Privacy Policy

Hasheem Gaming operates this website alongside the Hasheem app. This notice explains how information is handled on the website. For questions or requests, contact support@hasheemgaming.com. You can learn about the team on our About page.

Information we use

• Account information: your username, avatar, token balance, purchase history, Trusted Seller status and access to purchased PC games. The website uses your existing app account.
• Browser sign-in: a QR challenge, approval status, browser information and the device name chosen when approving access. An approved session is stored in an essential browser cookie.
• Payments: your contact or mobile money number, purchase reference, product, amount, payment channel, provider reference and transaction status. Our server processes the number you enter to initiate payment with the provider.
• Community indicators: public community names and artwork, plus the signed-in user’s unread-message counts. This website feature requests no message text and does not mark messages as read.
• Technical and support information: requests, IP addresses and browser information handled by hosting and security systems, and information you send when contacting support.

Why we process information

We use information to provide the service you request, verify browser access, complete and reconcile purchases, deliver entitlements, answer support requests and prevent fraud or misuse. We also retain information when required for legal obligations or resolving disputes. Where processing requires consent, you may withdraw that consent without affecting earlier lawful processing.

Cookies and browser storage

The sign-in cookie is HttpOnly and, on the production HTTPS website, Secure and SameSite=Lax. Browser sessions expire after 30 days of inactivity; signing in on another browser replaces the previous session. Sign out here or revoke the session through the app’s signed-in devices settings.

We use tab session storage to recover an unfinished checkout. It holds a purchase reference and checkout metadata, not your payment PIN, card number or contact number. You can clear browser storage; this does not cancel a payment already submitted to the provider or erase the server’s purchase record.

The website does not currently include advertising trackers or third-party analytics scripts. Fonts are served by the website. Essential session and security processing still occurs even when tracking is disabled in your browser.

Payment information

Payments are handled through Snippe and the selected payment network. Card details are entered on the provider’s hosted checkout, and mobile money PINs are entered through the provider’s approval flow. Do not send passwords, PINs, one-time codes or full card details to Hasheem support. We receive payment references and status information needed to reconcile your purchase.

Service providers and external destinations

Our service uses self-hosted Supabase infrastructure, hosting services, Snippe and relevant payment networks. Cloudflare may process requests for delivery and security where enabled on the domain. Access is limited to what is needed to operate, protect or support the service, or to comply with lawful requirements.

Following an external download, portfolio, social-media or payment link takes you to a separate service with its own privacy practices. We do not sell your personal information. We may disclose relevant records to authorised service providers, professional advisers or authorities when necessary for the purposes described here.

Retention, deletion and international processing

We retain information for the service purpose and any applicable accounting, dispute-resolution, fraud-prevention or legal requirement. Different records have different retention needs. Deleting an account does not necessarily erase a payment record, an unresolved dispute or content that must be retained or anonymised to preserve other users’ conversations. Contact us for information about a particular record.

Infrastructure or service providers may process information outside Tanzania. Where international transfers apply, we must use safeguards and meet the requirements applicable to that processing. We do not represent that all information remains in a single country.

Your privacy choices and rights

You may request access to your information, correction, deletion, restriction, or a copy where applicable; object to relevant processing; or withdraw consent where consent is the basis. Requests may be subject to identity checks and lawful exceptions. We will explain a refusal or a need to retain information. Tanzania’s Personal Data Protection Commission describes data-subject rights.

Manage your account in the app or email support with the subject “Privacy request”. Provide enough information to identify the account, but no passwords or payment secrets. You may also raise a complaint with the Personal Data Protection Commission; contacting us first does not remove that right.

Security and younger users

We use HTTPS, session verification, access controls and server-side payment checks. No system can guarantee absolute security. Report suspected unauthorised access promptly and revoke unfamiliar browser sessions. Purchases require the legal capacity and payment authorisation described in our Terms. A parent or guardian concerned about a child’s information can contact support.

Changes to this notice

We publish updates here with a revised date. Material changes will be communicated as required by applicable law. This notice describes the website; additional app features may involve information explained in the app’s own privacy information.