Privacy Policy
Last updated: 4 November 2026
1. Who we are
The controller of the personal data described in this policy is GSBP INTERNATIONAL CO., LIMITED, a company incorporated in Hong Kong, which operates leskamas.com (“we”, “us”, “our”).
We buy in-game currency (kamas) and game accounts from players, and offer a free server exchange service. In this policy, “you” means any visitor of the website and any partner or supplier who sells to us or uses our services.
Contact for any privacy question: [email protected].
2. Data we collect
- Account data: first name, last name, email address, telephone number and password (stored in hashed form).
- Order data: server, quantity, price, in-game character name, Temporary code for exchange, WhatsApp number (optional), comments, order history and status.
- Payout data: the details needed to pay you, depending on the method you choose: PayPal or Skrill email, bank details (IBAN, bank name, account holder), cryptocurrency wallet address, Binance ID, Alipay account or Moroccan bank / cash transfer details.
- Game account data (account sales only): the login and password of the game account you sell to us. The password is stored encrypted.
- Verification data: when required by law or by our payment providers (anti-money-laundering and fraud checks), we may ask for proof of identity or of the origin of the goods.
- Communications: messages you send us by live chat, email, WhatsApp or the contact form.
- Technical data: IP address, browser and device information, pages visited and cookies (see section 7).
3. Why we use your data
- To process your sale, exchange or account sale, deliver in game and pay you (performance of our contract with you).
- To verify identity and the origin of virtual goods, prevent fraud and comply with anti-money-laundering rules (legal obligation and legitimate interest).
- To answer your questions and contact you about your orders, including by WhatsApp if you gave us your number (contract and legitimate interest).
- To keep the website secure and working (legitimate interest).
- To keep accounting and tax records (legal obligation).
We do not sell, rent or lease your data, and we do not use it for automated decisions that significantly affect you.
4. Who we share it with
Only to the extent necessary to run our services:
- Payment providers (for example PayPal, Skrill, banks, Binance, Alipay, cryptocurrency networks) to send your payout. They process your data under their own privacy policies.
- Tawk.to (live chat), WhatsApp (if you contact us there), Trustpilot (reviews widget), our hosting provider and Cloudflare (security and content delivery).
- Authorities, when we are legally required to.
5. How long we keep it
- Account data: as long as your account is active, then up to 3 years after your last activity.
- Orders and payout records: 7 years, for accounting, tax and anti-money-laundering purposes.
- Live chat and support messages: up to 3 years.
- Technical logs: up to 12 months.
6. International transfers
We are based in Hong Kong and our service providers may process data in other countries. When data of users in the European Economic Area or the United Kingdom is transferred outside these areas, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.
7. Cookies
We use cookies that are necessary for the website to work: your session, language, currency and login. The live chat and the reviews widget may set their own cookies when they load. We do not use advertising cookies. You can delete or block cookies in your browser settings; some features may then stop working.
8. Your rights
Depending on where you live (in particular under the GDPR in the European Union and the Personal Data (Privacy) Ordinance in Hong Kong), you can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format and withdraw your consent at any time. Write to [email protected]; we answer within 30 days and may ask you to confirm your identity. Some data must be kept for legal reasons even if you ask us to delete it (see section 5). You may also complain to your local data protection authority.
9. Security
The website uses encrypted connections (HTTPS). Passwords are hashed, game account passwords are encrypted, and access to personal data is limited to the staff who need it. We never store payment card numbers.
We will never ask you for your password, an email verification code or a payment in advance. Our agents only contact you through the live chat on this website, by email from @leskamas.com or on our official WhatsApp number shown on the website.
10. Age
Our services are for people aged 18 or over. If we learn that we hold data of a minor, we delete it.
11. Changes
We may update this policy. The date at the top shows the latest version; important changes will be announced on the website.
12. Contact
Email: [email protected] – or the live chat on this website.