Privacy Policy
This Privacy Policy (the “Privacy Policy”) is designed to provide data subjects with information on the processing of their personal data (any information relating to them) in the context of usage of the Playgama (https://playgama.com) (“Service”) under the Terms of Use (https://playgama.com/termsofuse) (“Agreement”) by those who use the Service (“Users”) and play the games available on the Service (“Players”).
This Privacy Policy is based on the provisions of data protection laws, which may be applicable in the country of your residence.
1. Controller
Data controller with regard to personal data processed under this Policy is LeadToChanges L.L.C-FZ (“Playgama”).
Data subjects can contact us on any questions relating to the processing of their personal data under this Privacy Policy by either of the following methods:
Email: [email protected]
Postal address: LeadToChanges L.L.C-FZ, The Meydan Hotel, Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E
2. Categories of processed personal data
The table below sets out the categories of personal data Service collects and processes. Service collects personal data only from the data subjects themselves.
| Data Subjects | Category | Description |
|---|---|---|
| Users of the Service | User data required to create an account on Playgama website | Personal data that we need to create your account at the Service. This includes:
|
| Players | Player data | If you decide to play games available on the Service, we may need to receive certain additional information about you. This may include:
|
| Users of the Service, players, visitors of the website | Automatically collected information | Service uses cookies on its platform to improve the quality of your user experience. A cookie is a commonly used small text file that the internet browser installs on your device when you visit a website, and the browser sends information on your visit back to the website when you revisit it. |
3. Purposes and legal bases for the processing
We process your personal data only when we have one of the legal bases mentioned below:
3.1. Performance of the Agreement. We may process your personal data in order to provide you the Service under the Agreement.
3.2. Legitimate Interest. We may process your personal data when we (or a third party) have an interest in using your personal data in a certain way, which is necessary and justified in light of the possible risks.
3.3. Consent. Where required by applicable laws, we will process your personal data based on your consent.
3.4. Legal Obligations. When we must process your personal data to comply with applicable laws.
The table below sets out:
- Service’s purpose for processing your personal data;
- Service’s legal basis for each purpose under applicable law;
- categories of personal data which Service uses for each purpose.
| Purpose for processing Your data | Legal basis | Categories of personal data used for the purpose |
|---|---|---|
| To provide the Service | Agreement | User data, Player data, Automatically collected information. |
| To improve the Service | Legitimate interest | User data, Player data, Automatically collected information |
| To proceed payments of Players | Agreement | Player data |
| To market, promote, and advertise the Service | Consent, legitimate interest | User data, Player data, Automatically collected information |
| To comply with legal obligations and law enforcement requests | Legal obligation, legitimate interest | User data, Player data, Automatically collected information |
| To establish, exercise, or defend legal claims | Legitimate interest | User data, Player data, Automatically collected information |
| To detect and prevent fraud | Legitimate interest | User data, Player data, Automatically collected information |
| To provide security | Legitimate interest | User data, Player data, Automatically collected information |
| To conduct research, contests, surveys | Agreement, Legitimate interest, Consent | User data, Player data, Automatically collected information |
We do not process your personal data for other purposes that are not covered by this Privacy Policy.
4. Recipients and sources of personal data
4.1. We disclose certain personal data to the following recipients to the extent required or permitted by applicable law and/or based on their legitimate and reasonable requests:
- affiliate entities of LeadToChanges L.L.C-FZ which are a part of the same group of companies;
- payment services providers;
- partners providing sales and marketing services;
- partners assisting us in gathering statistical and aggregated information about how Users and Players interact with the Service;
- partners otherwise assisting in provision of the Service and achievement of other purposes mentioned in the section 3 of this Privacy Policy;
- various state and municipal authorities if strictly required to respond to their legitimate formal inquiries;
- their legitimate formal inquiries; other third parties when it is required for compliance with applicable laws.
4.2. LeadToChanges L.L.C-FZ collects personal data from the Users and Players and visitors of LeadToChanges L.L.C-FZ website themselves. We can also get personal data from social networks or Xsolla Login if Users and Players choose to register and/or authorize on the Service using the functionality of the relevant social network or Xsolla Login.
5. Transfers to third countries
We may transfer personal data to third countries, including those that do not provide the same level of data protection as in the country of your residence. When doing so, we ensure implementation of security measures aimed at protection of your personal data in an appropriate manner. In particular, when provision of the Service is subject to the GDPR and implies performance of the restricted data transfer, we rely on the standard contractual clauses issued by the European Commission.
The data subjects can get more information on the mechanisms of transfers to third countries by Service by sending a request with the use of contact details specified in section 1 of this Privacy Policy.
6. Storage periods
We store personal data as long as it is required to achieve the purposes of the processing specified in section 3 of this Privacy Policy, unless there are specific periods defined in applicable laws.
If you wish to have any personal data removed from our databases, please contact us by sending a request with the use of contact details specified in section 1 of this Privacy Policy.
