Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We collect the following categories of personal data:

Account Data

• Full name, email address, date of birth
• Username and profile preferences
• Country of residence
• Identity verification documents (for prize-eligible accounts)

Payment Data

• Payment method details (processed securely via Stripe — we do not store full card numbers)
• Transaction history and payout records

Platform Activity Data

• Match history, performance metrics, skill ratings
• Tournament participation records
• Guild membership and interactions

Technical Data

• IP address, device type, browser type, operating system
• Session duration and navigation patterns
• Anti-cheat monitoring data (hardware fingerprint components)

3. How We Use Your Data

• Account management: To create and maintain your profile and provide access to the Platform
• Competition services: To process entries, conduct matchmaking, verify results, and distribute prizes
• Anti-cheat and integrity: To detect, investigate, and prevent cheating, collusion, and fraud
• Analytics: To provide you with personalized performance analytics and improvement insights
• Communications: To send transactional emails, updates, and (where consented) promotional communications
• Legal compliance: To meet our obligations under applicable laws including KYC requirements for prize payouts

4. Legal Basis for Processing

We process your data under the following legal bases (GDPR Article 6):

• Contract performance: Processing necessary to provide the Platform services you have contracted with us for
• Legitimate interests: Anti-cheat monitoring, fraud prevention, platform security, and service improvement
• Legal obligation: Identity verification and financial reporting requirements
• Consent: Marketing communications (you may withdraw consent at any time)

5. Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors (Stripe, PayPal) for transaction processing
• Identity verification providers for age and KYC compliance
• Cloud infrastructure providers (AWS, EU regions) for platform hosting
• Legal authorities when required by law or to protect the rights of Vexobravelmora and its users

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

6. Data Retention

We retain your personal data for as long as your account is active, plus:

• Transaction records: 7 years (tax and financial compliance)
• Anti-cheat logs: 3 years
• Match history: Until account deletion plus 1 year
• Marketing data: Until consent is withdrawn

7. Your Rights

Under GDPR, you have the following rights:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a machine-readable format
• Restriction: Restrict processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw marketing consent at any time

To exercise your rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

8. Cookies

We use the following categories of cookies:

• Essential cookies: Required for authentication, security, and core Platform functionality. Cannot be disabled.
• Analytics cookies: Help us understand Platform usage patterns to improve the experience. Requires consent.
• Preference cookies: Remember your settings and personalization choices. Requires consent.

You can manage cookie preferences at any time through your account settings or browser controls.

9. Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, regular penetration testing, and access controls limiting data access to authorized personnel only.

In the event of a data breach that poses risk to your rights, we will notify you and the relevant supervisory authority within 72 hours of discovery.

10. Children's Privacy

The Platform is strictly for users aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it immediately. If you believe a minor has registered, please notify us at [email protected].

11. Policy Updates

We may update this Privacy Policy to reflect changes in law or our data practices. Material changes will be communicated by email at least 14 days in advance. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact & DPO

Our Data Protection Officer can be reached at: