DishBox

Privacy Policy

Last updated: July 19, 2026

DishBox (operated by Dish Box Service Point (Private) Limited, "DishBox", "we", "us", "our") provides an online platform to browse DTH (Direct-to-Home) recharge plans and process recharge payments for operators including Airtel Digital TV, Dish TV, Sun Direct, Tata Play, and Videocon d2h. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

  • Contact details you give us: name, mobile number, and email address.
  • DTH account details needed to complete a recharge: operator name, subscriber ID / customer ID / registered mobile number, and the plan or amount selected.
  • Transaction details: order reference, amount, currency (LKR), payment status, and timestamps.
  • Technical data: IP address, browser type, and device information collected automatically for security and fraud prevention.
  • Support communications: messages you send to our support email or phone line.

2. What we do not collect or store

We do not collect or store your card number, CVV, or online banking credentials. Payments are processed directly by our payment gateway partner, WebXPay, on their secure payment page. DishBox only receives the outcome of the transaction (success, failure, or pending) and a payment reference.

3. How we use your information

  • To place and complete DTH recharge orders with the relevant operator.
  • To send order confirmations, receipts, and recharge status updates.
  • To provide customer support and resolve failed or disputed transactions.
  • To detect and prevent fraud, abuse, or unauthorised use of the platform.
  • To comply with applicable financial, tax, and regulatory record-keeping requirements in Sri Lanka.

4. Sharing of information

We share only the information necessary to fulfil your order:

  • With the DTH operator, to credit the recharge to your subscriber ID / mobile number.
  • With WebXPay, our licensed payment gateway, to process your payment.
  • With regulators or law enforcement, where required by law.

We do not sell your personal information to third parties.

5. Data retention

We retain order and transaction records for as long as needed to support your recharge, handle disputes, and meet accounting and regulatory retention obligations, after which the data is deleted or anonymised.

6. Cookies and session data

Our admin and account areas use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies on this site.

7. Data security

We apply reasonable technical and organisational safeguards — including access controls, encrypted connections (HTTPS), and restricted database access — to protect your information from unauthorised access, alteration, or disclosure.

8. Your rights

You may request access to, correction of, or deletion of your personal information, subject to our legal and operational retention requirements, by contacting us using the details below.

9. Children's privacy

Our services are intended for users who are at least 18 years old or otherwise capable of entering into a binding recharge/payment transaction. We do not knowingly collect information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of DishBox after a change means you accept the updated policy.

11. Contact us

For any privacy-related questions or requests, contact us at:

Email: support@dishbox.lk

Phone: 725115110

Dish Box Service Point (Private) Limited, No 155/52, Wolfendhal Street, Colombo 13, Sri Lanka.