1. Introduction
This Privacy Policy explains how Games Market ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website, services, or otherwise interact with us. We are committed to handling your information transparently and lawfully under the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA") where applicable.
2. Data Controller
Unless stated otherwise, the data controller for the purposes of GDPR is Games Market. Contact: privacy@games-market.com.
3. Information We Collect
3.1 Information you provide directly
- Account data: username, email address, hashed password, optional profile details.
- Order data: products purchased, delivery email, optional player ID, payment method, transaction hashes/references, billing notes.
- Seller data (if you sell): listings, payout method details, identity verification documents (where requested), tax information.
- Support communications: the content of support tickets, contact-form submissions, and any attachments.
3.2 Information collected automatically
- Device & log data: IP address, browser, operating system, referrer URL, pages visited, timestamps, and basic interaction events.
- Cookies & similar technologies: see our Cookie Policy.
- Fraud-prevention signals: device fingerprint, geolocation derived from IP, payment risk indicators.
3.3 Information from third parties
- Payment-processor confirmations (transaction status, masked PAN, blockchain transaction hash).
- KYC / identity-verification providers, where applicable.
- Anti-fraud and sanctions-screening services.
4. How We Use Your Data
We use your personal data only when we have a lawful basis to do so:
- To perform the contract: create and manage your account, process orders, deliver products, handle refunds, run seller payouts.
- Legitimate interests: prevent fraud, secure the Platform, debug, improve features, send service emails, defend legal claims.
- Legal obligations: tax records, anti-money-laundering ("AML") compliance, response to lawful authority requests.
- Consent: sending marketing emails, deploying non-essential cookies, using your testimonial publicly. You may withdraw consent at any time without affecting prior processing.
5. Who We Share Data With
We do not sell your personal data to anyone. We share it only with the following categories of recipient, on a strict need-to-know basis:
- Service providers: hosting, email delivery, payment processing, fraud screening, analytics, customer support tooling. These vendors act as data processors and are contractually bound to confidentiality and GDPR-aligned safeguards.
- Sellers (limited): when you purchase from a third-party seller, the seller receives only the data they need to fulfil the order (typically: order ID, product, delivery email or player ID — never your billing information or full identity).
- Legal & regulatory bodies: tax authorities, law-enforcement, courts, and regulators where compelled by law or to protect our legal rights.
- Successors in interest: if Games Market is acquired or merged, your data may transfer to the acquiring entity, subject to this Privacy Policy or a substantially equivalent successor.
6. How Long We Keep Your Data
- Account data: as long as your account exists, plus 24 months thereafter for fraud-prevention.
- Order & invoice data: 10 years (statutory bookkeeping retention in most EU member states).
- Support tickets: 24 months after closure.
- Server access logs: 12 months by default (extended only for active investigations).
- Marketing preferences: until you opt out.
After the relevant retention period, we either delete the data or irreversibly anonymise it for statistical purposes.
7. Security
We use a defence-in-depth approach to protect your data:
- HTTPS / TLS in transit and AES-256 at rest for sensitive fields;
- Hashed-and-salted passwords (bcrypt) — we never store passwords in plaintext;
- Two-factor authentication available on all accounts;
- Role-based access control internally; employees access personal data only when strictly necessary;
- Regular vulnerability assessments and security training.
No system can guarantee absolute security. If we ever experience a breach affecting your data, we will notify you and the relevant authorities within 72 hours, in line with GDPR.
8. Your Rights
Subject to applicable law, you have the following rights over your personal data:
- Access: obtain a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data, subject to legal retention requirements.
- Restriction & objection: ask us to limit certain processing, or object to processing based on legitimate interests.
- Portability: receive your data in a structured, machine-readable format.
- Withdraw consent: opt out of marketing or non-essential cookies at any time.
- Lodge a complaint: with your local data-protection authority.
To exercise any of these rights, contact privacy@games-market.com or use the in-app data-request form. We respond within 30 days. We may need to verify your identity before fulfilling requests.
9. Children
The Services are not intended for, and not directed at, individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected such data, we will delete it promptly. Parents or guardians who believe their child has provided us with data may contact us to request deletion.
10. International Transfers
We may transfer your data to recipients outside the European Economic Area ("EEA"). When we do, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or your explicit consent. Where transfers occur, we apply additional technical safeguards (encryption, pseudonymisation) where appropriate.
11. Cookies
We use first-party cookies for essential functions (authentication, cart, CSRF protection) and limited third-party cookies for analytics. See the Cookie Policy for details and your choices.
12. California Residents (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete, and the right to opt out of any sale or sharing of personal information. As stated above, we do not sell your personal data. To exercise CCPA rights, email privacy@games-market.com with the subject line "CCPA Request".
13. Changes to This Policy
We may amend this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. We will notify you of material changes by email or a prominent banner on the Platform.
14. Contact
- Privacy enquiries: privacy@games-market.com
- General support: /contact.php
- Postal address: provided on request to privacy@games-market.com
© 2026 Games Market. Your privacy is non-negotiable.