Privacy Policy

We collect information you provide directly, as well as data generated automatically when you use our platform.

Information you give us:

• Full name or username when you register
• Email address
• Phone number (optional)
• Country and location
• IMEI numbers and device details submitted for unlock or repair services
• Payment references and deposit details
• Support chat messages

Information collected automatically:

• IP address and approximate location (city / country)
• Browser type and version
• Device type (desktop or mobile)
• Pages visited and time spent on the site
• Login timestamps and activity logs

We use the information we collect to operate and improve our services:

• Account management — create, maintain, and secure your account
• Order processing — receive, fulfil, and update you on your service orders
• Deposits & billing — process wallet top-ups and track your balance
• Customer support — respond to your questions and resolve issues
• Security — detect fraud, prevent abuse, and protect all users
• Email notifications — send order updates, deposit confirmations, and account alerts
• Service improvements — understand how our platform is used and fix problems

We do not use your data for targeted advertising or sell it to marketers.

We offer the option to register and sign in using your Google account. When you choose this option, Google shares the following information with us:

• Your Google email address
• Your Google profile name
• Your Google account ID (used to link your account)

We do not receive your Google password, payment methods, contacts, or any other Google account data beyond the above.

You can revoke our access to your Google account at any time by visiting myaccount.google.com/permissions.

We do not sell, rent, or trade your personal information. We share data only in these limited cases:

• Service suppliers — IMEI unlock and device service providers (e.g. Dhru Fusion, iFreeiCloud) receive only the technical data needed to fulfil your order (IMEI number, device model). They do not receive your email, name, or payment details.
• Payment processors — when you pay via EFT or Binance Pay, we verify your deposit reference. We do not store your full bank account details.
• Legal requirements — we may disclose information if required by South African law, a court order, or to protect the safety of our users.

Mobile Team SA uses a wallet-based system. You deposit funds (via EFT bank transfer, USDT, or Binance Pay) and your wallet balance is used when placing orders.

• We record the amount, payment method, and date of each deposit
• EFT deposits are manually verified by an admin before being credited
• We do not store credit card numbers or full bank account numbers
• Cryptocurrency transaction hashes may be stored for verification purposes

All wallet transactions are logged and visible in your account dashboard for your reference.

We use cookies and similar technologies to keep our site working correctly and to understand how it is used.

Essential cookies (required):

• Session cookie — keeps you logged in while you browse
• CSRF token — protects forms from cross-site request forgery attacks
• Flash messages — displays one-time success or error notifications

Analytics (optional):

• We may use anonymised page-view tracking to understand which services are popular
• We do not use Google Analytics, Facebook Pixel, or other third-party advertising trackers

You can disable cookies in your browser settings, but this will prevent you from logging in or using most features of the site.

We implement industry-standard security measures to protect your data:

• HTTPS encryption — all data in transit is encrypted via TLS/SSL
• Password hashing — passwords are hashed using bcrypt (cost factor 12) and never stored in plain text
• Login rate limiting — repeated failed login attempts are automatically blocked
• Login alerts — you receive an email whenever a new login is detected on your account
• CSRF protection — all forms are protected against cross-site request forgery
• Session security — sessions are regenerated on login and use secure, HTTP-only cookies
• Two-factor authentication — optional email-based OTP verification is available

We retain your data for as long as your account is active or as needed to provide services:

• Account data — kept for the lifetime of your account
• Order history — kept indefinitely for dispute resolution and audit purposes
• Deposit records — kept for a minimum of 5 years as required by South African financial regulations
• Support chat logs — kept for 12 months, then anonymised
• Login logs — kept for 90 days

When you delete your account, we anonymise your personal details within 30 days. Transaction records are retained in anonymised form to comply with legal obligations.

Under the South African Protection of Personal Information Act (POPIA) and applicable privacy laws, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Deletion — request deletion of your account and personal data
• Objection — object to how we process your data in certain circumstances
• Portability — request your data in a machine-readable format
• Withdraw consent — opt out of optional communications at any time

To exercise any of these rights, contact us via our support page. We will respond within 30 days.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of Mobile Team SA after changes are posted constitutes acceptance of the updated policy.

We encourage you to review this page periodically to stay informed about how we protect your information.