ERICFUN HUB PRIVACY POLICY

1.ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how ERICFUN GAME & HOBBY SHOP , operating under the ERICFUN brand ("ERICFUN", "we", "us", or "our"), collects, uses, stores, shares and protects personal information when you use ERICFUN HUB, our websites, customer-support channels, promotions and related services.

ERICFUN HUB is designed to support customers in Malaysia . The selected country may be used to determine available currency, payment, shipping and pickup options.

By creating an account or using ERICFUN HUB, you acknowledge this Privacy Policy and any applicable Terms of Service.

2.Information We Collect

2.1 Account and identity information

Full name
Mobile phone number
Email address
Password/account credentials
Country
Street address, city, postcode, state or province
Saved delivery addresses
Account ID and account preferences
18+ declaration and legal-document acceptance records

Production passwords should be protected using secure password hashing and should not be stored as readable plain-text passwords.

2.2 Purchase and transaction information

Order number, products, quantities and price
Discounts, points and vouchers
Payment status and payment reference
Refund status and transaction history
Delivery or pickup selection
Campaign, auction, YADA YADA and reward participation where applicable

2.3 Shipping and delivery information

Recipient name and phone number
Delivery address and postcode
State/province and country
Courier selection and tracking number
Shipping status and delivery events

2.4 Customer support, chat and media

Support messages and customer enquiries
Order and refund questions
Product-condition questions
Photos sent by customers or ERICFUN staff
Customer-service response history
Date and time of communications

2.5 Device and technical information

Push-notification token
Device and app information
Login history
Crash information
App usage and security logs

3. Age Information and 18+ Requirement

3.1 ERICFUN HUB is intended for adults

ERICFUN HUB is designed for persons 18 years of age or older. During registration, the user is required to confirm that they are 18 years or older and to accept the applicable Terms of Service and Privacy Policy.

3.2 What age information we currently collect

Unless ERICFUN introduces an additional age-verification process, the current app flow records an 18+ declaration rather than collecting a full date of birth or verifying age using a Malaysian IC, passport or other government identity document.

We may record information associated with the declaration, including:

Account ID
Legal document and version accepted
Date and time of acceptance
Country and language
Method of acceptance
Relevant registration or checkout confirmation

3.3 If additional age verification is introduced

If ERICFUN later introduces document-based or third-party age verification, this Privacy Policy should be updated before that feature is used. The updated policy should explain exactly what information is collected, who verifies it, the lawful purpose, whether copies of identity documents are stored, and the retention period.

4. YADA YADA - Special 18+ Privacy Notice

4.1 YADA YADA is 18+ only

YADA YADA is restricted to members aged 18 years and above. The current ERICFUN HUB design states that YADA YADA packs are for 18+ members only and requires an 18+ confirmation at checkout.

4.2 YADA YADA transaction and participation records

When a customer uses YADA YADA, ERICFUN may process information such as:

ERICFUN account ID
18+ confirmation and checkout acceptance
Pack or product selected
Purchase date and time
Amount paid and payment status/reference
Applicable round, campaign and published pull-rate information
Resulting physical collectible
Order, shipping or pickup information
Points or rewards generated by the purchase
Related support, refund or dispute records

4.3 Why YADA YADA records may be retained

Complete the transaction and deliver the physical collectible
Maintain accurate order and round history
Calculate points, rewards and account benefits
Prevent duplicate-account abuse, fraud and manipulation
Handle customer disputes, refunds and payment issues
Provide customer support
Maintain accounting and tax records
Demonstrate the rules, disclosures and 18+ acceptance shown at the time of purchase

4.4 Consent evidence

For compliance and dispute purposes, ERICFUN may retain evidence that a user accepted the applicable YADA YADA terms and 18+ requirement, including document/version, timestamp, country, language and method of acceptance.

4.5 Underage users

Persons under 18 must not create or use an account where the service requires an 18+ account and must not participate in YADA YADA. If ERICFUN has reasonable grounds to believe that a user does not satisfy the applicable age requirement, access to age-restricted features or the account may be restricted while the matter is reviewed.

5. Payments

Payments are intended to be processed through HitPay or other enabled payment providers. ERICFUN may receive payment status, transaction references and refund information needed to complete an order.

ERICFUN does not intend to store full payment card numbers or customers' online-banking passwords. Payment providers process sensitive payment credentials under their own systems and privacy practices.

6. Shipping and Delivery

For delivery orders, necessary information may be provided to couriers such as DHL or J&T, including the recipient's name, phone number, address and other information needed to issue a waybill, deliver the parcel and provide tracking.

