Who we are and how to contact us
DrKeys.sa is operated by DrKeys Establishment, an establishment registered in Saudi Arabia. Business registration (Unified National Number): 7053426792. Business address: Saudi Arabia. Customer and privacy contact: support@drkeys.sa.
This policy covers DrKeys.sa, the DrKeys digital storefront. For privacy questions or requests, email support@drkeys.sa or use our contact form. It does not cover independently operated game platforms or other websites linked from this store.
Information we collect
Registration collects your name, email address, self-declared birth date and country. Birth date is profile information, not identity verification. We store a password hash rather than your readable password. Account preferences, verification status, wishlist entries and support messages are also stored.
Security session records include encrypted first and recent IP addresses, browser-reported device type, operating system, browser, sign-in time and recent activity. These details may be approximate: a shared IP or browser description does not identify a person or exact hardware.
If you allow optional usage reporting, we record signed-in storefront page types, click categories, product references, cart quantities and activity times. We do not record typed form contents, passwords, verification codes or complete sensitive URLs in these reports.
Order records include purchased-item snapshots, payment-provider references, delivery records, refunds and applicable wallet or reward entries. Card details are handled by the payment provider; the store does not request your PayPal password or store full card numbers.
Why we use information
We use account information to provide and administer your account, verify email ownership, maintain preferences and respond to support requests. Security records help protect accounts, investigate misuse and maintain reliable services. Transaction records support delivery, reconciliation, refund review and legal obligations when commerce is enabled.
Optional usage reporting helps us understand storefront navigation and cart activity. It is disabled unless you allow it in Cookie preferences and can be turned off there. Necessary security logging is separate and remains active. We do not use these reports for advertising or send them to Google.
Service providers and disclosures
Hostinger provides website hosting and the configured email service. Currency rates are requested by our server from the rate provider, without sending your account profile or cart. If Google sign-in is used, Google processes its own sign-in flow. When PayPal is offered at checkout, PayPal processes payment information under its own privacy terms.
Authorized administrators can access customer information needed to operate and secure the store. We may disclose necessary information to service providers, where required by law, or to address fraud and protect rights. We do not sell customer information. Provider processing or storage may occur outside Saudi Arabia; applicable safeguards and legal requirements must be met for such processing.
Retention and security
Verification and recovery codes expire after ten minutes. Pending sensitive email payloads are cleared after delivery or expiry. Routine usage events and inactive customer session records are removed after 90 days. Usage reports show the most recent 30 days.
Account and support records are kept while needed to provide services, resolve requests and meet legal obligations. Required transaction and audit records may be retained after account closure. Backup copies are restricted and follow backup replacement and recovery procedures. Request deletion through support@drkeys.sa; we will explain any records that must be retained.
We use access controls, password hashing, encryption for specified sensitive records and transport protections on the live site. No online system can guarantee absolute security. Do not send passwords, authenticator codes or full activation keys in a public message.
Your choices and rights
Subject to applicable law, you may request information about processing, access or a copy of your personal data, correction and deletion, and withdraw consent where processing depends on consent. Contact support@drkeys.sa from your registered email. We may need proportionate verification of your identity; we will not ask for your account password or authenticator code.
You may also raise a complaint with the competent Saudi data-protection authority. Turning off optional reporting stops new optional events; it does not automatically erase existing security or transaction records. Please contact us about records already held.
Updates
We will publish changes on this page with the updated date. Material changes requiring consent will not be treated as accepted merely because an older consent exists.