1. Introduction & Legal Framework

Levi Topup Store ("we", "us", "our") operates under the laws of the Democratic Socialist Republic of Sri Lanka, specifically the Personal Data Protection Act, No. 9 of 2022 (as amended by Act No. 22 of 2025) — South Asia's first comprehensive data protection legislation. We are committed to protecting your privacy in accordance with the Electronic Transactions Act, No. 19 of 2006 (as amended by Act No. 25 of 2017), the Computer Crimes Act, No. 24 of 2007, and the Right to Information Act, No. 12 of 2016. This Privacy Policy explains how we collect, use, store, and protect your personal information as a data controller under the PDPA.

2. Data Controller Information

Data Controller: Levi Topup Store
Contact: Sasmina Fernando, levitopupstorebs@gmail.com, WhatsApp +94 75 346 1574
Registered Address: Nuwara Eliya, Sri Lanka
Data Protection Officer: As a small business under the PDPA threshold, we designate Sasmina Fernando as the point of contact for all data protection matters. Under Section 32 of the PDPA, we are required to appoint a Data Protection Officer where processing is systematic and extensive.

3. Information We Collect (Categories of Personal Data)

Under Section 4 of the PDPA, we process the following categories of personal data:

Identity Data: Name, username, email address, player IDs, Zone IDs.
Transaction Data: Receipts, order history, bank reference numbers, payment verification details.
Technical Data: IP address, browser type, device information, session data.
Communication Data: WhatsApp messages, emails, and customer support inquiries.

We do not collect special categories of personal data (sensitive data under Section 5 of the PDPA) such as health data, biometric data, or religious beliefs.

4. Legal Basis for Processing (PDPA Section 6)

We process your personal data based on the following lawful grounds under the PDPA:

Consent: For marketing communications and optional data collection (freely given, specific, informed, and unambiguous under Section 7).
Contractual Necessity: For order processing, delivery, and account management.
Legal Obligation: For tax compliance, fraud prevention under the Computer Crimes Act, and regulatory requirements.
Legitimate Interests: For security, analytics, and service improvement, provided such interests do not override your fundamental rights.

5. Purpose Limitation & Data Minimization

In accordance with PDPA Section 6(b) and (c), we collect personal data only for specified, explicit, and legitimate purposes. We do not process personal data in a manner incompatible with those purposes. We adhere to data minimization principles, collecting only what is necessary for the intended purpose of game top-up delivery and account management.

6. Data Security & Integrity Measures

Under PDPA Section 6(f) and the Computer Crimes Act, we implement the following security measures:

• Transport Layer Security (TLS/HTTPS): All data transmission is encrypted.
• Firebase Security Rules: Database access controls with role-based permissions.
• Password Hashing: Bcrypt algorithm for credential storage.
• Access Controls: Admin-only access to sensitive order data.
• Data Integrity: Under Section 21(3) of the Electronic Transactions Act, electronic records and signatures on our platform carry legal presumption of truth and genuineness unless proven otherwise.

No electronic storage is 100% secure, but we employ commercially acceptable measures proportional to the risk under PDPA Section 6(f).

7. Data Retention Period

Under PDPA Section 6(e) and the Inland Revenue Act requirements, we retain personal data for:

• Active Accounts: For the duration of account activity plus 2 years.
• Transaction Records: 7 years for tax compliance purposes.
• Closed Accounts: 1 year after account closure for dispute resolution.
• Receipt Images: 90 days after order completion, then securely deleted.

After the retention period, data is securely deleted or anonymized in accordance with PDPA guidelines.

8. Cross-Border Data Transfers

Under PDPA Section 33 (as amended by Act No. 22 of 2025), we may transfer personal data to Firebase/Google Cloud services located outside Sri Lanka. Such transfers are conducted with adequate safeguards including:

• Standard Contractual Clauses (SCCs) with Firebase.
• Encryption in transit and at rest.
• Compliance with the amended PDPA's provisions for greater flexibility in cross-border data flows.

We do not transfer personal data to jurisdictions without adequate data protection standards as determined by the Data Protection Authority of Sri Lanka.

9. Cookies, Local Storage & Electronic Marketing

We use browser local storage (not third-party cookies) to maintain your cart, theme preference, and login session. Under PDPA Section 30, we do not engage in unsolicited electronic marketing. Any marketing communications require your explicit prior consent ("solicited messages"), and you may opt out at any time free of charge. We do not use automated decision-making or profiling that would create irreversible impacts on your rights under PDPA Section 27.

10. Your Rights as a Data Subject (PDPA Sections 20-29)

Under the PDPA, you have the following rights:

• Right to Information (Section 20): Know what data we collect and how we process it.
• Right of Access (Section 21): Request a copy of your personal data within 21 days.
• Right to Rectification (Section 22): Correct inaccurate or incomplete data.
• Right to Erasure (Section 23): Request deletion under limited circumstances (e.g., data no longer necessary, consent withdrawn).
• Right to Restriction (Section 24): Limit processing in specific cases.
• Right to Object (Section 25): Object to processing based on legitimate interests or public interest.
• Right to Withdraw Consent (Section 26): Withdraw consent at any time without affecting prior lawful processing.
• Right to Complain (Section 29): File a complaint with the Data Protection Authority of Sri Lanka within 3 months of any controller decision.

Under the Right to Information Act, No. 12 of 2016, you may also request disclosure of how your data is processed. Contact us at levitopupstorebs@gmail.com to exercise these rights.

11. Data Breach Notification

Under PDPA Section 31, in the event of a personal data breach, we will notify the Data Protection Authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in high risk to your rights and freedoms, we will also notify affected data subjects without undue delay. We maintain internal records of all data breaches as required by the Authority.

12. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Democratic Socialist Republic of Sri Lanka, including the PDPA, Electronic Transactions Act, Computer Crimes Act, and the Constitution (Article 14(1) — right to freedom of speech and expression including publication, which encompasses privacy rights as interpreted in Nadarajah v Obeysekara and Hewamanna v AG). Any dispute arising shall be subject to the exclusive jurisdiction of the District Courts of Sri Lanka, with the seat in Nuwara Eliya.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in Sri Lankan law or our practices. Material changes will be notified via email or WhatsApp at least 14 days before taking effect. The updated policy will be posted on this page with a revised effective date.

14. Contact & Data Protection Authority

For privacy inquiries, contact Sasmina Fernando at levitopupstorebs@gmail.com or WhatsApp +94 75 346 1574.

Data Protection Authority of Sri Lanka:
Ministry of Technology, Sri Lanka
Website: www.dataprotection.gov.lk (when operational)

Registered address: Nuwara Eliya, Sri Lanka.

1. Acceptance of Terms & Electronic Contract Formation

By accessing, browsing, or using Levi Topup Store ("the Platform"), you acknowledge that you have read, understood, and agree to be bound by these Terms & Conditions. These terms constitute a legally binding electronic contract under the Electronic Transactions Act, No. 19 of 2006 (as amended by Act No. 25 of 2017). Under Section 11 of the Electronic Transactions Act, a contract shall not be denied legal validity or enforceability solely on the ground that it is in electronic form. Sections 12-14 establish rules for offer and acceptance in electronic form, which govern all transactions on this Platform. If you do not agree to these terms, you must immediately cease using our services.

2. Definitions

• "Platform" refers to the Levi Topup Store website and all associated services.
• "User" / "Customer" refers to any natural person who accesses or uses the Platform.
• "Digital Goods" refers to in-game currency, passes, items, and other virtual products sold through the Platform.
• "Order" refers to a confirmed purchase request submitted by a User.
• "We" / "Us" / "Our" refers to Levi Topup Store, owned and operated by Sasmina Fernando.

3. Eligibility & Legal Capacity

Under the Age of Majority Ordinance and the Minors' Contracts Ordinance of Sri Lanka, you must be at least 16 years of age and capable of entering into binding contracts to use our services. By registering, you warrant that:

• You are a natural person with full legal capacity under Sri Lankan law.
• All information provided during registration is accurate, complete, and current.
• You are not prohibited from receiving digital goods under any applicable law.
• If you are under 16, you must obtain verifiable parental or guardian consent before using the Platform.

4. Account Registration & Security

When you create an account, you must provide accurate and complete information. You are solely responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Under the Computer Crimes Act, No. 24 of 2007, unauthorized access to computer systems is a criminal offense. You agree to:

• Notify us immediately of any unauthorized use of your account.
• Not share your login credentials with any third party.
• Not create multiple accounts for fraudulent purposes.
• Accept that we may suspend or terminate accounts that violate these terms.

