Privacy Policy

Last updated: October 2026

1. Introduction

TopupDrop ("we", "us", "our") respects your privacy. This policy explains what we collect when you visit our website and use our services, how we use it, who we share it with, and the choices you have. By using our services you accept the practices described here.

2. Information we collect

Account details: your name, email address and WhatsApp number, and (optionally) your city.
Game account details: Player ID (UID), Server ID and Zone ID, which are needed to deliver a top-up. We never ask for your game password.
Order and payment information: order history, amounts, the payment method you used (eSewa, Khalti, FonePay, bank transfer or wallet), your payment reference and the payment screenshot you upload.
Wallet and rewards: deposits, balance, refunds, discount-code use and referral activity.
Device information: IP address, browser type and device type, used for security and fraud prevention.
Cookies: small files that keep you signed in and protect forms (see section 6).

3. How we use your information

To process and deliver your top-up orders and run your wallet.
To send order confirmations and status updates by email, and to contact you about an order on WhatsApp if needed.
To provide customer support.
To detect and prevent fraud, abuse and unauthorized transactions.
To improve our website and services.
To meet legal obligations.

4. Who we share it with

We do not sell, trade or rent your personal information. We share it only as needed:

Our top-up supplier: receives your Player ID, Server/Zone ID and the package you bought, only to deliver your top-up.
Payment providers and banks: eSewa, Khalti, FonePay and your bank handle your payment. We do not store your card or wallet login details.
The "Recently Purchased" feed: shows a masked version of your first name (for example "Ab***"), the package, and your city only if you chose to add one. You can opt out of this feed in your profile at any time.
Sign in with Google: if you choose "Continue with Google", Google tells us your name and verified email address so we can create or open your account. We never see your Google password. Google's handling of your data is described in the Google Privacy Policy.
Our robot check (Cloudflare Turnstile): when you log in, sign up, ask for an email code, reset a password or track an order, we use Cloudflare Turnstile to tell people from automated bots. It works in the background and usually shows nothing. To do this, Cloudflare receives technical information from your browser and device (such as your IP address and browser details). Cloudflare's handling of this data is described in the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.
Legal requirements: we may disclose information if the law requires it or to protect our rights.

5. Data security

All traffic between your browser and our website is encrypted with HTTPS.
Passwords are stored hashed, never in plain text.
Payment screenshots are stored privately and can only be seen by you and our team.
Access to personal information is limited to the people who need it to run the service.

No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

6. Cookies

We use essential cookies to keep you signed in (including the optional "Keep me signed in"), to protect forms against forgery, and to remember short-lived choices. We use Google Analytics to count visits and see which pages are used. These services set their own cookies and receive your IP address and the pages you view, never your passwords, payment details or game IDs. You can block cookies in your browser, but you will not be able to sign in or order.

7. Your rights

Access: ask for a copy of the data we hold about you.
Correction: update your name and WhatsApp number in your profile, or ask us to correct other details.
Deletion: ask us to delete your account and data, subject to records we must keep (for example order and payment records).
Feed opt-out: hide your purchases from the public feed in your profile.

To use these rights, contact us using the details below.

8. Children's privacy

Our services are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal data, please contact us and we will remove it.

9. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with its "Last updated" date.

10. Contact us

Questions about this policy? Contact us: