fulfillment information

Game UID, regional service, platform, region, recharge method, activation status and supplier receipt | Only when the corresponding goods are needed.

Payment data

Payment method, payment token, card organization, last four digits, validity period, payment status, channel transaction number, risk control result | Payment or refund requirements

Subscription information

Plan, cycle, expiration date, automatic renewal status, next deduction information and renewal order | Need to use subscription function

Customer service and after-sales

Work orders, chats, emails, attachments, complaints, refund reasons, investigation and handling records | Required when requesting support

Open content

Grades, comments, pictures, anonymous display preferences, reports and audit records | Voluntary provision when publishing content.

Devices and networks

IP, browser, operating system, device type, language, time zone, access logs, errors and security events | Security and operation are usually collected automatically.

Cookies and preferences

Session, login, CSRF, security, language, currency, theme, consent selection, analysis identification | Necessary cookies are required by the service; Others depend on choice.

Verification and Compliance

Proof of identity/payment ownership, risk signals and sanctions screening results; Only when required by law or high-risk transactions | Only when verification is triggered.

Please do not send complete bank card number, CVV, account password, government certificate or other unnecessary sensitive information through comments, customer service or ordinary forms. If verification is really necessary, we will explain the safe submission method, purpose and retention arrangement.

-You provide it directly: when registering, placing an order, filling in the recharge information, adjusting the subscription, contacting customer service, applying for a refund or making comments.

-Automatically generated: logs, equipment and transaction records generated when you visit websites, log in, complete orders or interact with security systems.

-Login providers: such as Google, Microsoft, LINE, Facebook, TikTok or other enabled providers, and provide your account ID, email address, nickname or avatar within your authorization.

-Payment channel: feedback payment status, transaction number, limited payment summary, refusal/refund result and risk signal to us.

-Goods and fulfillment suppliers: feedback the results of inventory, recharge, activation, delivery, cancellation or failure to us.

-Other sources or open sources authorized by you according to law, as well as regulatory, law enforcement or anti-fraud cooperation channels.

Objective

Related data | Common treatment basis ------------+--------------------+------------------------

Establish and protect accounts

Account, login, equipment, security log | Perform contracts; Security and legitimate interests; legal obligation

Quotation, collection and fulfillment of orders

orders, payment, fulfillment, contact information | fulfillment of contracts; Take pre-transaction measures at the request of users.

Manage subscription and automatic renewal

Subscription, payment token, notification preference | Contract performance; The renewal authorization granted by you; legal obligation

Refund, complaint and customer service

Order, payment, communication, accessories | Contract performance; Defend or defend legal rights

Prevention of fraud, abuse and security incidents

transaction, equipment, network, risk and verification materials | legitimate interests; Legal obligation; Protect users and platforms

Finance, taxation and auditing

Orders, refunds, invoices, payment summaries | Legal obligations; Legal rights

Improve services and statistics

Use, errors and performance data of unmarked or summarized | Legal interests; Non-essential technology is based on consent when required.

Send marketing information

E-mail, preferences, limited trading interests | Agreed, or existing customer relationships permitted by applicable laws; You can unsubscribe at any time

Coordination between implementation terms and supervision

Account, order, communication, risk information | legal obligations; Public interest; Legal rights

When the processing is based on consent, you can withdraw your consent at any time, and the withdrawal will not affect the legality of the previous processing. If the information is necessary to fulfill the contract or legal requirements, refusing to provide it may cause us to be unable to create an account, process payment, complete recharge, open a subscription or apply for a refund.

5.1 Payment Information

Bank card or e-wallet payment is usually handled directly by a third-party payment service provider. Yoveya does not save the complete card number or CVV；; If saving cards or automatic renewal is enabled, we usually only save tokens and limited card summaries generated by payment service providers. Payment service providers may independently process data based on their legal obligations and risk control rules.

