Last Updated: 18 May 2026
1. Introduction
Aetheria Global Technology Limited (Hong Kong Companies Registry Number: 80415128), registered at Room P11, Flat 2C, 2/F, Hung To Ctr., 94-96 How Ming St., Kwun Tong, Kowloon, Hong Kong ("K2KEY", "We", "Us", "Our") operates the website k2key.com (the "Website").
This Privacy Policy describes how K2KEY collects, uses, processes, stores, and shares your personal information when you use the Website and our services. It also explains your rights in relation to your personal data.
By using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Website.
Note: This Privacy Policy also applies to users of the K2KEY B2B supplier platform. References to "Website" shall be construed to include the B2B platform where applicable.
2. Data We Collect
2.1 Information You Provide Directly
When you register an Account, make a purchase, or contact us, we may collect:
- Full name
- Email address
- Telephone number
- Billing and/or delivery address
- Payment information (processed via third-party payment processors — K2KEY does not store full card details)
- Account username and password (stored in encrypted form)
- Player IDs, account names, or delivery identifiers for top-up products
- Any other information you voluntarily submit
2.2 Information Collected Automatically
When you access the Website, we may automatically collect:
- IP address
- Browser type and version
- Operating system
- Device type and identifiers
- Pages visited, time and date of visit, and duration
- Referring URL and exit pages
- Clickstream data
- Cookie identifiers (see Section 7)
2.3 Transaction Data
We collect records of all purchases and transactions, including product type, purchase value, delivery method, and payment method used (excluding full card numbers).
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| To create and manage your Account | Performance of contract |
| To process orders and deliver Digital Products | Performance of contract |
| To communicate about orders, Account, and service updates | Performance of contract / Legitimate interests |
| To respond to customer service enquiries | Performance of contract / Legitimate interests |
| To send marketing communications (with consent) | Consent |
| To detect, prevent, and investigate fraud, abuse, and chargebacks | Legitimate interests / Legal obligation |
| To comply with applicable laws and AML obligations | Legal obligation |
| To analyse Website usage for improvement | Legitimate interests |
| To enforce our Terms of Service | Legitimate interests |
4. Sharing Your Personal Data
K2KEY does not sell your personal data to third parties. We may share your data with:
4.1 Service Providers and Processors
- Payment processors — to process transactions
- IT infrastructure and hosting providers — to operate the Website and systems
- Fraud prevention and KYC providers — to detect and prevent fraudulent activity
- Email and notification service providers — to send communications
- Analytics providers — to analyse Website performance
All service providers are required to process your data only in accordance with our instructions and applicable data protection laws.
4.2 Legal and Regulatory Disclosure
We may disclose your personal data if required by law, regulation, court order, or governmental authority, or where necessary to:
- Comply with a legal obligation;
- Protect and defend K2KEY's rights or property;
- Prevent or investigate fraud or illegal activity;
- Protect the safety of users or the public.
4.3 Corporate Transactions
In the event of a merger, acquisition, or sale of K2KEY's business, your personal data may be transferred to the relevant successor entity under equivalent privacy protections.
4.4 Affiliated Entities
We may share data with affiliated entities under common ownership for operational purposes, subject to appropriate confidentiality arrangements.
5. International Data Transfers
K2KEY operates from Hong Kong. Your personal data may be transferred to and processed in other countries, including Hong Kong, the United Arab Emirates, and other jurisdictions where our service providers are located. We take reasonable steps to ensure appropriate safeguards are in place for all cross-border transfers.
6. Data Retention
K2KEY retains your personal data for as long as necessary to fulfil the purposes described in this Policy, including:
- For as long as your Account is active;
- As required by applicable law (e.g., financial records, AML records);
- For the duration of any ongoing dispute or legal proceedings.
When personal data is no longer required, K2KEY will securely delete or anonymise it.
7. Cookies
7.1 What Are Cookies
Cookies are small text files placed on your device by websites you visit, used to make websites function more efficiently and to provide information to the website operator.
7.2 Types of Cookies We Use
| Cookie Type | Type | Purpose |
|---|---|---|
| Strictly Necessary | Session | Essential for Website function — authentication, fraud prevention, security. Cannot be disabled. |
| Functionality | Persistent | Remember user preferences (language, login, currency). |
| Analytics | Persistent | Collect anonymous data on Website usage to help improve performance. |
| Marketing / Targeting | Persistent | Track browsing activity for relevant advertising. Used only with consent. |
7.3 Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect Website functionality. For more information, visit www.aboutcookies.org.
For detailed information, please refer to our full Cookie Policy.
8. Data Security
K2KEY implements appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (SSL/TLS)
- Encrypted storage of passwords
- Access controls limiting staff access to personal data
- Regular security assessments
No method of Internet transmission is 100% secure. While K2KEY takes reasonable precautions, we cannot guarantee absolute security.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
| Right | Description |
|---|---|
| Right of Access | Request a copy of the personal data K2KEY holds about you |
| Right to Rectification | Request correction of inaccurate or incomplete data |
| Right to Erasure | Request deletion of your personal data in certain circumstances |
| Right to Restriction | Request temporary suspension of processing |
| Right to Data Portability | Request your data in a structured, machine-readable format |
| Right to Object | Object to processing based on legitimate interests or for direct marketing |
| Right to Withdraw Consent | Withdraw consent where consent is the legal basis (does not affect prior lawful processing) |
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Children's Privacy
The Website is not directed at children under the age of 13. K2KEY does not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact [email protected] and we will promptly delete such data.
11. Third-Party Links
The Website may contain links to third-party websites. K2KEY is not responsible for the privacy practices or content of any third-party sites. We encourage you to review their privacy policies.
12. Changes to This Privacy Policy
K2KEY may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy on the Website and notify you by email or prominent notice where required. Your continued use of the Website constitutes acceptance of the revised Policy.
13. Contact Us
Aetheria Global Technology Limited Data Privacy Enquiries: [email protected] General Support: [email protected] Registered Address: Room P11, Flat 2C, 2/F, Hung To Ctr., 94-96 How Ming St., Kwun Tong, Kowloon, Hong Kong Website: https://k2key.com