7. Basic rights of data subjects
Please see your rights and their descriptions in this table.
| Right | Description |
|---|---|
| Access | You can ask us to confirm whether or not we process your personal data. If so, you can access these personal data and ask us to explain certain details of the processing. |
| Rectification | You can ask us to correct inaccurate personal data concerning you. If it complies with the purposes of the processing, you can ask us to rectify incomplete or inaccurate personal data. |
| Erasure (“right to be forgotten”) | You can ask us to erase personal data concerning you under applicable law. For example, this applies if (1) the personal data are no longer necessary in relation to the purposes for which they were processed; (2) you withdraw consent to the processing and there is no other legal ground for the processing; (3) the personal data have been unlawfully processed. |
| Restriction on processing | You can ask us to mark the stored personal data with the aim to limit their processing in the future under applicable law. This applies if (1) you contest the accuracy of the personal data; (2) you ask to restrict the use of the personal data when their processing is unlawful; (3) you need personal data to protect your rights when Service no longer needs the personal data; (4) you have objected the processing based on the legitimate interests pursued by us or by a third party. |
| Objection to processing (if provided to the data subject under applicable laws) | You can object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on the legitimate interests pursued by Service or by a third party. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms establishment, exercise or defense of legal claims. |
| Portability (if provided to the data subject under applicable laws) | When the processing is based on your consent or on the agreement with you, you can receive personal data, which you have provided to Service, in a structured, commonly used and machine-readable format and can freely transmit those data to another controller. Where technically feasible, the data subject can also ask Service to transmit the personal data directly to another controller. |
To exercise their rights, data subjects can contact us with the use of contact details specified in section 1 of this Privacy Policy.
8. Withdrawal of consent
Where processing is based on consent (or explicit consent), you have the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal. To withdraw consent, you can contact us with the use of contact details specified in section 1 of this Privacy Policy.
9. Right to lodge a complaint with a supervisory authority
When Article 77 of the GDPR (or the relevant provision of other applicable laws) applies, you have the right to lodge a complaint with a supervisory authority in the area of data protection in the country of your residence.
10. Necessity to provide personal data
There are no general statutory or contractual requirements for data subjects to provide Service with personal data processed under this Privacy Policy.
11. Cookies
We use "cookies" to help personalize and optimize your online experience and time online, including for general improvement of the Service. A cookie is a small file placed on your device. Cookies store bits of information that we use to help make our Service work and enable us to personalize your experience in line with your settings. They can’t run any code and don’t contain viruses. We use the following types of cookies:
Technical (strictly necessary) cookies: These cookies are necessary for the website/app to function and cannot be switched off in our systems. They are usually only set in response to actions made by visitors which amount to a request for services, such as setting privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but this may cause parts of the site/app to not work properly. These cookies do not store any personal data.
Marketing cookies: Marketing cookies are necessary to track visitors across the website/app and display ads that are relevant.
Analytical cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site/app. They help us to know which pages are the most and least popular and see how visitors move around the site/app. If these cookies are disabled, we will not know when a user like yourself has visited our site/app or be able to monitor the site’s/app's performance.
Most browsers allow you to control cookies through their setting preferences. Limiting the ability of websites to set cookies, however, may deteriorate the overall user experience or deactivate features that you wished to utilize.
12. Children’s privacy
We do not knowingly or intentionally collect personal data through the Service from children under eighteen (18) years of age. If you are under eighteen (18) years of age / other age, recognized in your jurisdiction as sufficient for your independent use of the Service, do not attempt to register for or use our Service, do not provide us any personal data about yourself unless you have the requisite parental consent. If you are a parent or guardian and you are aware that your child has violated this Privacy Policy and provided us personal data, please contact with the use of contact details specified in section 1 of this Privacy Policy. If we become aware that a minor has provided us personal data or otherwise used the Service in violation of the Privacy Policy, we will take steps to remove that information.
13. Changes to this Privacy Policy
We may change this Privacy Policy from time to time at our sole discretion. If so, we may notify the data subjects about these changes by an appropriate method. If there is no explicit notification, the data subjects may always review the up-to-date version of this Privacy Policy located at https://playgama.com/confidential.
STATE/COUNTRY SPECIFIC PRIVACY POLICIES AND NOTIFICATIONS
Privacy Information for California Residents
This section of the Privacy Policy applies only with regard to California residents. When applicable, this section shall prevail over all other parts of the Privacy Policy in case of discrepancies.
Personal Information Collected over the last 12 Months
Please see Chapter 2, cl. 4.2. of the Privacy Policy.
Categories of Personal Information Sold in the last 12 months
We do not sell your personal information to third parties.
Categories of Personal Information Disclosed over the last 12 months
Please see Chapter 4 of the Privacy Policy.
Information we sell
We do not sell your personal information to third parties. Please note that “sale” of personal information does not include those instances when such information is part of a merger, acquisition, or other transaction involving all or part of our business. If we sell all or part of our business, make a sale or transfer of assets, or are otherwise involved in a merger or other business transaction, we may transfer your personal information to a third party as part of that transaction. If such transaction materially affects the manner in which your personal information is processed, we will notify you of such change prior to its implementation.
