The Company is primarily responsible for processing your personal data in accordance with this Policy. While we are the primary data controller, some processing activities may involve third parties, as outlined in subsequent sections of this Policy.

As the data controller, we are responsible for ensuring compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), which establishes rules for protecting individuals regarding the processing and movement of personal data.

We follow data minimization principles, collecting only essential personal data as outlined in this Policy.

Account Information

We obtain essential account data directly from you or authorized third parties to facilitate login access and purchase capabilities.

Third-Party Integration Data

For Steam users, we receive specific account information from Valve Corporation, including:
• Steam ID
• Username
• Profile picture

This information allows us to verify your Steam identity and access publicly available account details, including virtual item inventories.

Please note, Valve Corporation's use of your personal data operates independently of our control. We encourage you to consult Valve Privacy Policy regarding their data practices.

Automatic Data Collection

When you access and use the Website, we automatically collect:
• Network data: IP address, location information, and details about your mobile operator or Internet provider
• Device information: Operating system, browser specifications, screen resolution, time zone, language settings, device model and manufacturer
• Usage data: Session information, page visits, interface interactions, and referral source
• Cookie data: Like many businesses, we use cookies to collect certain data. Please refer to our Cookie Policy for details.

Transaction Information

We collect data related to your transactions on the Website, including deposits, product purchases, and withdrawals to your Steam account.

Payment Processing

While we do not process payments directly, our payment provider shares the following information with us when you make a purchase:
• A unique transaction identifier
• The payment method utilized
• Your IP address at the time of transaction

Communication Records

When you reach out to us through the Website's interface or via email, we collect:
• Your name
• Your email address
• Any additional information you choose to provide voluntarily

We use cookies to access and store information. Detailed guidelines about our cookie technologies and opt-out procedures are available in our Cookie Policy.

How long will we store Your personal data?

Contact data: We will store Your Contact data solely for the duration of our communication. Once the purpose of communication is achieved, we will erase these data.

We will store Your personal data only for the duration necessary to fulfill the purposes outlined in this Policy. In the event of any dispute, we will retain Your personal data for the period required to resolve such dispute.

Data automatically collected: We will store automatically collected Data for 14 (fourteen) months from Your last Website visit.

Account data and Transaction data: We will maintain Your Account data and Transaction data only as long as required to provide account access. If You do not use Your Account for 6 (six) months, we will erase these data.

Payment data: We will retain Your Payment data for up to 6 (six) years from the date of Product provision. This retention period supports consumer dispute resolution and addressing potential issues.

Cookie data: The storage period for cookies is determined in the Cookie Policy according to the specific cookie type.

Right to Access (Article 15)

You have the right to request confirmation from us regarding whether we are processing your personal data. If we are processing your data, you have the right to obtain a copy of this personal data.

Right to Erasure (Article 17)

You have the right to request the erasure (removal) of your personal data from our systems. We will comply with your erasure request in the following circumstances:
• Your personal data is no longer necessary for the original purposes of collection
• You withdraw your previously given consent, and no other legal basis exists for continued processing
• We have no legal obligation to retain your personal data under applicable legislation
• Your personal data has been processed unlawfully
• No legal restrictions prevent the exercise of this right
• Any other circumstances where erasure is required or permitted by applicable law

Once you submit an erasure request, we will remove your personal data in accordance with these conditions.

Right to Object to Processing Based on Legitimate Interest (Article 21)

You have the right to object to the processing of your personal data when such processing is based on our legitimate interest. Upon receiving your objection, we will cease processing your data unless we can demonstrate compelling legitimate grounds that override your interests and rights, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing (Article 18)

You have the right to request that we restrict the processing of your personal data in the following circumstances:
• When you have objected to processing based on our legitimate interest, we will restrict processing pending verification of whether our legitimate grounds override your rights;
• When you have contested the accuracy of your personal data, we will restrict processing until we have verified the accuracy of the data;
• When the processing is unlawful, and you oppose the erasure of your personal data, requesting the restriction of its use instead;
• When we no longer need the personal data for processing purposes, but you require the data for the establishment, exercise, or defense of legal claims.

Right to Lodge a Complaint (Article 77)

You have the right to file a complaint with the relevant supervisory authority if you believe that the processing of your personal data violates your rights under the General Data Protection Regulation (GDPR).

You can always contact us for any issue concerning the processing of Your personal data, including complaints. 

Nevertheless, if you suppose that your rights under applicable data protection legislation have been violated, you can lodge a complaint either:

With the Commissioner for Personal Data Protection of the Republic of Cyprus (jurisdiction of our incorporation). The Website of the Commissioner http://www.dataprotection.gov.cy/; or

With the data protection authority of the country of Your habitual residence or place of work. You can find the list of all EU Data Protection Authorities on the Website of the European Data Protection Board https://edpb.europa.eu/about-edpb/board/members_en.With the data protection authority of the country of Your habitual residence or place of work. You can find the list of all EU Data Protection Authorities on the Website of the European Data Protection Board https://edpb.europa.eu/about-edpb/board/members_en.

We take data protection seriously and have dedicated our support personnel to handle your requests regarding your rights. You can always reach them at [email protected].

Our Website is not intended for use by children, and we do not intentionally collect or process personal data from individuals under 18 years of age.

To ensure proper Website operation, we may share your personal data with third parties, including:

Our Contractors and Consultants: We may engage third parties to service the Website and transfer your personal data to them. We guarantee these parties have a contractual obligation to process your data in accordance with this Policy and applicable law.

Website Hosting Providers: We use hosting providers who host our Website on their servers. They may access your personal data, but only in encrypted form.

Analytics and IT Service Providers: We use services to analyze Website operation, monitor your interactions, and prevent external threats. Our current providers include:
• Cloudflare (USA): Helps optimize Website operation and ensure protection. As the United States does not provide an adequate level of personal data protection, standard contractual clauses (SCC) apply to data transfer.
• Google (Ireland/USA): Provides Google Analytics and reCAPTCHA services. Standard contractual clauses (SCC) apply to data transfer due to inadequate US data protection standards.
• Login4play: Used to identify your Steam community profile and access Steam account information. We share your Steam data with login4play.com for this purpose.