Privacy Policy

Last Updated: September 2026

Gemsly, an online store based in Sri Lanka, respects your privacy. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have. We handle personal data in line with the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka.

1. Information We Collect

Account Information: Your name, email address and password (stored only in encrypted, hashed form). If you sign in with Google, we receive your Google display name, email address and profile picture.
Order Details: The products you buy and the delivery details you enter, such as a game player ID.
Payment Information: Card payments are entered directly on the secure page of our licensed payment gateway. We never receive or store your full card number, expiry date or CVV — we only receive the transaction reference, amount and payment status. For bank transfers, we keep the payment slip you upload and the transaction reference.
Technical Data: IP address, browser type and activity logs, used for security and fraud prevention.

2. How We Use Your Information

To process payments and deliver the products you order.
To send order confirmations, delivery updates and support replies.
To process cancellations and refunds.
To detect and prevent fraud and protect your account.
To meet our legal, tax and accounting obligations.

We do not use your information for purposes unrelated to your orders and account without your consent.

3. Sharing Your Information

We do not sell, rent or trade your personal information. We share it only where necessary with:

Payment gateways and banks, to process payments and refunds.
Product suppliers, only the delivery details needed to fulfil your order (for example, a player ID for a top-up).
Service providers such as hosting and sign-in providers, who process data on our behalf.
Authorities, where required by Sri Lankan law or to prevent fraud.

4. Data Security

Our website uses SSL/TLS encryption (HTTPS) for all data sent between your browser and our servers. Passwords are stored in hashed form, and access to personal data is limited to authorised staff who need it to run the store.

5. Data Retention

We keep your account information while your account is active. Order and payment records are kept for as long as required by Sri Lankan tax and financial regulations, after which they are securely deleted or anonymised.

6. Your Rights

You may ask us to access, correct or delete your personal information, or withdraw consent you have given, by emailing gemslylk@gmail.com. We will respond within a reasonable time. Some records may need to be kept where required by law.

7. Cookies

We use essential session cookies to keep you signed in and to keep your cart working. We do not use third-party advertising cookies. You can disable cookies in your browser, but you will not be able to sign in or complete a purchase.

8. Children

Our store is intended for users aged 18 or over, or users with the consent of a parent or legal guardian. We do not knowingly collect personal information from children without such consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last Updated" date.

10. Contact Us

For any privacy question or request, contact us at gemslylk@gmail.com, on WhatsApp at +94 76 725 0344, or open a support ticket from your profile page.

Gemsly · Sri Lanka