Your California Privacy Rights
We have in place policies and procedures to facilitate the exercise of privacy rights available to California residents under applicable law. If you are a California resident, you may be entitled to the following:
Right to Access: to have access to your personal information upon simple request – that is, you may receive a copy of such information upon receipt of a verifiable request, along with other information related to the collection or processing.
Disclosure of Direct Marketers: to have access upon simple request, and free of charge, the categories and names/addresses of third parties that have received personal information for direct marketing purposes.
Right to Information About Collecting, Selling, Sharing, or Disclosing Personal Information: upon receipt of a verifiable request, you may obtain a list of:
- the specific pieces of your personal information Service holds;
- the categories of personal information collected about you, sold to third parties, or disclosed to third parties for business purposes;
- the categories of personal information sold within the last 12 months;
- the categories of sources from which personal information is collected;
- the business or commercial purpose for collecting or selling personal information;
- the categories of third parties with whom personal information is shared, sold, or disclosed for a business purpose.
Right to Opt-Out of the Sale of Personal Information: California residents have the right to opt-out of the sale of their personal information under certain circumstances.
Right to Deletion: to obtain the deletion of your personal information in the situations set forth by applicable data protection law and upon receipt of a verifiable request.
Right to Non-Discrimination: as defined under relevant law, you have a right to non- discrimination in the services or quality of services you receive from us for exercising your rights.
Please contact with the use of contact details specified in section 1 of this Privacy Policy in relation to exercising these rights. Note that we may ask you to verify your identity – such as by requiring you to provide information about yourself – before responding to such requests.
Submitting a Verifiable Request under the CCPA
As mentioned above, California residents have certain rights to access, delete, or otherwise exercise rights regarding their personal information under the California Consumer Privacy Act of 2018 (“CCPA”). Service will respond to an individual’s “verifiable request” to exercise his or her rights under the CCPA – that is, where Service has received a request purporting to be from a particular individual, and Service has been able to verify the individual’s identity. The need to verify an individual’s identity is critical to protecting your information, and to ensuring that your information is not shared with anyone pretending to be you or someone who is not authorized to act on your behalf.
Submitting your request. You may submit a verifiable request with the use of contact details specified in section 1 of this Privacy Policy. We will ask you to provide information about yourself so that we can verify your identity as part of this process. This information may include your name, address, whether you have an account with Service, and other information deemed necessary by us to reasonably verify your identity. Once we have your submission, we will compare the information you provided to the information we have about you to verify your identity. If necessary, we may ask for additional information if we have difficulty confirming your identity. We will not share your information or honor other requests in those situations where we are unable to confirm that a request for your information is a “verifiable request.” We will not be able process your request if we cannot verify your identity.
Submitting a request through an authorized agent. Under California law a California resident can appoint an “authorized agent” to make certain verifiable requests upon their behalf, such as the right to know what information we collect about the consumer or to request deletion of the consumer’s information. An authorized agent may submit a request by following the steps outlined above. An authorized agent must identify the consumer he or she is submitting a request on behalf of, and provide the information requested by Service to verify the consumer’s identity. We will also require the purported authorized agent to submit proof that he or she has been authorized by the consumer to act on the consumer’s behalf.
Because the security and privacy of your information is paramount, we will ask that you identify and provide permission in writing for such persons to act as your authorized agent and exercise your applicable rights under California law in such situations. This may require us to contact you directly and alert you that an individual has claimed to be your agent and is attempting to access or delete your information. We will also independently verify your identity to ensure that an unauthorized person is not attempting to impersonate you and exercise your rights without authorization. We will not share your information or honor any other requests in those situations where you cannot or do not grant permission in writing for an identified authorized agent to act on your behalf, or where we cannot independently verify your identity.
Submitting a Request for Removal of Minor Information
To request the removal of information about a minor from this site, parents or guardians may submit a request with the subject line “Removal of Minor Information”. Such requests must come from the minor’s parents or guardian; minors may not submit information to Your submission should include the following information:
- the nature of your request;
- the identity of the content or information to be removed;
- whether such content or information is found on the Service;
- the location on content or information on the Service (e.g., providing the URL for the specific web page the content or information is found on);
- that the request is related to the “Removal of Minor Information”;
- your name, street address, city, state, zip code, and e-mail address.
If we become aware that a minor has provided us personal data or otherwise used the Service in violation of the Privacy Policy, we will take steps to remove that information.
Pursuant to 47 U.S.C. Section 230(d), Service hereby notifies you that parental control protections (such as computer hardware, software, or filtering services) are commercially available that may assist in limiting access to material that is harmful to minors. Information regarding providers of such protections may be found on the Internet by searching “parental control protection” or similar terms.
Our Policy on “Do Not Track” Signals under the California Online Protection Act
We do not support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable “Do Not Track” by visiting the “Preferences” or “Settings” page of your web browser.
Third parties may collect data that relates to you. We cannot control third parties’ responses to do-not-track signals or other such mechanisms. Third parties’ use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.
How to Contact Us/Submit a CCPA Inquiry
If you are a California resident and have any questions about this Privacy Policy, our practices, or your personal information, please contact us via the contact information at the top of this Policy.
Date of publication: 10.03.2023