5.2 Game Direct Charging and Self-service Activation

For direct charging of UID, we will provide the UID, regional service, platform, region, goods and order identification required to complete the order to the corresponding suppliers. For the self-service recharge or subscription activation process that jumps to a third party, the target platform may directly collect login or authorization information from you. Yoveya product page does not require you to provide the password of the target game or subscription platform; We will not accept these passwords unless the page clearly states otherwise.

5.3 Automatic renewal

After you choose or keep the automatic renewal fee and authorize the payment, the payment service provider can use the payment token to handle the subsequent deduction. We will record the authorization status, reminders, debit attempts, results and cancellation time to manage subscriptions and handle disputes. Turning off automatic renewal generally does not affect the current period of payment.

We use Cookie, local storage and similar technologies to maintain login sessions, resist cross-site request forgery, save language/currency/theme preferences, remember to agree to choose, guarantee payment process and understand website performance. The specific categories and deadlines are subject to the Cookie Policy of the website and the consent management interface.

-Strictly necessary: login, session, security, load balancing, settlement and consent record; Some services cannot run after rejection.

-Functional preference: remember the language, currency, theme and interface selection.

-Analysis and performance: with your consent when required by law, it is used to understand access, faults and performance.

-Marketing: used to measure activities or provide related promotion only after it is enabled and the required consent is obtained.

You can change the selection through Cookie settings or browser settings. Deleting Cookie may log out or reset preferences.

Recipient Category

Sharing Purpose and Scope ----------------------+--------------------------------

Payment service providers, banks and wallets

handle authorization, collection, refund, refusal to pay, reconciliation and anti-fraud; Share only the information needed for the transaction.

Game, Subscription and Fulfillment Supplier

Verify goods, complete UID recharge or activation, return to delivery status and handle failure.

Identity Login Provider

Complete login, account binding/unbinding and security verification.

Hosting, database, mail, customer service, monitoring and security service providers

run services on our behalf; Be bound by contract, confidentiality and security obligations.

Professional consultants, auditing and insurance institutions

Obtaining legal, financial, auditing, taxation, risk control or insurance services.

Related parties or transaction participants

make necessary adjustments in merger, financing, restructuring or asset transfer; Request for continued protection of information.

Courts, regulatory and law enforcement agencies

Comply with applicable laws, effective legal procedures, or protect the rights and safety of users, the public and platforms.

We will not sell personal data for monetary consideration. In the future, if we launch activities that may be regarded as "selling", "sharing" or targeted advertising in some areas, we will first update the notice and provide an appropriate exit mechanism.

Yoveya is aimed at cross-border users, and service providers and suppliers may be located in Hong Kong or outside your region. Therefore, data may be transmitted to countries or regions with different data protection standards. We will take reasonable protection according to the nature of the data and applicable laws, such as supplier's best efforts, data processing terms, access restrictions, encryption, data minimization and applicable standard contract terms.

Part of the recharge must send UID, regional service and other information to the suppliers in the area where the goods are applicable; If we refuse the necessary transmission, we may not be able to complete the order.

We set a deadline according to the purpose, risk and legal requirements, and delete, unmark or restrict the use after the expiration. The general baseline is as follows:

Record Type

General Retention Schedule -----------------+-----------------------------------

Accounts and preferences

account duration; Delete or de-identify the identity data after cancellation, but keep the following necessary records.

Orders, payments, refunds, invoices and financial records

Usually at least 7 years from the completion of related transactions, or longer period required for tax, accounting and disputes.

UID, service and performance materials of the game

Time required for completing orders, after-sales, anti-fraud and dispute handling; Delete or de-identify when it is no longer needed.

Customer service and complaint record

Usually 2 years after the work order is closed; It can be extended in case of dispute, fraud or legal requirements.

Security and access logs

usually no more than 12 months; It can be extended when it is related to incident investigation, ban or legal request.

Marketing consent and unsubscribe record

consent validity period; Keep the minimum inhibition record after unsubscribing to avoid sending again. Account deletion and audit records shall be kept during the period required to prove the deletion request, fulfill legal obligations, prevent abuse and safeguard legal rights.

