Privacy Policy

Effective Date: March 23, 2026

This Privacy Policy explains how dodopin.com (the “Website”, “Platform” or “Service”) collects, uses and protects personal data.

The Service is operated by:

VELCORE TECHNOLOGY LIMITED
A private company limited by shares incorporated in Hong Kong
Business Registration Number (BRN): 80005054
Registered address:
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong

VELCORE TECHNOLOGY LIMITED is the data controller for personal data processed through the Service (“Dodopin”, the “Company”, “we”, “us” or “our”), unless we tell you that another party is the controller for a specific processing activity.

By using the Website you acknowledge this Policy. Where the law requires consent for a particular processing activity, we will request it separately.

This Policy should be read together with our Terms and Conditions, Cookie Policy and Anti-Fraud, AML and KYC Policy.

1. Information we collect

We may collect the following categories of personal data, depending on how you use the Service.

1.1 Identity and contact data

  • name
  • email address
  • phone number
  • billing or delivery details that you provide

1.2 Account data

  • username
  • login credentials (stored in hashed or similarly protected form)
  • account preferences and account activity

1.3 Transaction data

  • purchase history and order records
  • product, amount, currency and status
  • limited payment metadata returned by payment providers (we do not store full card numbers)

1.4 Technical data

  • IP address
  • browser type, device information and operating system
  • approximate location derived from IP where used for security or localisation
  • access times, logs and diagnostic data

1.5 Communication data

  • messages sent through support channels
  • email or other correspondence with us

1.6 Verification data

Where fraud-prevention, AML or KYC checks apply, we may collect identity documents, proof of address, a selfie or live verification image, and payment-method confirmation, as described in the Anti-Fraud, AML and KYC Policy.

2. How we use your information

We use personal data to:

  • provide, operate and maintain the Service;
  • create and manage accounts;
  • process orders, payments and delivery of digital products;
  • communicate about orders, support and service notices;
  • detect, prevent and investigate fraud, abuse, chargebacks and security incidents;
  • improve the Website, products and user experience;
  • comply with legal, tax, accounting, sanctions and regulatory obligations; and
  • establish, exercise or defend legal claims.

3. Legal bases (where GDPR or UK GDPR applies)

Where the EU GDPR or UK GDPR applies, we rely on one or more of the following bases:

  • performance of a contract with you, or steps taken at your request before a contract;
  • our legitimate interests, including operating the Service, securing accounts, preventing fraud and improving the Website, provided those interests are not overridden by your rights;
  • compliance with a legal obligation; and
  • consent, where we ask for it and the law requires it (for example certain cookies or marketing).

You may withdraw consent at any time, without affecting processing that took place before withdrawal.

4. Payments

We do not store full payment-card details.

Payments are processed by independent payment service providers. Those providers collect and process payment data under their own privacy notices. We receive confirmation of payment status and limited metadata needed to complete the order, prevent fraud and handle disputes.

5. Sharing and disclosure

We may share personal data with:

  • payment service providers, acquirers and fraud-screening partners;
  • hosting, infrastructure, email, analytics and security providers who process data on our instructions;
  • suppliers or fulfilment partners, only where necessary to deliver a product you ordered;
  • professional advisers (legal, accounting, compliance) under confidentiality;
  • competent authorities, courts or regulators where required by law or to protect our rights; and
  • a successor entity if we transfer or reorganise the business, subject to appropriate safeguards.

We do not sell personal data.

6. International transfers

VELCORE TECHNOLOGY LIMITED is established in Hong Kong. Personal data may be processed in Hong Kong and in other countries where our providers operate, including the United Kingdom, the European Economic Area and other jurisdictions.

Where a transfer is restricted by applicable data-protection law, we use appropriate safeguards, such as contractual protections required by that law, unless a legal exception applies.

7. Retention

We keep personal data only for as long as needed for the purposes in this Policy, including:

  • providing the Service and keeping order records;
  • legal, tax and accounting retention;
  • dispute, chargeback and fraud-prevention periods; and
  • as otherwise required or permitted by law.

When data is no longer required, we delete or irreversibly anonymise it where reasonably practicable.

8. Security

We apply technical and organisational measures appropriate to the risk, including access controls, encrypted transmission where appropriate, and restricted staff access.

No online transmission or storage system is completely secure. You should also keep your own devices and passwords secure.

9. Your rights

Depending on your jurisdiction, you may have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of data;
  • object to, or request restriction of, certain processing;
  • request data portability;
  • withdraw consent; and
  • lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details below. We may need to verify your identity before we act on a request. Some rights are limited where we must keep data for legal, security or contractual reasons.

10. Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy.

11. Children

The Service is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us so that we can delete it where required.

12. Third-party websites

The Website may contain links to third-party sites, games or payment pages. Their privacy practices are outside our control. You should read their policies before providing data to them.

13. Changes

We may update this Privacy Policy from time to time. Changes are published on this page. The Effective Date at the top is the date of the current version.

14. Contact

For privacy enquiries, contact us through the official channels on dodopin.com, or email [email protected].

VELCORE TECHNOLOGY LIMITED
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong