Privacy Policy
This notice explains how FF SHOP handles personal information when you use the website, create an account, place an order, make a payment or contact support. Last updated: 7 November 2026.
Information used for the service
- Account: verified email, name, account identifiers and information needed to authenticate your account and manage sessions.
- Checkout and orders: purchased product, denomination, quantity, INR total, order reference, payment-contact mobile number, policy-acceptance version and timestamp, and any product-specific account information required for a top-up.
- Payment and fulfilment: provider order/payment/refund references, payment method or other non-secret details returned by the provider, live/test status, transaction times, order state, issued-product records and email-delivery confirmation references.
- Security and dispute evidence: the request IP address, browser user-agent and bounded technical details associated with checkout, payment verification and fulfilment.
- Support: messages, documents and information you choose to send when asking for help.
FF SHOP does not store full card numbers, CVVs, card PINs or UPI PINs. Do not send payment secrets, passwords, OTPs or full redeemable codes to support. Payment authentication takes place with the payment provider or bank.
Why information is processed
We use relevant information to provide accounts and orders, verify payments, fulfil digital products, send transactional messages, respond to requests, reconcile payments and refunds, prevent fraud, investigate chargebacks and meet applicable legal obligations. Checkout records include the policy version and acceptance time so that the terms of a transaction can be established.
Account verification and password recovery use email. A mobile number entered for payment contact is not used for an OTP sent by FF SHOP. A bank or payment provider may conduct its own authentication. If an enabled Google sign-in option is used, we receive the sign-in information the customer authorises Google to share.
Sharing and service providers
Hosting, authentication, database, transactional-email, digital-supply and payment providers receive the information necessary for their service. The payment provider selected at checkout may receive customer and transaction details to process and secure the payment. The relevant product supplier may receive the account identifier needed to complete a requested top-up.
Relevant order, payment, checkout and delivery evidence may be provided to the selected payment provider, banks, card networks, professional advisers or competent authorities where reasonably necessary for reconciliation, a chargeback, a suspected fraud or a lawful request. Access is limited to authorised personnel and appropriate service providers. We do not sell personal information.
Cookies and security
Necessary cookies support signed-in sessions and account security. Blocking these cookies can prevent account or checkout functions from working. We do not make marketing consent a condition of buying a product. Transactional order, security and account emails are separate from optional marketing.
Account and order access controls restrict customer access to their own information, and sensitive fulfilment information is protected in storage. No system can promise absolute security. Report a suspected incident through support or the security contact listed in the Terms.
Retention
Additional checkout and dispute-evidence snapshots, including IP, browser and payment-contact details, are normally retained for up to 730 days and then purged. An active dispute, investigation or specific legal hold may require relevant evidence to be kept longer until the hold ends.
Core account and financial records have separate retention needs: account information supports the active account and order history, while order identifiers, amounts, provider references and accounting records may need to be kept for applicable legal, reconciliation or dispute obligations. We retain them only for an appropriate service or lawful purpose; the 730-day evidence period is not a promise that every financial or account record is deleted on that date.
Your requests and choices
Contact support@ffshop.games to request access, correction, account closure or deletion of personal information, or to withdraw an optional consent. We may verify the requester's identity. Deletion can be limited where a specific legal obligation, unresolved dispute, security investigation or legal hold requires particular records to be retained. Withholding information necessary for authentication, payment or fulfilment can prevent that service from being provided.
For a privacy grievance, use the Grievance Officer and complaint process in the Terms and Conditions. Rights available under applicable Indian privacy and consumer law remain available.
Test transactions and children
Test mode: A checkout or confirmation marked Test mode uses a payment-provider sandbox. It does not collect a real payment or issue a redeemable code. A confirmed test transaction receives a clearly marked test-only email; it is not proof of a real purchase or delivery.
A sandbox order still uses the account email and related checkout data needed to run and secure that test. If you are a minor, use the store only through a responsible parent or legal guardian who is legally able to make the purchase.
Contact and updates
FF SHOP
S-10/290 A-1, Panchkosi Road, PURANI CHUNGI, SHIVPUR, Varanasi, Varanasi, Uttar Pradesh, 221003
Customer support: support@ffshop.games
Website: ffshop.games
Material changes to this notice are published here. The version shown for a checkout is recorded with the transaction.