5. Orders, Payments & Pricing

All orders are subject to acceptance and availability. Payment is accepted exclusively via bank transfer to:

• Bank of Ceylon (BOC) — Account No. 76692666, Branch: Nuwara Eliya
• Peoples Bank — Account No. 134200130058746, Branch: Nuwara Eliya

All prices are quoted in Sri Lankan Rupees (LKR) and are inclusive of all applicable taxes under the Inland Revenue Act. Prices are subject to change without prior notice, but changes will not affect orders already confirmed. Orders are confirmed only after we verify your payment receipt. Under the Payment and Settlement Systems Act, No. 46 of 2005 and Central Bank of Sri Lanka guidelines, all bank transfers are secure and traceable. We do not accept cash on delivery, credit cards, or cryptocurrency.

6. Delivery of Digital Goods

Digital goods are delivered directly to the Player UID, Zone ID, or username you provide during checkout. Delivery times are estimated at 5-15 minutes after payment verification, but may extend to 30 minutes during peak hours. You acknowledge that:

• Delivery is contingent on accurate Player ID information provided by you.
• We are not responsible for delivery to incorrect IDs provided by the User.
• Game server maintenance or downtime may delay delivery.
• Once digital goods are delivered to your account, they cannot be reversed or recalled.

7. Refund Policy

Refunds are governed by our dedicated Refund Policy and the Consumer Affairs Authority Act, No. 9 of 2003. In summary:

• Refunds are only available if the order status is "Submitted" and has not been processed.
• No refunds once the order status changes to "Processing" or "Done".
• No refunds for incorrect Player IDs provided by the User.
• Refund requests must be made within 24 hours of order placement.
• Approved refunds are processed to the original bank account within 3-7 business days.

Please refer to the full Refund Policy for complete details.

8. Intellectual Property Rights

All game titles, logos, characters, and trademarks displayed on the Platform are the property of their respective owners (NetEase, Tencent, Moonton, Roblox Corporation, Activision, etc.). Levi Topup Store is an independent reseller and is not affiliated with, endorsed by, or sponsored by any game developer or publisher. Our Platform content (text, graphics, code, design) is protected under the Intellectual Property Act, No. 36 of 2003. You may not reproduce, distribute, modify, or create derivative works from our content without express written permission.

9. User Conduct & Prohibited Activities

By using the Platform, you agree not to:

• Use fraudulent payment methods, stolen bank accounts, or forged receipts.
• Exploit bugs, glitches, or vulnerabilities in the Platform.
• Impersonate any person or entity, or falsely state your affiliation.
• Engage in money laundering, terrorist financing, or other illegal activities under the Prevention of Money Laundering Act, No. 5 of 2006.
• Upload malware, viruses, or harmful code under the Computer Crimes Act.
• Harass, abuse, or threaten our staff or other users.

Violation of these provisions may result in immediate account termination, forfeiture of orders, and referral to Sri Lankan law enforcement authorities.

10. Limitation of Liability & Indemnity

To the maximum extent permitted by Sri Lankan law (including the Unfair Contract Terms Act, No. 26 of 1997):

• We are not liable for indirect, incidental, special, consequential, or punitive damages.
• Our total liability for any claim arising from your use of the Platform is limited to the amount you paid for the specific order giving rise to the claim.
• We are not liable for losses arising from your provision of incorrect Player IDs.
• We are not liable for game server issues, maintenance, or third-party service disruptions.
• You agree to indemnify, defend, and hold harmless Levi Topup Store, its owner, and administrators from any claims, damages, or expenses arising from your violation of these terms or misuse of the Platform.

11. Cybersecurity, Fraud & Computer Crimes

Any attempt to use fraudulent receipts, stolen bank accounts, exploit our system, or engage in unauthorized access is a criminal offense under the Computer Crimes Act, No. 24 of 2007. Specific offenses include:

• Section 5: Unauthorized modification of computer data causing damage.
• Section 6: Offences against national security or economy.
• Section 7: Dealing in unlawfully obtained data.
• Section 8: Illegal interception of communications.
• Section 9: Producing/distributing tools for computer crimes.

We reserve the right to report such activities to the Sri Lanka Police Computer Crime Investigation Division and suspend accounts without prior notice. Under the Payment Devices Frauds Act, No. 30 of 2006, payment fraud is also a criminal offense.

12. Data Protection & Privacy

Your use of the Platform is also governed by our Privacy Policy, which complies with the Personal Data Protection Act, No. 9 of 2022 (as amended). By using the Platform, you consent to the collection, processing, and storage of your personal data as described in the Privacy Policy. We process your data lawfully, fairly, and transparently, with appropriate security measures.

13. Termination & Suspension

We reserve the right to suspend or terminate your account and access to the Platform at our sole discretion, without notice, for conduct that we believe violates these terms or is harmful to other users, us, or third parties. Upon termination:

• Your right to use the Platform immediately ceases.
• Any pending orders may be cancelled at our discretion.
• Provisions relating to intellectual property, liability, and indemnity survive termination.

