← Back to RYŪ Vault

Privacy Policy

Last updated: May 2026

1. Who we are

RYŪ Vault is a trading card game subscription and retail business based in Kuala Lumpur, Malaysia. We operate the website at ryuvault.com. You can reach us at hello@ryuvault.com.

2. What data we collect

  • Account data: name, email address, and Google account identifier when you sign in.
  • Order data: shipping address, phone number, and items purchased.
  • Payment data: transaction reference numbers. We do not store card numbers or bank credentials — payments are processed by iPay88.
  • Subscription preferences: TCG preferences, play style, and box tier selection.
  • Usage data: pages visited, browser type, and IP address collected automatically by our hosting provider (Vercel).

3. How we use your data

  • To fulfil your orders and subscription boxes.
  • To send order confirmations, tracking numbers, and shipping updates by email.
  • To personalise your mystery box contents based on your preferences.
  • To respond to customer service enquiries.
  • To improve our website and services.

We do not sell your personal data to third parties.

4. Third-party services

  • Firebase (Google): authentication and database storage.
  • iPay88: payment processing.
  • EasyParcel / J&T Express: shipment creation and delivery.
  • Resend: transactional email delivery.
  • Vercel: website hosting and infrastructure.

Each provider operates under their own privacy policy and data processing agreements.

5. Data retention

We retain your account and order data for as long as your account is active, or as required by Malaysian law. You may request deletion of your account and personal data at any time by emailing hello@ryuvault.com.

6. Cookies

We use essential cookies for authentication (Firebase session tokens) and no third-party tracking cookies. You can disable cookies in your browser settings, but this will prevent you from signing in.

7. Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to access, correct, or delete your personal data. Contact us at hello@ryuvault.com to exercise these rights.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the latest revision. Continued use of the website after changes constitutes acceptance.

9. Contact

For any privacy-related questions, email us at hello@ryuvault.com.