Privacy Policy

We collect information that you provide directly to us, information we obtain automatically when you use our Platform, and information from third-party sources.

1.1 Information You Provide Directly

When you register for an account or use our Platform, we may collect:

• Account Information: Name, username, email address, password (hashed), and profile image
• Payment Information: Payment method details, billing address, and transaction history (processed through third-party payment processors)
• Shipping Information: Shipping address, city, state, postal code, country, and phone number
• Banking Information: Bank account details (account name, account number, sort code, bank name) - stored for payment processing purposes
• Support Communications: Information you provide when contacting our support team, including support tickets, messages, and attachments
• Marketing Preferences: Your subscription preferences for marketing emails and communications
• Referral Information: Referral codes and information about users you refer or who referred you

1.2 Information Collected Automatically

When you access and use our Platform, we automatically collect certain information:

• Usage Data: Information about how you interact with our Platform, including pages visited, time spent on pages, games played, boxes opened, and features used
• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information
• Log Data: IP address, access times, dates and times of visits, referring website addresses, and pages viewed
• Session Information: Session tokens, login times, logout times, and session duration
• Gameplay Data: Games played, results, achievements unlocked, XP earned, levels reached, and inventory items
• Transaction Data: Credit purchases, credit usage, and transaction history

1.3 Information from Third Parties

We may receive information about you from third-party sources:

• Payment Processors: Transaction confirmations, payment status, and fraud prevention data
• Authentication Providers: Information from OAuth providers if you sign in using third-party authentication
• Analytics Services: Aggregated usage data and analytics from services like Google Analytics
• Advertising Networks: Information from advertising partners like Google Ads for ad personalization and measurement

We use the information we collect for the following purposes:

2.1 Platform Operations

• Create and manage your account
• Process and fulfill your credit purchases
• Enable gameplay and track game results
• Manage your inventory and prize claims
• Process shipping requests and fulfill orders
• Process credit purchases and purchases of collectibles
• Calculate and award XP, levels, and achievements
• Manage referral programs and rewards
• Provide customer support and respond to inquiries

2.2 Communication

• Send you transactional emails (order confirmations, shipping updates, account notifications)
• Send you marketing communications (with your consent, which you can opt out of at any time)
• Respond to your support requests and provide customer service
• Send you important updates about our Platform, terms, or policies

2.3 Platform Improvement

• Analyze usage patterns and user behavior
• Improve our games, features, and user experience
• Develop new features and services
• Conduct research and analytics
• Test and optimize our Platform

2.4 Security and Fraud Prevention

• Detect and prevent fraud, abuse, and security threats
• Verify your identity and authenticate your account
• Investigate suspicious activity
• Enforce our Terms of Service
• Protect the rights and safety of our users and Platform

2.5 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Enforce our legal rights and agreements
• Protect against legal liability

2.6 Advertising and Marketing

• Display personalized advertisements (with your consent where required)
• Measure the effectiveness of our advertising campaigns
• Retarget users who have visited our Platform
• Provide you with relevant offers and promotions based on your interests

We use third-party services to operate our Platform, process payments, analyze usage, and deliver advertisements. These services may collect, use, and share your information in accordance with their own privacy policies.

3.1 Payment Processors

We use third-party payment processors to handle credit purchases. When you make a payment, your payment information is processed directly by the payment processor. We do not store your full payment card details on our servers.

• Payment processors may collect: payment card information, billing address, transaction details, and fraud prevention data
• Payment processors use your information to process payments, prevent fraud, and comply with financial regulations
• We receive transaction confirmations and status updates from payment processors
• Please review the payment processor's privacy policy to understand how they handle your payment information

3.2 Google Analytics

We use Google Analytics to understand how users interact with our Platform. Google Analytics collects and processes data about your use of our Platform.

• Data Collected: Page views, session duration, bounce rate, device information, geographic location (general), and user interactions
• Purpose: Analyze Platform usage, improve user experience, and understand user behavior
• Cookies: Google Analytics uses cookies and similar technologies to track your activity
• Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or adjusting your browser settings
• Google's Privacy Policy: Google's use of data collected through Google Analytics is governed by Google's Privacy Policy. We encourage you to review it.

3.3 Google Ads

We use Google Ads (formerly Google AdWords) to display advertisements and measure advertising effectiveness.

• Data Collected: Ad interactions, clicks, conversions, device information, and browsing behavior
• Purpose: Display relevant ads, measure ad performance, and optimize advertising campaigns
• Remarketing: Google Ads may use cookies to show you ads on other websites based on your visits to our Platform
• Personalization: Ads may be personalized based on your interests and browsing history
• Opt-Out: You can opt out of personalized ads through Google's Ad Settings or the Network Advertising Initiative opt-out page
• Google's Privacy Policy: Google's advertising practices are governed by Google's Privacy Policy and Google Ads policies

3.4 Other Third-Party Services

We may also use other third-party services including:

• Cloud Storage: For storing images and files (e.g., Cloudinary)
• Email Services: For sending transactional and marketing emails
• Authentication Providers: For OAuth and social login functionality
• Hosting and Infrastructure: For Platform hosting and content delivery

Important: We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of all third-party services we use.

We use cookies, web beacons, pixels, and similar tracking technologies to collect and store information about your use of our Platform.

