Privacy Policy

legal.currentVersion v2 · legal.version 2026-01-15

1. Introduction and Scope

This Privacy Policy ("Policy") describes how DeckWorld Ltd. ("we", "us", "our"), a company registered in Cyprus, collects, uses, discloses, and protects personal data when you access or use our website deckworld.games (the "Service"), our card and board games, multiplayer platforms, leaderboards, and any related features or services. This Policy applies to all users, including visitors, registered account holders, and guest users.

By using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, you must discontinue use of the Service. This Policy is incorporated by reference into our Terms of Service and should be read in conjunction with our Cookie Policy, GDPR rights page, and any jurisdiction-specific supplements (CCPA, RU-152, LGPD).

2. What Data We Collect

2.1 Data You Provide Directly

Registration and account data — When you create an account, we collect your email address, password (stored in hashed form), and any optional profile information you choose to provide.
Profile information — Display name, avatar or profile image, preferred language, and any other preferences you configure in your account settings.
Payment and transaction data — If you make purchases (e.g., premium features, in-app content), we collect billing information, transaction identifiers, and purchase history as necessary to process payments and comply with financial regulations.
Comments and communications — Messages, feedback, support requests, and any other content you voluntarily submit through the Service or when contacting us.
Support data — Information you provide when seeking customer support, including account identifiers, descriptions of issues, and any attachments or logs you share.

2.2 Automatically Collected Data

Server and application logs — IP address, request timestamps, user agent, referrer, resource paths, and response codes. Logs are retained for a maximum of forty-five (45) days for operational and security purposes.
Game statistics and gameplay data — Moves, scores, game outcomes, match history, time spent in sessions, and related metrics used for leaderboards, rating calculations, matchmaking, and service improvement.
Cookies and similar technologies — Essential session cookies, local storage identifiers, and similar technologies for authentication, game state persistence, and preference storage. See our Cookie Policy for details.
Device and browser data — Device type, operating system, browser version, screen resolution, language settings, and approximate geographic region inferred from IP address where permitted by law.
Consent and preference data — Records of your consent choices, cookie preferences, and marketing opt-in/opt-out status, retained to demonstrate compliance with applicable data protection regulations.

3. How We Use Your Data

We process personal data for the following purposes:

Service delivery — To provide, operate, and maintain the Service; to facilitate matchmaking, multiplayer sessions, leaderboards, and rating systems; to authenticate users and manage accounts; and to process transactions.
Service improvement — To analyse aggregated, anonymised usage patterns; to identify bugs, performance issues, and areas for enhancement; and to develop new features based on user behaviour insights.
Personalization — To tailor content, recommendations, and game experiences based on your preferences, history, and settings (where applicable and with appropriate legal basis).
Marketing — To send promotional communications, newsletters, and product updates where you have given consent or where we have a legitimate interest, in compliance with applicable marketing laws.
Advertising — To display contextual and, where consent is obtained, personalized advertisements via our advertising partners. We do not sell your personal data to data brokers.
Security and abuse prevention — To detect, prevent, and respond to fraudulent activity, abuse, cheating, spam, and security threats; to enforce our Terms of Service; and to protect the integrity of the Service and our users.
Legal compliance — To comply with applicable laws, regulations, court orders, and government requests; to establish, exercise, or defend legal claims; and to fulfil our contractual and regulatory obligations.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions where the General Data Protection Regulation (GDPR) or equivalent laws apply, we process personal data on the following legal bases under Article 6(1) of the GDPR:

Legal Basis	Article	Purposes
Contract performance	Art. 6(1)(b)	Provision of the Service you requested: account management, matchmaking, game sessions, leaderboards, rating computation, transaction processing, and customer support.
Legitimate interest	Art. 6(1)(f)	Abuse prevention, fraud detection, rate limiting, security monitoring, aggregated analytics for service improvement, enforcement of Terms of Service, and establishment or defence of legal claims.
Consent	Art. 6(1)(a)	Optional marketing communications, non-essential cookies, personalized advertising where required by law, and any other processing for which we obtain your explicit consent.
Legal compliance	Art. 6(1)(c)	Compliance with legal obligations including tax, financial reporting, anti-money laundering, and responses to lawful requests from authorities.
Vital interests	Art. 6(1)(d)	Protection of your or another person's vital interests where necessary in an emergency (e.g., life-threatening situations).

5. Who We Share Data With

5.1 Service Providers

We engage third-party service providers who process personal data on our behalf under written data processing agreements. These providers assist with: Analytics, Infrastructure, Payment processing, Email delivery, Advertising.

5.2 Special Disclosures

We may disclose personal data (i) to law enforcement, regulators, or other authorities when required by law or to protect our legal rights; (ii) in connection with a merger, acquisition, or sale of assets; (iii) to our professional advisers; and (iv) where necessary to protect the vital interests of you or another person. We do not sell your personal data to third parties for their own marketing or data brokerage purposes.

6. International Data Transfers

We primarily store and process data on servers located within the European Union. Where we transfer personal data to countries outside the EEA that are not recognised as providing adequate protection, we implement appropriate safeguards. For users in the Russian Federation, see our RU-152 disclosure.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable law. Account data: for the duration of your account. Server logs: 45 days. Game statistics: for account duration. Consent records: up to 5 years. Payment records: 7 years. Support correspondence: up to 3 years. Guest data: up to 365 days from last activity.

8. Your Rights

Depending on your residence and applicable law, you may have rights of access, rectification, erasure, restriction of processing, data portability, object, withdraw consent, and lodge a complaint. To exercise these rights, contact us at the addresses in Section 10. See our GDPR rights page, CCPA disclosure, and LGPD disclosure.

9. Protection of Minors

The Service is intended for users aged eighteen (18) years or older. We do not knowingly collect personal data from individuals under the age of eighteen. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately.

10. Contact

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, you may contact us: DPO: dpo@deckworld.games, Privacy: privacy@deckworld.games, GDPR: gdpr@deckworld.games. Postal address: DeckWorld Ltd., 1 Stasikratous Street, Nicosia, 1065, Cyprus.