Back

Acceptable Use Policy

Last updated: May 6, 2026

This Acceptable Use Policy ("AUP") is incorporated by reference into our Terms of Service and tells you what conduct is prohibited on the Service and how violations are handled.

1. Prohibited conduct

You may not, and may not attempt to:

  • Commit fraud against GachaBox, our payment processor, our users, or any third party — including identity fraud, payment fraud, and triangulation fraud.
  • Use stolen, fraudulent, or unauthorised payment methods, or payment methods that you are not authorised to use under their issuer's terms.
  • File false or abusive chargebacks, friendly-fraud disputes, or disputes initiated for the purpose of obtaining digital content without paying for it. See §3 for what we consider chargeback abuse.
  • Exploit bugs, errors, mispricing, or unintended behaviour of the Service for personal gain, and not promptly report it to abuse@gachabox.com.
  • Use bots, scrapers, automation, or any non-human means to access, pull, claim, reveal, or extract data from the Service. The Service is for interactive human use only.
  • Scrape, copy, or systematically extract Service content, odds tables, item catalogs, or audit data, except as expressly permitted by these Terms or by applicable law.
  • Resell, transfer, or auction accounts, items, or Chase deliveries outside the Service, or hold yourself out as an agent or authorised reseller of the Service.
  • Share, sell, lend, or co-use accounts. Each account is for one natural person.
  • Reverse-engineer, decompile, or attempt to derive the source code or the deterministic seed for the draw engine, except to the limited extent permitted by mandatory law.
  • Probe, scan, or test the vulnerability of the Service or any connected system without prior written authorisation; bypass rate limits; circumvent authentication, suspension, or geographic-block controls.
  • Use the Service to harass, defame, or stalk any user or member of staff, or to transmit unlawful, infringing, or malicious content.

2. Multi-account & circumvention abuse

One natural person, one account. Creating, controlling, or operating more than one account — whether to multiply pity progression, to recover an account that was suspended or terminated, to evade a chargeback block, or for any other reason — is grounds for termination of every account in the cluster and for forfeiture of any associated balances. Circumventing a suspension, a country geo-block, or a card/email block by using a VPN, proxy, alternative card, alternative email, or any other technical means is itself a separate violation of this AUP and a misrepresentation of your eligibility under §2 of the Terms.

3. Chargeback abuse

We treat chargebacks seriously because they harm the Service, our payment processor's standing, and the other users of the Service. The following is considered chargeback abuse:

  • One (1) chargeback decided against GachaBox on the merits, OR
  • Two (2) or more chargebacks initiated lifetime, regardless of outcome, OR
  • Any chargeback we determine in good faith was filed without first attempting the pre-dispute process described in Terms §7 / Refund Policy §5, or for the purpose of obtaining digital content already revealed and consumed.

Chargeback abuse results in permanent termination of your account and any cluster of accounts under your control, plus an IP-address and email-address block. We may also report the conduct to fraud-prevention networks, our payment processor, and where appropriate to law-enforcement authorities.

This section does not limit your statutory right to dispute a charge with your card issuer where applicable consumer-protection law requires that we not retaliate for the exercise of that right; see Terms §7 for the rights expressly preserved.

4. Enforcement ladder

We apply enforcement proportionate to the severity and recurrence of the violation:

  1. Warning. An in-Service or email notice describing the violation and the corrective action required. Reserved for first, low-severity violations.
  2. Suspension. The account is suspended, action endpoints return HTTP 423 Locked (you cannot purchase, claim, or reveal), and a notice is shown on the dashboard. Suspensions are imposed pending investigation, on receipt of a payment dispute (per Terms §7), or as the second step on the ladder for repeat conduct.
  3. Termination. The account is permanently closed, balances are forfeited where permitted by applicable law, and access is revoked. Terminated users are blocked at signup; their email and IP address are recorded for deduplication.
  4. Legal action and fraud referral. For chargeback abuse, payment fraud, large-scale automation, or threats of harm, we may pursue civil remedies and refer the matter to fraud-prevention networks, our payment processor, or law-enforcement.

The ladder is not a strict sequence: severe first-instance violations (payment fraud, threats of harm, automated abuse) skip directly to termination. Where a non-waivable consumer-protection statute requires us to give notice of a suspension or termination, we will do so in the manner required by that statute.

5. Reporting abuse

Reports of abuse, fraud, harassment, automated access, or vulnerabilities should be sent to abuse@gachabox.com. Include the details (account, transaction, URL, timestamps, screenshots) needed for us to investigate. We do not publish a vulnerability bounty, but we will acknowledge good-faith reports and not pursue researchers who follow standard coordinated-disclosure practice.