1. INTRODUCTION
WELCOME TO WAR OF LYANX ("WE", "US", "OUR"). WE ARE COMMITTED TO PROTECTING YOUR PERSONAL DATA AND RESPECTING YOUR PRIVACY. THIS PRIVACY POLICY EXPLAINS HOW WE COLLECT, USE, STORE AND PROTECT YOUR INFORMATION WHEN YOU USE OUR WEBSITE AND SERVICES.
BY USING OUR WEBSITE, YOU AGREE TO THE COLLECTION AND USE OF INFORMATION AS DESCRIBED IN THIS POLICY.
2. DATA CONTROLLER
THE DATA CONTROLLER RESPONSIBLE FOR YOUR PERSONAL DATA IS WAR OF LYANX. FOR ANY QUESTIONS REGARDING YOUR DATA, PLEASE CONTACT US AT THE EMAIL ADDRESS PROVIDED ON OUR WEBSITE.
3. DATA WE COLLECT
WE COLLECT THE FOLLOWING CATEGORIES OF PERSONAL DATA:
- ACCOUNT DATA: USERNAME, EMAIL ADDRESS, HASHED PASSWORD (WE NEVER STORE YOUR PASSWORD IN PLAIN TEXT)
- PROFILE DATA: FAVORITE KINGDOM SELECTION, SUBSCRIPTION TIER, EQUIPMENT STATS PER UNIT TYPE, EQUIPPED WEAPON SKINS, EQUIPPED BADGE, EQUIPPED POWER, UNLOCKED WEAPONS AND BADGES
- ACTIVITY DATA: BETTING HISTORY, COIN BALANCE, DAILY BONUS CLAIMS, FAVORITE KINGDOM BONUS HISTORY, MATCH PLACEMENT HISTORY OF YOUR FAVORITE KINGDOM
- PAYMENT DATA: PROCESSED SECURELY BY STRIPE. WE STORE ONLY YOUR STRIPE CUSTOMER ID AND SUBSCRIPTION ID. WE NEVER SEE OR STORE YOUR FULL CARD DETAILS
- TECHNICAL DATA: IP ADDRESS, BROWSER TYPE, DEVICE INFORMATION, COOKIES (SEE OUR COOKIE POLICY)
4. HOW WE USE YOUR DATA
WE USE YOUR PERSONAL DATA FOR THE FOLLOWING PURPOSES:
- TO CREATE AND MANAGE YOUR ACCOUNT
- TO PROCESS YOUR BETS AND MANAGE YOUR COIN BALANCE
- TO PROCESS SUBSCRIPTION PAYMENTS THROUGH STRIPE
- TO DISPLAY LEADERBOARDS AND RANKINGS
- TO PROVIDE DAILY COIN BONUSES TO SUBSCRIBERS
- TO IMPROVE OUR WEBSITE AND USER EXPERIENCE
- TO COMPLY WITH LEGAL OBLIGATIONS
5. LEGAL BASIS FOR PROCESSING (GDPR)
UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR), WE PROCESS YOUR DATA BASED ON:
- CONTRACT: PROCESSING NECESSARY TO PROVIDE OUR SERVICES (ACCOUNT, BETTING, SUBSCRIPTIONS)
- CONSENT: FOR COOKIES AND OPTIONAL DATA PROCESSING
- LEGITIMATE INTEREST: TO IMPROVE OUR SERVICES AND ENSURE SECURITY
- LEGAL OBLIGATION: TO COMPLY WITH APPLICABLE LAWS AND REGULATIONS
6. DATA SHARING
WE DO NOT SELL YOUR PERSONAL DATA. WE MAY SHARE DATA WITH:
- STRIPE: FOR PAYMENT PROCESSING (SUBJECT TO STRIPE'S PRIVACY POLICY)
- HOSTING PROVIDER: OUR SERVER INFRASTRUCTURE PROVIDER (OVH) FOR WEBSITE HOSTING
- PUBLIC DISPLAY: YOUR USERNAME, FAVORITE KINGDOM, SUBSCRIPTION BADGE AND BETTING ACTIVITY MAY BE VISIBLE TO OTHER USERS ON LEADERBOARDS
7. DATA RETENTION
WE RETAIN YOUR PERSONAL DATA FOR AS LONG AS YOUR ACCOUNT IS ACTIVE. IF YOU REQUEST ACCOUNT DELETION, WE WILL DELETE YOUR PERSONAL DATA WITHIN 30 DAYS, EXCEPT WHERE WE ARE REQUIRED TO RETAIN IT FOR LEGAL PURPOSES.
PAYMENT RECORDS MAY BE RETAINED FOR UP TO 10 YEARS TO COMPLY WITH FINANCIAL REGULATIONS.
8. YOUR RIGHTS (GDPR / EU RESIDENTS)
UNDER THE GDPR, YOU HAVE THE FOLLOWING RIGHTS:
- ACCESS: REQUEST A COPY OF YOUR PERSONAL DATA
- RECTIFICATION: REQUEST CORRECTION OF INACCURATE DATA
- ERASURE: REQUEST DELETION OF YOUR DATA ("RIGHT TO BE FORGOTTEN")
- RESTRICTION: REQUEST LIMITATION OF PROCESSING
- PORTABILITY: RECEIVE YOUR DATA IN A STRUCTURED, MACHINE-READABLE FORMAT
- OBJECTION: OBJECT TO PROCESSING BASED ON LEGITIMATE INTEREST
- WITHDRAW CONSENT: WITHDRAW YOUR CONSENT AT ANY TIME
TO EXERCISE ANY OF THESE RIGHTS, PLEASE CONTACT US. WE WILL RESPOND WITHIN 30 DAYS.
YOU ALSO HAVE THE RIGHT TO LODGE A COMPLAINT WITH YOUR LOCAL DATA PROTECTION AUTHORITY (E.G., CNIL IN FRANCE).
9. DATA SECURITY
WE IMPLEMENT APPROPRIATE TECHNICAL AND ORGANIZATIONAL MEASURES TO PROTECT YOUR DATA, INCLUDING:
- PASSWORDS ARE HASHED USING BCRYPT
- SSL/TLS ENCRYPTION FOR ALL DATA IN TRANSIT
- CSRF PROTECTION ON ALL FORMS
- PAYMENT DATA HANDLED EXCLUSIVELY BY STRIPE (PCI-DSS COMPLIANT)
- ACCESS TO PERSONAL DATA IS RESTRICTED TO AUTHORIZED PERSONNEL ONLY
10. INTERNATIONAL TRANSFERS
YOUR DATA IS STORED ON SERVERS LOCATED IN THE EUROPEAN UNION (OVH, FRANCE). STRIPE MAY PROCESS PAYMENT DATA OUTSIDE THE EU, SUBJECT TO APPROPRIATE SAFEGUARDS (STANDARD CONTRACTUAL CLAUSES).
11. CHILDREN'S PRIVACY
OUR SERVICES ARE NOT DIRECTED TO CHILDREN UNDER 16. WE DO NOT KNOWINGLY COLLECT DATA FROM CHILDREN. IF YOU BELIEVE A CHILD HAS PROVIDED US WITH PERSONAL DATA, PLEASE CONTACT US SO WE CAN DELETE IT.
12. CHANGES TO THIS POLICY
WE MAY UPDATE THIS PRIVACY POLICY FROM TIME TO TIME. ANY CHANGES WILL BE POSTED ON THIS PAGE WITH AN UPDATED "LAST UPDATED" DATE. WE ENCOURAGE YOU TO REVIEW THIS POLICY PERIODICALLY.