Privacy & Cookies
Last Updated: November 10, 2026
At SteamShop.pk, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, create an account, purchase digital products, or interact with our services.
By using SteamShop.pk, you acknowledge the data practices described in this Privacy Policy.
1. Information We Collect
We may collect the following categories of personal information when you use our website and services.
1.1 Personal Information
When you register an account, place an order, or contact us, we may collect:
Full name.
Email address.
Phone number.
Account credentials in securely protected form.
Account registration and login history.
Customer support communications.
1.2 Order and Transaction Information
When you purchase products, we may collect and maintain:
Order number and purchase history.
Purchased products, quantities, and amounts.
Payment method and transaction references.
Payment confirmation and verification status.
Digital code assignment and delivery records.
Refunds, cancellations, and disputes.
Account spending and purchase-limit information.
These records help us fulfill orders, provide customer support, maintain transaction accuracy, and prevent fraudulent activity.
1.3 Payment Information
Payments are processed through supported third-party payment service providers, banks, and digital wallets.
Depending on the payment method, we may receive transaction identifiers, payment status, limited card information such as the last four digits, or other payment verification details.
Full card numbers and card security codes should be processed only through authorized, appropriately secured payment systems. We do not require customers to submit this information through customer support.
1.4 Identity Verification Information
For fraud prevention and account security, certain transactions may require additional identity verification (eKYC).
Depending on the verification requirements, we may request:
Identity document information.
An image of an identification document.
A photograph or selfie for identity verification.
Information needed to verify payment ownership.
We collect this information only where reasonably necessary for verification, fraud prevention, or compliance obligations.
Verification information is subject to restricted access and appropriate security controls.
1.5 Technical and Usage Information
When you access our website, we may automatically collect:
IP address.
Device type and operating system.
Browser type and version.
Approximate geographic location derived from IP address.
Website pages visited and interactions.
Login attempts and session information.
Cookies and similar technical identifiers.
Security and fraud detection logs.
This information helps us maintain website performance, protect customer accounts, identify suspicious activity, and improve our services.
2. How We Use Your Information
We use personal information for legitimate business and operational purposes, including:
Creating and managing customer accounts.
Processing payments and delivering digital products.
Sending order confirmations and transaction notifications.
Verifying customer identities and payment ownership.
Preventing fraud, unauthorized transactions, and account abuse.
Providing customer service and resolving complaints.
Processing eligible refunds and payment disputes.
Maintaining purchase histories and transaction records.
Improving website usability, security, and performance.
Sending promotional communications where permitted.
Complying with applicable legal and regulatory obligations.
We use information only for relevant, disclosed purposes and apply appropriate safeguards.
3. Account Registration and Social Login
SteamShop.pk may provide account registration through email, Google Login, or Facebook Login.
3.1 Google Login
If you choose to sign in through Google, we may receive basic account information authorized by Google and your selected permissions, such as:
Name.
Email address.
Profile picture, where available.
Google account identifier.
This information is used to authenticate your identity, create or link your SteamShop.pk account, and facilitate secure access.
We do not receive your Google password.
3.2 Facebook Login
If you choose Facebook Login, we may receive information permitted through Meta's authentication services, such as:
Public profile name.
Email address, where available and authorized.
Facebook application-specific user identifier.
Profile picture, if provided and used.
We use this information for account authentication, registration, account linking, and relevant security purposes.
We do not request access to your Facebook password.
We do not use Facebook Login to publish content on your behalf.
Information received through Meta APIs is handled in accordance with this Privacy Policy and applicable Meta Platform Terms.
Users may request the correction or deletion of information obtained through Facebook Login using the procedure described in Section 11.
Removing SteamShop.pk from your Facebook account's connected apps does not automatically delete any SteamShop.pk account or transaction records already held by us.
3.3 Email and OTP Verification
We may use one-time passwords (OTPs) to verify email addresses, phone numbers, login attempts, password resets, and sensitive account actions.
OTP messages may be delivered through email, SMS, or WhatsApp, depending on the enabled verification method.
Verification information is used to authenticate requests and protect accounts against unauthorized access.
4. WhatsApp Communications
Where WhatsApp verification or customer messaging is enabled, SteamShop.pk may use the WhatsApp Business Platform to send:
Account verification OTPs.
Login or security notifications.
Order-related notifications.
Customer service messages.
Your phone number and necessary message-related information may be processed by Meta and its authorized service providers for message delivery.
Marketing communications through WhatsApp will be sent only where appropriate consent or another applicable permission exists.
5. Payment Processing and Security
We use supported payment service providers to process customer transactions.
Payment information may be shared with relevant banks, card processors, digital wallet providers, and payment gateways to:
Authorize and confirm payments.
Verify transaction ownership.
Investigate failed or disputed payments.
Process refunds.
Detect and prevent fraudulent transactions.
Payment providers may process personal information under their own privacy policies and applicable financial regulations.
We take reasonable measures to protect payment-related information and limit access to authorized personnel.
6. Cookies and Tracking Technologies
SteamShop.pk uses cookies and similar technologies to support website functionality and improve the customer experience.
These may include:
Essential Cookies: Required for login sessions, account authentication, shopping carts, checkout functionality, and website security.
Performance and Analytics Cookies: Where enabled, used to understand website usage, traffic patterns, and performance.
Preference Cookies: Used to remember selected preferences and improve website usability.
Marketing Cookies: Where enabled and permitted, used to measure advertising effectiveness and provide more relevant marketing content.
You can manage or disable certain cookies through your browser settings or any cookie preference controls provided on our website.
Disabling essential cookies may affect login, checkout, or other website functionality.
7. Fraud Prevention and Security Monitoring
We take website security and payment fraud prevention seriously.