4.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly (e.g., authentication, session management)
• Analytics Cookies: Help us understand how users interact with our Platform (e.g., Google Analytics)
• Advertising Cookies: Used to deliver relevant advertisements and measure ad effectiveness (e.g., Google Ads)
• Preference Cookies: Remember your settings and preferences

4.2 How We Use Cookies

• Maintain your login session
• Remember your preferences and settings
• Analyze Platform usage and performance
• Deliver personalized advertisements
• Measure advertising effectiveness
• Prevent fraud and ensure security

4.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View and delete cookies
• Block cookies from specific websites
• Block all cookies
• Delete all cookies when you close your browser

Note: Disabling cookies may affect the functionality of our Platform. Some features may not work properly if cookies are disabled.

4.4 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT browser signals or mechanisms.

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processing
• Email delivery
• Cloud storage and hosting
• Analytics and advertising
• Customer support tools
• Fraud prevention and security

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Business Transfers

If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests, subpoenas, or court orders
• Government investigations
• Legal processes or proceedings
• Protection of our rights, property, or safety
• Protection of our users' rights, property, or safety
• Enforcement of our Terms of Service

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This information may be used for research, analytics, or other purposes.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

6.1 Security Measures

• Encryption: We use encryption (SSL/TLS) to protect data in transit
• Secure Storage: Sensitive data is stored securely using industry-standard practices
• Access Controls: We limit access to personal information to authorized personnel only
• Password Security: Passwords are hashed using secure hashing algorithms
• Regular Updates: We regularly update our security practices and systems
• Monitoring: We monitor our systems for security threats and vulnerabilities

6.2 Payment Security

Payment information is processed by third-party payment processors that comply with industry standards such as PCI DSS. We do not store full payment card details on our servers.

6.3 Your Responsibility

You play an important role in keeping your information secure:

• Use a strong, unique password for your account
• Do not share your account credentials with anyone
• Log out of your account when using shared devices
• Notify us immediately if you suspect unauthorized access
• Keep your device and browser software up to date

6.4 Data Breaches

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Account Information: Retained while your account is active and for a reasonable period after account closure for legal and business purposes
• Transaction Records: Retained for at least 7 years to comply with financial and tax regulations
• Support Communications: Retained for a reasonable period to provide customer service and resolve disputes
• Analytics Data: Retained in aggregated form indefinitely for business analytics
• Marketing Data: Retained until you opt out or request deletion

7.2 Account Deletion

If you request account deletion, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes (e.g., transaction records, fraud prevention).

Depending on your location, you may have certain rights regarding your personal information. These may include:

8.1 Access and Portability

• Access: Request access to the personal information we hold about you
• Portability: Request a copy of your data in a machine-readable format

8.2 Correction and Deletion

• Correction: Update or correct inaccurate information through your account settings or by contacting us
• Deletion: Request deletion of your personal information (subject to legal and business requirements)

8.3 Opt-Out Rights

• Marketing Emails: Unsubscribe from marketing emails using the link in each email or through your account settings
• Cookies: Manage cookies through your browser settings
• Google Analytics: Opt out using the Google Analytics Opt-out Browser Add-on
• Personalized Ads: Opt out through Google's Ad Settings or the Network Advertising Initiative

8.4 Objection and Restriction

• Objection: Object to processing of your personal information for certain purposes
• Restriction: Request restriction of processing in certain circumstances

8.5 Exercising Your Rights

To exercise any of these rights, please contact us through our support system or using the contact information provided in this Privacy Policy. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

We may need to verify your identity before processing certain requests. We may also charge a reasonable fee or refuse requests that are excessive, repetitive, or clearly unfounded.

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 18, we will delete that information promptly. If you are under 18, please do not use our Platform or provide any personal information to us.

Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

By using our Platform, you consent to the transfer of your information to countries outside your country of residence, including the United States and other countries where our service providers operate.

We take appropriate safeguards to ensure that your information receives an adequate level of protection, including:

• Using standard contractual clauses approved by data protection authorities
• Ensuring service providers comply with applicable data protection laws
• Implementing appropriate security measures

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of your personal information (subject to exceptions)
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your California privacy rights, please contact us through our support system. We will verify your identity and respond to your request within 45 days (or as required by law).

Shine the Light Law: California residents may request information about how we share certain categories of personal information with third parties for their direct marketing purposes.

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

12.1 Legal Basis for Processing

We process your personal information based on:

• Consent: When you provide explicit consent (e.g., marketing communications)
• Contract Performance: To fulfill our contract with you (e.g., processing purchases, providing services)
• Legal Obligation: To comply with legal requirements (e.g., tax records, fraud prevention)
• Legitimate Interests: For our legitimate business interests (e.g., security, analytics, Platform improvement)

12.2 Your GDPR Rights

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

12.3 Data Protection Officer

If you have questions about our data processing activities or wish to exercise your GDPR rights, please contact us through our support system.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date at the top of this Privacy Policy
• Sending you an email notification (for significant changes)
• Displaying a notice on our Platform

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

Your continued use of our Platform after we post changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the changes, you should discontinue use of the Platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Support System: Use the support ticket system available on the Platform
• Account Settings: Access privacy and data management options through your account settings

We will respond to your inquiry within a reasonable timeframe, typically within 30 days, or as required by applicable law.

14.1 Data Protection Inquiries

For specific data protection inquiries, including requests to exercise your privacy rights, please use our support system and clearly indicate that your request relates to data protection or privacy rights.

15.1 Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites or services you visit.

15.2 Social Media

If you interact with us on social media platforms, your interactions are governed by the privacy policies of those platforms. We may collect information from social media platforms if you choose to link your account or use social login features.

15.3 Public Information

Some information you provide may be publicly visible, such as usernames, profile information, or public achievements. Please be mindful of the information you choose to make public.

15.4 Business Transitions

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change in ownership or control of your personal information.