14. Force Majeure

We shall not be liable for any failure or delay in performing our obligations under these terms where such failure or delay results from circumstances beyond our reasonable control, including but not limited to: natural disasters, acts of God, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, strikes, shortages of transportation, facilities, fuel, energy, labor, or materials, government actions, or internet service provider failures.

15. Dispute Resolution & Arbitration

Any dispute, controversy, or claim arising out of or relating to these terms shall first be attempted to be resolved through good faith negotiation between the parties within 30 days of written notification. Failing amicable resolution, the dispute shall be settled by arbitration under the Arbitration Act, No. 11 of 1995:

• Arbitrator: A single arbitrator appointed by mutual agreement, or failing agreement, by the Sri Lanka Institute of Arbitrators.
• Seat: Nuwara Eliya, Sri Lanka.
• Language: English or Sinhala.
• Law: The laws of the Democratic Socialist Republic of Sri Lanka.
• Finality: The arbitral award shall be final and binding on both parties.

16. Governing Law & Jurisdiction

These Terms & Conditions are governed by and construed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka, including the Electronic Transactions Act, Consumer Affairs Authority Act, Computer Crimes Act, Intellectual Property Act, and Payment and Settlement Systems Act. Any legal action shall be brought exclusively in the courts of Sri Lanka having jurisdiction over Nuwara Eliya.

17. Severability

If any provision of these terms is found to be invalid, illegal, or unenforceable under Sri Lankan law, such provision shall be severed from these terms, and the remaining provisions shall continue in full force and effect. The invalid provision shall be replaced by a valid provision that most closely approximates the original intent.

18. Amendments

We reserve the right to modify these terms at any time. Material changes will be notified via email or WhatsApp at least 14 days before taking effect. Your continued use of the Platform after such changes constitutes acceptance of the revised terms. It is your responsibility to review these terms periodically.

19. Contact Information

Owner & Operator: Sasmina Fernando
Email: levitopupstorebs@gmail.com
WhatsApp: +94 75 346 1574
Location: Nuwara Eliya, Sri Lanka
Business Registration: Operating as a sole proprietorship under Sri Lankan law.

1. Overview & Legal Basis

At Levi Topup Store, we are committed to fair and transparent refund practices. This Refund Policy is established in accordance with the Consumer Affairs Authority Act, No. 9 of 2003, the Electronic Transactions Act, No. 19 of 2006, and the Personal Data Protection Act, No. 9 of 2022. Because we deal exclusively with digital goods (in-game currency, passes, and virtual items), our refund policy is structured to balance consumer protection with the irreversible nature of digital product delivery. Under Section 11 of the Electronic Transactions Act, all orders placed through our Platform constitute valid electronic contracts, and refunds are subject to the terms herein.

2. Nature of Digital Goods

You acknowledge and agree that the products sold on this Platform are digital goods that are delivered instantly and irrevocably to your game account. Once delivered, digital goods cannot be returned, recalled, or reversed. This is a fundamental characteristic of in-game currency and virtual items across all supported games (Bloodstrike, Roblox, PUBG Mobile, Racing Master, Call of Duty Mobile, Mobile Legends). This limitation is recognized under consumer protection frameworks worldwide and is specifically addressed in our policy to ensure transparency.

3. Eligibility for Refund

You may request a refund only if all of the following conditions are met:

• Your order status is still "Submitted" and has not yet moved to "Processing" or "Done".
• The refund request is made within 24 hours of placing the order.
• You have not violated our Terms & Conditions.
• The order was not placed using fraudulent payment methods.
• You provide a valid reason for the refund request.

Once our team has begun processing or completed the delivery of digital goods to your game account, the transaction is considered final and non-refundable under the Consumer Affairs Authority Act, as the goods have been consumed and cannot be returned in their original state.

4. Refund Request Process

To request a refund, you must follow this procedure:

Step 1: Contact us via WhatsApp at +94 75 346 1574 or email at levitopupstorebs@gmail.com within 24 hours of placing your order.

Step 2: Provide the following information in your request:
• Your Order Number (e.g., LEVXXXXXXXX)
• Your registered email address
• Your full name as registered on the Platform
• A detailed reason for the refund request
• Screenshots or evidence supporting your claim (if applicable)

Step 3: Our team will review your request within 24-48 hours and respond with a decision.

Step 4: If approved, the refund will be processed to your original bank account.