To protect our customers and business, we may analyze transaction activity, account behavior, IP addresses, device information, purchase patterns, and payment verification results.
Security measures may include:
Detecting suspicious transactions.
Monitoring repeated failed login attempts.
Identifying potentially unauthorized payments.
Applying account spending and purchase limits.
Restricting abusive or suspicious activity.
Verifying identities for higher-risk transactions.
Investigating unauthorized account or order changes.
Some security checks may be automated, with manual review where appropriate.
Information collected for security purposes is used to protect our services, customers, and payment systems.
8. Sharing Information with Third Parties
We may share personal information with trusted third parties where reasonably necessary to operate our services.
These may include:
Payment providers: For transaction processing, payment verification, refunds, and chargebacks.
Hosting and security providers: For website hosting, protection, and infrastructure operations.
Digital product suppliers: Where necessary to fulfill, verify, or investigate orders.
Authentication providers: Such as Google and Meta when social login or related services are used.
Communication providers: For email, SMS, WhatsApp, and customer notifications.
Analytics providers: Where analytics services are enabled.
Legal authorities: When disclosure is required by applicable law or a valid legal process.
We do not sell customer personal information to data brokers.
Where we use service providers acting on our behalf, we seek to limit their use of personal information to the services they are authorized to perform.
9. Data Security
We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, misuse, and loss.
These safeguards may include:
Secure HTTPS connections.
Protected account authentication.
Access controls for customer and administrative information.
Encryption and secure storage where appropriate.
Transaction monitoring.
Security logging and system monitoring.
Restricted access to identity verification information.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers should maintain strong passwords, protect verification codes, and notify us of suspected account compromise.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.
Retention periods may vary according to the information involved.
Account Information: Retained while the account remains active and subsequently as necessary for legitimate obligations.
Order and Transaction Records: Retained as necessary for accounting, payment disputes, fraud prevention, and legal requirements.
Identity Verification Information: Retained only for the period reasonably necessary for verification, compliance, or related investigations.
Customer Support Records: Retained as necessary to resolve requests, maintain service quality, and manage disputes.
Security Logs: Retained according to applicable security, operational, and legal requirements.
Marketing Information: Retained until consent is withdrawn or the information is no longer required for its authorized purpose.
When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it.
11. Customer Privacy Rights and Data Deletion
We provide customers with ways to request access to, correction of, or deletion of personal information associated with their SteamShop.pk accounts, subject to applicable legal requirements.
11.1 Access and Correction
Customers may request to review or correct their personal information through their account settings or by contacting customer support.
We may require identity verification before fulfilling requests involving sensitive account information.
11.2 Account and Data Deletion
Customers who wish to delete their accounts or associated personal information may submit a request using the following procedure:
Visit https://steamshop.pk.
Open Live Support or the Support Ticket section.
Select Account Deletion or request assistance with personal data deletion.
Provide the registered email address and necessary account verification information.
Our support team will review and process the request, subject to applicable retention obligations.
Customers unable to sign in may contact Live Support using the guest option to request assistance.
Upon receiving a verified deletion request, we will delete or anonymize personal information that is no longer required.
Certain transaction, payment, security, or compliance records may need to be retained for a legally justified period.
Information obtained through Facebook Login or other authentication providers will also be included in the deletion review.
Customers may request deletion of social-login information without being required to continue using that login provider.
11.3 Marketing Preferences
Customers may opt out of promotional emails or other optional marketing communications through available unsubscribe methods or by contacting support.
Essential order confirmations, security alerts, and other necessary service communications may still be sent.
12. International Data Processing
Some technology, hosting, authentication, communication, and payment service providers may process data outside Pakistan.
Where information is transferred internationally, we take reasonable steps to ensure that it is processed for authorized purposes and subject to appropriate safeguards and applicable legal requirements.
13. Children's Privacy
SteamShop.pk is not intended for independent use by children under 18 without appropriate parental or guardian involvement.
We do not knowingly collect personal information from children for unauthorized purposes.
If we become aware that personal information was collected from a child without necessary authorization, we will take appropriate steps to address the information, including deletion where required.
Parents or guardians may contact customer support regarding related concerns.
14. Third-Party Websites and Services
Our website may contain links to third-party platforms, game publishers, payment providers, or external services.
These services operate under their own terms and privacy policies.
SteamShop.pk is not responsible for the independent data practices of third-party websites that we do not control.
We encourage customers to review the privacy policies of third-party services before providing personal information.
15. Disclosure to Public Authorities
We may disclose personal information to public authorities where required or permitted by applicable law.
When handling such requests, we seek to:
Review the legal authority and validity of the request.
Limit disclosure to information reasonably necessary for the lawful purpose.
Challenge requests where there are appropriate legal grounds to do so.
Maintain suitable records of requests and disclosures, where applicable.
We do not voluntarily disclose customer information to public authorities without an appropriate lawful basis.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, data practices, or applicable laws.
Any updates will be published on this page with a revised "Last Updated" date.
Where required, we will provide additional notice or obtain consent before materially changing how personal information is processed.
We encourage customers to review this page periodically.
17. Contact Us
For questions about this Privacy Policy, requests for access or correction, account deletion, or privacy-related concerns, please contact us through our official support channels.
Business: SteamShop.pk
Website: https://steamshop.pk
Location: Karachi, Pakistan
Contact Methods: Live Support or Support Ticket
Support Category: Account Deletion (for account or personal data deletion requests)
We will review privacy-related requests and provide assistance in accordance with applicable legal requirements.
Your privacy matters to us. SteamShop.pk is committed to handling customer information responsibly, maintaining appropriate security safeguards, and providing transparency regarding our data practices.