GDPR Rights and Data Protection

Effective Date: January 1, 2025

Last Updated: January 1, 2025

1. Introduction to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that gives individuals in the European Union enhanced rights over their personal data. This page explains your rights under GDPR and how to exercise them.

If you are located in the European Union, European Economic Area, or Switzerland, you have specific rights regarding your personal information under GDPR.

2. Data Controller Information

3. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

3.1 Right of Access (Article 15)

You have the right to request:

• Confirmation of whether we process your personal data
• A copy of your personal data we hold
• Information about how we use your data
• Details about data sharing with third parties
• How long we retain your information
• Information about your other GDPR rights

3.2 Right to Rectification (Article 16)

You can request correction of inaccurate or incomplete personal data. This includes:

• Updating incorrect contact information
• Correcting game profile details
• Adding missing information to complete your records
• Updating preferences and settings

3.3 Right to Erasure - "Right to be Forgotten" (Article 17)

You can request deletion of your personal data when:

• The data is no longer necessary for original purposes
• You withdraw consent and we have no other legal basis
• You object to processing and we have no overriding interests
• Your data has been unlawfully processed
• Deletion is required for legal compliance

3.4 Right to Restrict Processing (Article 18)

You can request we limit processing of your data when:

• You contest the accuracy of personal data
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you need it for legal claims
• You object to processing pending verification of our interests

3.5 Right to Data Portability (Article 20)

You can request to:

• Receive your data in a structured, commonly used format
• Transfer your data to another service provider
• Have us directly transmit data to another controller

This right applies to data processed by automated means based on consent or contract.

3.6 Right to Object (Article 21)

You can object to processing based on:

• Legitimate interests (including profiling)
• Direct marketing purposes
• Scientific, historical research, or statistical purposes

3.7 Right to Withdraw Consent (Article 7)

Where processing is based on consent, you can:

• Withdraw consent at any time
• Make withdrawal as easy as giving consent
• Continue using services not dependent on that consent

3.8 Right to Lodge a Complaint (Article 77)

You have the right to complain to a supervisory authority if you believe your data protection rights have been violated.

4. How to Exercise Your Rights

Contact Methods

To exercise your GDPR rights, contact us using any of these methods:

Required Information

To verify your identity and process your request, please include:

• Your full name
• Email address associated with your account
• Game username or player ID (if applicable)
• Specific right you wish to exercise
• Detailed description of your request
• Any relevant dates or time periods

5. Response Timeframes

We will respond to your GDPR requests according to legal requirements:

• Initial Response: Within 72 hours of receipt
• Complete Response: Within 30 days of verification
• Complex Requests: Up to 60 days (with explanation)
• Free Requests: No charge for reasonable requests
• Excessive Requests: May incur administrative fees

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

6.1 Consent (Article 6(1)(a))

• Marketing communications
• Optional features and services
• Analytics and improvement activities
• Social media integrations

6.2 Contract Performance (Article 6(1)(b))

• Providing gaming services
• Processing purchases and payments
• Account management
• Customer support

6.3 Legitimate Interest (Article 6(1)(f))

• Fraud prevention and security
• Service improvement and optimization
• Technical support and troubleshooting
• Business analytics

6.4 Legal Obligation (Article 6(1)(c))

• Tax and accounting requirements
• Law enforcement cooperation
• Regulatory compliance

7. Data Transfers Outside the EU

When we transfer personal data outside the European Union, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Certification schemes and codes of conduct

8. Cookie Management

You can manage cookies and tracking technologies through:

• Our cookie consent banner settings
• Browser privacy controls
• Third-party opt-out tools
• Account preference settings

Disabling certain cookies may affect game functionality.

9. Data Protection Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities, including:

• Systematic monitoring of public areas
• Large-scale processing of sensitive data
• Automated decision-making with legal effects
• New technologies with privacy risks

10. Breach Notification

In case of a personal data breach, we will:

• Notify supervisory authorities within 72 hours when required
• Inform affected individuals without undue delay if high risk
• Provide clear information about the breach impact
• Explain measures taken to address the breach
• Offer guidance on protective steps you can take

11. Automated Decision-Making and Profiling

We may use automated decision-making for:

• Fraud detection and prevention
• Game matching and recommendations
• Customer support routing
• Marketing personalization

You have the right to:

• Request human intervention
• Express your point of view
• Contest automated decisions
• Request manual review of outcomes

12. Data Retention Periods

We retain personal data for different periods based on data type:

• Account Data: Until account deletion plus 30 days
• Game Statistics: 3 years after last activity
• Support Communications: 2 years after resolution
• Marketing Data: Until consent withdrawal
• Legal Compliance Data: As required by law
• Security Logs: 1 year for monitoring purposes

13. Children's Data Protection

For users under 16 in the EU:

• Parental consent required for data processing
• Special protection measures in place
• Limited data collection and use
• Enhanced security safeguards
• Right to have data erased upon request

14. Supervisory Authority Contacts

You can contact your local supervisory authority to file complaints or get assistance:

• For general EU information: European Data Protection Board
• To find your local authority: EDPB Members List

15. Updates to GDPR Rights

We will notify you of significant changes to this GDPR information through:

• Email notifications to registered users
• Website announcements
• In-game notifications
• Updated effective dates on this page

16. Contact for GDPR Matters

For all GDPR-related inquiries, requests, or concerns:

This GDPR Rights information is effective as of January 1, 2025, and was last updated on January 1, 2025.