We reserve the right to deny refund requests that lack sufficient information, evidence, or fall outside the eligibility criteria. All decisions are final and made at our sole discretion.

5. Non-Refundable Scenarios (Explicit Exclusions)

Refunds will not be granted under any of the following circumstances:

• The order status has been updated to "Processing" or "Done" — digital goods have been or are being delivered.
• You provided an incorrect Player UID, Zone ID, or Username, and the top-up was delivered to the wrong account. It is your sole responsibility to verify your Player ID before placing an order.
• You violated our Terms & Conditions, including but not limited to fraudulent activity, account sharing, or system exploitation.
• You changed your mind after the digital goods have been successfully delivered to your account.
• More than 24 hours have passed since the order was placed.
• The refund request is made for reasons outside our control (e.g., game server issues, game bans, account suspension by the game developer).
• You initiated a chargeback or payment dispute with your bank without first contacting us.
• The order was placed by a minor without parental consent (in such cases, the parent/guardian may contact us for resolution).

6. Refund Method, Timeline & Processing

Approved refunds will be processed as follows:

• Method: Refunds will be transferred back to the original bank account from which the payment was made (Bank of Ceylon Account No. 76692666 or Peoples Bank Account No. 134200130058746).
• Currency: All refunds are issued in Sri Lankan Rupees (LKR).
• Timeline: Please allow 3 to 7 business days for the refund to reflect in your account, depending on inter-bank processing times in Sri Lanka under the Payment and Settlement Systems Act, No. 46 of 2005.
• Fees: We do not charge refund processing fees. However, your bank may deduct applicable transfer fees, which are beyond our control.
• Confirmation: You will receive a WhatsApp or email confirmation once the refund has been initiated.

7. Partial Refunds

In exceptional and limited circumstances, we may offer partial refunds at our sole discretion. Examples include:

• Only part of a multi-package order could not be fulfilled due to temporary unavailability.
• A technical error on our Platform resulted in an overcharge.
• A promotional discount was not applied correctly.

Partial refunds will be calculated based on the unfulfilled or incorrectly charged portion and processed using the same method as full refunds.

8. Chargebacks, Payment Disputes & Fraud

Initiating a chargeback or payment dispute with your bank without first contacting us and allowing a reasonable resolution period (minimum 7 days) is a material violation of these terms. Under the Computer Crimes Act, No. 24 of 2007 and the Payment Devices Frauds Act, No. 30 of 2006, fraudulent chargeback attempts constitute:

• Unauthorized use of payment devices (Payment Devices Frauds Act, Section 3).
• Deception for pecuniary advantage (Computer Crimes Act, Section 6).
• Attempt to obtain services without payment (Penal Code, Section 386 — cheating).

Consequences of unauthorized chargebacks include:
• Immediate and permanent suspension of your Platform account.
• Forfeiture of all pending orders and account balances.
• Reporting to the Sri Lanka Police Financial Crime Investigation Division.
• Civil action to recover costs, legal fees, and damages.
• Blacklisting from future use of the Platform.

We strongly encourage you to contact us directly for any payment concerns before involving your bank.

9. Dispute Resolution for Refunds

If you disagree with our refund decision, you may escalate the matter as follows:

• Level 1: Contact Sasmina Fernando directly via WhatsApp +94 75 346 1574 for a senior review.
• Level 2: File a complaint with the Consumer Affairs Authority (CAA) under the Consumer Affairs Authority Act, No. 9 of 2003. The CAA can be reached at www.caa.gov.lk or 011-267-5501.
• Level 3: Pursue arbitration under the Arbitration Act, No. 11 of 1995, seated in Nuwara Eliya, as outlined in our Terms & Conditions.

We are committed to resolving all disputes fairly and in good faith.

10. Changes to This Policy

We reserve the right to modify this Refund Policy at any time to reflect changes in Sri Lankan law, game developer policies, or our business practices. Material changes will be notified via email or WhatsApp at least 14 days before taking effect. The updated policy will be posted on this page with a revised effective date. Your continued use of the Platform after such changes constitutes acceptance of the revised policy.

11. Contact for Refund Inquiries

Primary Contact: Sasmina Fernando
Email: levitopupstorebs@gmail.com
WhatsApp: +94 75 346 1574
Secondary Phone: 078 280 7943
Business Hours: 24/7 (responses within 24 hours)
Location: Nuwara Eliya, Sri Lanka

We aim to respond to all refund inquiries within 24 hours during business days. For urgent matters, WhatsApp is the fastest communication channel.