Official BuyCheapKeys policy

Privacy Policy

How BuyCheapKeys collects, processes, protects, and respects your personal data under GDPR and CCPA.

Updated: November 20266 sections3 min read

Data Controller

The data controller is Arga Digital Group LLC (BuyCheapKeys), 30 N Gould St Ste R, Sheridan, WY 82801, United States. Contact for privacy matters: privacy@buycheapkeys.com.

Scope & Data Protection Commitment

This Privacy Policy explains how BuyCheapKeys collects, uses, stores, and safeguards personal information when you browse our catalog, register an account, enable Google Authenticator 2FA, join our Affiliate Program, or purchase digital keys.
For all data protection, GDPR, CCPA, or privacy inquiries, you can contact our Data Protection Team directly at privacy@buycheapkeys.com.

Categories of Personal Data We Collect

Identity & Account Data: Name, email address, hashed password, Google OAuth identifier (if signing in with Google), and encrypted TOTP 2FA status.
Transaction & Delivery Data: Order history, delivered digital keys, currency/region preferences, and payment references from the payment gateway (we never receive or store card details).
Technical & Anti-Fraud Data: IP address, browser user-agent, country geolocation (used to warn you before buying region-locked keys), session cookies, and affiliate referral attribution cookies.
Fraud-Prevention Signals and Session Replay: device identifiers (a device cookie and a hash of browser and hardware traits), the public IP address your browser reports through WebRTC, automation and proxy/VPN indicators, and a replay of how pages are used (clicks, scrolls and page changes). Form fields are masked and digital keys, account credentials and 2FA secrets are never recorded. Replays are kept for 30 days, or longer only when linked to suspected fraud.
Identity Verification: if an order or balance top-up shows signs of fraud (for example, gift cards from several different platforms), we may ask for a photo of an ID document, a selfie holding it and, if you paid by card, the front of the card with all but the last 4 digits covered. Only the security team reviews these images, to confirm they match the name of the payer or account. They are not sent by email, are not used for anything else, and are deleted 14 days after the decision.
Analytics and Advertising Measurement (Google): if you click Accept in the cookie banner, we use Google Tag Manager and Google Analytics 4 to measure visits and purchases (pages viewed, products viewed, cart and checkout steps, order value). Google Consent Mode is on: until you accept, no analytics or advertising cookies are set and no personal identifiers are sent. You can change your choice by clearing the site cookies; the banner will appear again.

Legal Bases & Purposes of Processing

Contractual Necessity: To deliver purchased activation keys instantaneously, send order confirmations, and manage your digital library (/dashboard/library).
Legitimate Interest & Fraud Prevention: To prevent unauthorized account access, carding, multi-accounting coupon abuse, and automated scraping. Devices and networks linked to fraud may be blocked from the site.
Legal & Tax Compliance: To comply with statutory accounting, Anti-Money Laundering (AML), and tax reporting obligations (retained for 5 to 7 years as required by law).

Third-Party Disclosures & Publisher Verification

We never sell your personal data. We share strictly necessary transaction data only with payment service providers (currently the online payment gateway and, when card payments are available, the third-party provider that processes them, which handles your payment data under its own privacy policy), wholesale key fulfillment APIs, and game publishers/developers when verifying activation timestamps during a disputed key claim.

Your Rights (GDPR / CCPA / International)

You have the right to access, rectify, export (portability), restrict, or request deletion of your personal data at any time.
To exercise your privacy rights or request account erasure, email privacy@buycheapkeys.com from your registered email address.