7. Customer Support and AI-Assisted Support

ERICFUN HUB includes customer-support functions. Support conversations may contain order details, refund requests, product-condition enquiries and images. These communications may be used to answer questions, resolve disputes, improve service and maintain an appropriate support record.

7.1 AI-assisted support

The ERICFUN HUB architecture includes an AI-assisted support feature that may use relevant business information, approved knowledge-base content and customer-support context to answer questions and route enquiries.

Actions that change customer data or money-related records should remain subject to appropriate human approval and role-based permissions.

If a third-party AI provider is used in production, ERICFUN should ensure that the provider is included in its privacy, security and vendor-management arrangements and that unnecessary personal data is not used for AI training or knowledge-base content.

8. Biometric Login

Supported devices may allow Face ID, fingerprint or another device biometric method for login. ERICFUN does not receive or store the user's biometric template when authentication is performed by the operating system on the device.

9. Location and Country Information

ERICFUN HUB may use the country, state/province and delivery address that the customer provides to determine currency, shipping, delivery and pickup options. The current app design does not require ERICFUN to track precise GPS location.

10. Personalisation and App Usage

ERICFUN HUB may use browsing and interaction information to improve the user experience and provide relevant product recommendations. We do not sell personal information to third-party advertising networks.

11. Notifications and Marketing

ERICFUN may send service communications such as:

Order confirmations and payment notices
Refund and shipping updates
Tracking notifications
Account-security messages
Customer-support replies
Campaign, restock or promotional communications

Users may withdraw optional marketing consent or disable optional marketing communications. Necessary transactional, security or order-related communications may still be sent.

12. How We Use Personal Information

Create and manage accounts
Authenticate users
Process purchases and refunds
Fulfil and deliver orders
Provide order tracking
Operate YADA YADA and other app features
Maintain points, vouchers and rewards
Provide customer support
Send account, order and security notifications
Prevent fraud, duplicate accounts and misuse
Maintain transaction, consent and audit records
Analyse and improve the app
Personalise relevant content
Maintain accounting and tax records
Comply with applicable legal requirements
Investigate disputes or suspected abuse

13. Who We May Share Information With

Payment providers - such as HitPay, to process payments and refunds.
Delivery companies - such as DHL and J&T, to fulfil deliveries and provide tracking.
Apple and Google services - for platform functionality, sign-in, push notifications and app distribution.
Cloud hosting/storage providers - to host application data, product media and service records.
Email, SMS or messaging providers - for receipts, security messages, OTPs and notifications where enabled.
Analytics providers - where enabled to measure app usage and performance.
AI/automation providers - where used to provide customer-support or related functionality.
Authorities or professional advisers - where disclosure is required or permitted by law.

The supplied system architecture also includes StoreHub stock synchronisation and card-information services. Those product-data functions should not receive customer personal information unless it is necessary for an enabled production feature.

14. International and Cross-Border Processing

Cloud, payment, delivery, messaging, analytics or technology providers may operate systems outside the customer's country. Personal information may therefore be processed or stored in other countries. ERICFUN should apply appropriate contractual, organisational and technical safeguards required under applicable law.

15. Data Retention

ERICFUN should retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, customer-service and dispute requirements.

16. Account Deletion

ERICFUN HUB is designed to provide an in-app Delete my account function. The current design provides for deletion of profile information, points, rank progress and collection records, while pending orders and records required for legal, tax, fraud-prevention or dispute purposes may need to be retained.

Deletion may not require immediate erasure of information that is still needed to:

Complete a pending order
Process a refund or chargeback
Meet accounting or tax obligations
Prevent fraud or abuse
Resolve a dispute
Establish or defend legal rights
Comply with applicable law

When the applicable retention requirement expires, retained information should be deleted or anonymised where appropriate.

17. Your Privacy Rights

Subject to applicable law, customers may request to:

Access personal information
Correct inaccurate information
Update account details
Request a copy or export of applicable information
Request deletion
Withdraw optional marketing consent
Raise privacy questions or complaints

18. Security

ERICFUN should use reasonable technical and organisational measures designed to protect personal information. The planned architecture includes encryption in transit, protected storage, hashed passwords, role-based staff access, staff-action logging and restricted administrative permissions.

No electronic system can be guaranteed to be completely secure. Security controls should be reviewed and updated as the production system changes.

19. Changes to This Privacy Policy

This Privacy Policy may be updated as ERICFUN HUB develops. Each published version should include a version number and effective date. Material changes may be notified in the app and may require the user to accept the updated terms again.

20. Contact Us

Customers may also contact ERICFUN through the Support function inside ERICFUN HUB.