Privacy Policy
This policy describes data handled by HASA GOLD STORE. Firebase Authentication manages sign-in; customer, catalog, order, and wallet data is stored in our database and accessed through the store API. Game passwords are never requested.
We never request, store, or verify your game master account password or social login credentials.
Eligible Free Fire orders are submitted to Nexaura only after payment confirmation; provider status does not independently verify in-game receipt. Other games are fulfilled by the team.
Signed-in users' short HASA member IDs, themes, favorites, saved Player IDs, and notification preferences are stored with the account profile. The Firebase UID remains the internal account key.
Customer records and orders are associated with the signed-in Firebase UID.
Information We Collect
Depending on the features you use, the website stores:
- Account data: Firebase UID, short HASA member ID, email address, display name, theme, notification preferences, favorites, recent game activity, and saved Player IDs.
- Order data: Game, selected product, Player ID, server, catalog price snapshot, selected payment method, payment/order status, payment-proof filename and timestamp, and the authenticated customer's UID. Submitted proof images are stored privately and linked from the order record.
- Wallet deposit data: The submitted reference number, provider deposit ID, verification status, and credited amount.
- Authentication data: Firebase Authentication processes sign-in credentials. The website does not store passwords itself.
How We Use Information
Data is used to authenticate your account, save your preferences, create and display orders, and allow authorized administrators to review submitted eZ Cash payment proof:
- Account features: Displaying your profile and restoring your saved preferences and Player IDs across signed-in sessions.
- Order history: Showing the order records associated with your UID.
- Wallet deposits: Sending a submitted eZ Cash reference to the configured deposit provider for verification and recording its result.
- Service operation: Processing requests and displaying errors needed to operate the website.
Zero Password Storage & Player Safety
Your game account credentials are strictly your own. HASA GOLD STORE does not request game passwords. Player IDs entered for orders are stored with the order record. Where available, a third-party lookup can return a player name for the entered ID, but this does not verify account ownership:
- Never ask for passwords: We will never ask for your game password, Google account, Facebook login, Apple ID, or secondary verification codes.
- Provider status: Eligible Free Fire top-ups are submitted to Nexaura after payment confirmation. Provider status is tracked in the order but does not independently confirm in-game receipt.
- Phishing Warning: If anyone claiming to represent HASA GOLD STORE requests your game password, do not disclose it. Use only the contact options listed on the Support page.
Security & Encryption Standards
Firebase Authentication provides identity. The Express API validates identity and enforces customer and administrator access to database operations. Payment card data is not collected by this website.
- Transport security: Use the HTTPS website endpoint for traffic in transit. The deployment's host and Firebase apply their own security controls.
- API authorization: Customer operations are scoped to the signed-in UID; clients cannot directly write orders, wallet credits, catalog data, or administrative records.
- Payment data: Card and bank checkout are not offered. Do not enter payment credentials on this website.
Game Publishers & Third Parties
Firebase Authentication is used for sign-in. Customer, catalog, order, and wallet data is managed through the HASA GOLD STORE API and its configured database. Payment proof is sent to private storage for review. Supported Player ID lookups and eligible Free Fire order submissions are sent to their configured providers:
- Free Fire fulfillment: eligible paid orders are submitted to Nexaura.
- Card and bank payments are not offered through this website.
- Firebase Authentication: account sign-in and identity verification.
- Nexaura: supported Free Fire Player ID lookup, eligible top-up submission, and eZ Cash deposit verification.
Firebase and Nexaura process data according to their own terms and privacy policies. Firebase may also process technical data needed to provide its services. No game account credentials are collected.
Your Rights & Contacting Us
Depending on applicable law, you may have rights regarding your personal information, including:
- Access & Correction: The dashboard shows your saved profile preferences, Player IDs, and order history. The website has no data-export tool.
- Deletion & Erasure: Account deletion is not self-service on this website. Order and financial records may be retained where required.
- Inquiries: Use the contact options listed on the Support page for privacy questions.