How we protect your top-up

1. Payment on a dedicated secure page

The main site collects only your number, amount and email. When you continue, you go to a dedicated secure billing page to pay, protected by HTTPS.

2. Encryption in transit

All pages are served over HTTPS. Data you send is encrypted between your browser and our servers.

3. What we store, and where

We store the number, amount, email and timestamp of a request on a server in the UAE with restricted access. Backups are encrypted at rest.

4. Access control

Only staff who need order data to run the service can see it. We keep records for 24 months for accounting, then delete them.

5. Reporting an issue

Found something that looks wrong? Email security@fillstash.com or see our security.txt. We take reports seriously and reply quickly.

6. Your part

Use a device you trust, check the number before paying, and keep your confirmation email. If anyone asks for your full card number by email or phone, it isn't from us.

Last updated: 2026-07.