The data in the backup will be gradually overwritten during the backup rotation cycle, and the deletion rule will continue to be applied when restoring. When there are requirements for investigation, litigation, refusal to pay, fraud or regulatory security, we can suspend the deletion of relevant records.

We take administrative, technical and physical measures commensurate with risks, including access control, minimum authority, encrypted transmission, session and CSRF protection, audit log, key/token management, backup, monitoring and supplier management. No Internet transmission or storage can guarantee absolute security.

You should protect the login provider's account, email address and equipment, and avoid sharing verification codes, payment vouchers or recharge links. Please contact us immediately if you find any unauthorized accounts or transactions. In case of data security incidents that may affect you, we will assess and dispose of them according to applicable laws and notify you and the competent authorities when necessary.

Orders, payments, top-ups, subscriptions, refunds, customer service and safety notices are necessary for the performance of services and cannot usually be closed. Marketing email, event push or personalized recommendation can be closed through the unsubscribe link in the information, account preference or contact us. Unsubscribe from marketing will not affect the necessary service notice.

Unless otherwise agreed, we will not use the email provided by a third-party login provider (such as LINE) for marketing.

According to your local laws, you may enjoy some or all of the following rights:

-Know how we handle personal data and ask for access or a copy.

-Correct inaccurate, incomplete or outdated information.

-Request deletion, anonymization or restriction of processing under legal conditions.

-Obtain the information provided by you in a structured and common format, or request transmission to others.

-Oppose the processing based on legitimate interests, direct marketing or certain portraits.

-Withdraw consent, adjust Cookie and communication preferences.

-Require manual review (if applicable) of decisions made only by automated processing that have a significant impact.

-Complain to the competent data protection or privacy regulator.

You can use the account function or send an email to support@yoveya.com made a request. In order to protect the account, we may verify the identity, order or authorized agent qualification. We will reply within the time limit prescribed by applicable laws; Evidently unfounded, repetitive or excessive requests can be refused or charged a reasonable fee as permitted by law.

You can apply for cancellation in the account settings. In order to avoid incomplete transactions or damage to rights and interests, when there are pending payment, pending opening, in-process orders, refunds, refusal of payment or effective automatic renewal, the system may require related matters to be completed or closed first. After the logout is completed, we will cancel the active session and delete or de-identify the general account identity data.

Orders, financial, tax, refund, audit, anti-fraud or dispute records that must be kept according to law will not be deleted immediately due to cancellation, but their use and access will be restricted. Your account and materials with third-party game, subscription, payment or login providers will not be automatically deleted due to cancellation of Yoveya, so please manage them directly with the corresponding providers.

The service is not for children under the age of 13, and we will not knowingly collect their personal data. Users who have not reached the local legal age of majority should use the service and pay under the consent and supervision of their parents or legal guardians. If you think that children have provided us with information without proper authorization, please contact us, and we will investigate and take reasonable deletion or restriction measures.

The website may link or jump to a third-party game, publisher, activation, login, payment or social service. The third party independently decides its data processing method, and Yoveya does not control its policies. Before submitting information or authorization, please read the privacy notice and safety tips on the target page.

We may update this policy due to changes in services, suppliers, laws or regulatory requirements. The new version will be published on the website and marked with the last update time; Major changes will be notified by in-station notice, mail or prominent prompt when required by applicable laws, and consent will be obtained again when necessary. Records of previous versions and user consent will be retained as required by compliance.

17.1 Hong Kong

Yoveya's main business is located in Hong Kong. When you are bound by the Personal Data (Privacy) Ordinance of Hong Kong, you may request to access and correct the personal data we hold. Direct sales promotion will only be carried out according to the applicable notice and consent requirements. You can also complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong.

17.2 European Economic Area, Britain and other regions with additional rights

When the relevant laws are applicable, we will handle the information according to the contract performance, legal obligations, legal interests or consent, and provide the rights of access, correction, deletion, restriction, objection, portability and supervision of complaints. Cross-border transmission will adopt applicable safeguards. If local laws require the information of the representative or data protection officer, we will provide it in the regional supplementary notice.