Security and Payments Policy

1. General provisions

1.1. This Security and Payments Policy (hereinafter — the "Policy") defines the measures to protect user data and ensure the security of financial transactions in the boostmlbb.ru Service.

1.2. The Service Operator — Sole Proprietor MAMATISAKOV ELMURAT SAPARBEKOVICH (OGRNIP 326690000001430, TIN 690606792301) — takes all necessary organizational and technical measures to protect information.

1.3. The Policy is developed in accordance with:

• Federal Law No. 152-FZ "On Personal Data"
• Federal Law No. 149-FZ "On Information, Information Technologies and Information Protection"
• PCI DSS standards (for processing payment data)
• OWASP web security recommendations

2. Payment methods

2.1. The Service accepts payments using the following methods:

Bank transfers (Russia)

• Faster Payments System (SBP) — instant transfers by phone number
• Sberbank — transfers by card or phone number
• Tinkoff — transfers by card or phone number
• VTB — transfers by card number
• Alfa-Bank — transfers by card number
• MIR, Visa, Mastercard cards — via transfer to a card

Cryptocurrency

• USDT (Tether) — TRC-20, ERC-20 networks
• Other cryptocurrencies — by agreement

3. Payment security

3.1. No storage of payment data: We do not store bank card numbers, CVV codes, or online banking passwords. All payments are made through official bank apps or crypto wallets.

3.2. Payment confirmation: After making a payment, it is recommended to send a screenshot of the receipt to confirm the transaction.

3.3. Fraud protection:

• Verification of the payment source
• Verification of large transactions
• Monitoring of suspicious activity

3.4. What we store about payments:

• Date and time of payment
• Payment amount
• Payment method (without detailed credentials)
• Transaction ID (if available)

3.5. Retention period: Financial transaction information is stored for 5 years in accordance with the requirements of Russian tax law.

4. Protection of transmitted data

4.1. SSL/TLS encryption: The boostmlbb.ru website uses an SSL certificate that encrypts all data transmitted between the user's browser and the server.

4.2. Telegram: All communication via Telegram is protected by end-to-end encryption (in secret chats) and client-server encryption (in regular chats).

4.3. Protection against interception:

• Use of HTTPS on all pages
• HSTS (HTTP Strict Transport Security)
• Protection against MITM (Man-in-the-Middle) attacks

5. Storage of game account credentials

5.1. Processing principles:

• Minimization: Data is requested only when necessary (for solo boosting)
• Restricted access: Only the assigned Provider has access to the data
• Temporary storage: Data is deleted after the order is completed
• Not shared with third parties: Data is not sold or shared with outsiders

5.2. Recommendations after a boost:

• Change your game account password
• Check your account links (email, social media)
• Enable two-factor authentication (if available)

5.3. Retention period: Game account credentials are deleted within 24 hours after the order is completed.

6. Provider verification

6.1. All Providers (Boosters) undergo mandatory verification before being allowed to work:

Verification stages

1. Game account check: Confirmation of rank, statistics, and gaming experience
2. Test assignments: Completing supervised test orders
3. Reputation check: Analysis of reviews and work history
4. Identification: Identity confirmation (Telegram account)

6.2. Requirements for Providers:

• Mythic Glory rank or participation in MCC tournaments
• A win rate of at least 85%
• No complaints or violations
• Signing a confidentiality agreement

6.3. Monitoring: Providers' work is constantly monitored. If violations are detected, they are removed from work.

7. Fraud protection

7.1. The Operator applies a set of measures to prevent fraud:

Technical measures

• Monitoring of suspicious activity
• Blocking attackers' IP addresses
• Protection against bots and automated attacks
• Logging of all actions

Organizational measures

• User verification for large orders
• Dispute resolution via the support service
• A guarantee fund to compensate for damage
• Cooperation with law enforcement authorities

8. What to do if your account is hacked

8.1. Signs of a hacked game account:

• Inability to log in to the account
• A changed linked email or phone number
• Missing resources, items, or currency
• Unauthorized purchases
• Suspicious game sessions in the history

8.2. Immediate actions:

1. Change the password — if you have access to the account
2. Check the links — email, social media, phone
3. Contact the game's support — Moonton Customer Service
4. Contact us — if the hack occurred during the boost

8.3. What our support service will do:

• Check the logs of interaction with the Provider
• Establish the circumstances of the incident
• Take action against the Provider (if at fault)
• Compensate for the damage under the Refund Policy

8.4. If the hack is not related to our Service:

• Contact Moonton Games support
• Submit an account recovery request
• If necessary — contact law enforcement authorities

9. Security recommendations

9.1. To protect your game account:

• Use a unique strong password (at least 12 characters)
• Link the account to an email that only you control
• Enable two-factor authentication (2FA)
• Do not share data with outsiders
• Change your password regularly
• Do not use the same password for different services

9.2. When ordering a boost:

• Order only through official channels (bot @cla1ve_boost_bot)
• Do not click on suspicious links
• Make sure you are communicating with the official account
• Keep screenshots of correspondence and payments
• After the boost — change your password

9.3. To protect your finances:

• Do not share your CVV code or online banking passwords
• Transfer money only to verified details
• Keep payment receipts
• If you receive suspicious requests — contact us

10. Security service contacts

10.1. For security issues, suspicious activity, or incidents, contact: