LegendGames Privacy Policy

1. Purpose and Scope

This Privacy Policy explains how LegendGames (“LegendGames”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal data when individuals interact with LegendGames and its services.

This Privacy Policy applies to all personal data processed by LegendGames in connection with:

• the LegendGames website,
• LegendGames Titan accounts,
• LegendGames Titan Lite accounts,
• LegendGames Dungeon accounts,
• LegendGames’ integrated payment and billing systems,
• the LegendGames Dungeon multiplayer environment,
• the Support Hub,
• contact and request forms,
• all official Discord servers operated or administered by LegendGames, and
• all support, communication, and contact channels, including email, Discord, messaging services (such as WhatsApp), and comparable communication tools.

This Privacy Policy applies regardless of whether interactions occur publicly or privately, automatically or manually, and whether communication is initiated by the user or by LegendGames.

Other LegendGames products or services may be governed by separate contractual agreements and privacy policies, which are provided transparently prior to entering into such agreements. Where such separate policies apply, they take precedence for the relevant product or service.

LegendGames is committed to processing personal data responsibly, lawfully, and transparently, in accordance with applicable data protection laws and recognized privacy and security principles.

2. Controller Information

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, LegendGames acts as the data controller for the processing activities described in this Privacy Policy, unless explicitly stated otherwise.

As the data controller, LegendGames determines the purposes and means of processing personal data across its platforms, services, and communication channels.

LegendGames is responsible for implementing appropriate technical and organizational measures to ensure that personal data is processed securely and in compliance with applicable privacy and data protection requirements.

Where LegendGames engages third-party service providers to process personal data on its behalf (for example, hosting providers, communication platforms, or support systems), such processing is subject to contractual safeguards designed to ensure confidentiality, security, and compliance with applicable law.

3. Categories of Personal Data We Collect

Depending on how you interact with LegendGames and through which services, platforms, or communication channels, we may collect and process different categories of personal data. LegendGames limits data collection to what is relevant, proportionate, and necessary for the purposes described in this Privacy Policy.

3.1 Identification and Contact Data

Personal data that identifies you or enables us to communicate with you, including:

• Full name or display name
• Username, account name, or player identifier
• Email address
• Postal address
• Telephone or mobile number
• Discord username, Discord ID, or similar platform identifiers
• Other contact details voluntarily provided through support or communication channels

3.2 Account, Support, and Communication Data

Information generated or provided in connection with accounts, support requests, moderation, or communication with LegendGames, including:

• Support tickets, inquiries, and reports
• Messages sent via email, contact forms, Discord, messaging services (such as WhatsApp), or other channels
• Attachments, screenshots, or files submitted voluntarily
• Records of communication, response history, and case resolution details

3.3 Transaction and Payment Data

Where purchases or payments are made, we may process billing and transaction information, such as payment method details, transaction dates, amounts, and payment status.

Payment processing is handled by authorized third-party payment providers. LegendGames does not store full payment card details where this can be avoided and relies on industry-standard security and compliance measures.

3.4 Technical, Device, and Log Data

Information automatically generated when accessing our services or platforms, including:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Date and time of access
• Log files, error reports, and security-related records

3.5 Usage and Gameplay Data

Information relating to how users interact with our games and services, including:

• Session duration and frequency
• In-game actions, statistics, and progression
• Preferences, configuration settings, and interaction patterns

3.6 Location Data

Approximate location data derived from IP addresses may be processed for security, localization, or compliance purposes. More precise location data is processed only where legally permitted and with explicit user consent.

3.7 Biometric Data (Exceptional Circumstances)

In limited and clearly defined circumstances, biometric data (such as facial recognition or fingerprint authentication) may be processed solely for security or authentication purposes.

Biometric data is processed only where legally permitted, with explicit and informed consent, and subject to heightened technical and organizational safeguards.

3.8 Moderation, Safety, and Compliance Data

To protect our community, services, and legal interests, we may process data related to:

• Reports of misconduct or policy violations
• Investigation and moderation records
• Enforcement actions, warnings, or restrictions
• Audit, compliance, and legal documentation

3.9 Voluntarily Provided Information

Any additional information you choose to provide to LegendGames voluntarily, such as feedback, survey responses, or optional profile details, will be processed in accordance with this Privacy Policy.

4. Sources of Personal Data

LegendGames collects personal data from multiple sources depending on how users interact with our services, platforms, and communication channels. All personal data is collected in a transparent manner and only where permitted by applicable data protection laws.

4.1 Data Provided Directly by You

We collect personal data that you voluntarily provide when you:

• create, manage, or use an account or service,
• participate in gameplay or community activities,
• contact us via the Support Hub, contact or request forms, email, Discord, or messaging services,
• communicate with moderators, administrators, or support staff, or
• submit reports, feedback, or other inquiries.

4.2 Data Collected Automatically

Certain personal data is collected automatically when you access or use our services. This includes technical data, usage data, log files, and security-related information generated by systems, servers, and applications.

4.3 Data Obtained from Third Parties

In limited circumstances, LegendGames may receive personal data from third parties, including:

• service providers acting on our behalf (such as hosting, payment, analytics, or communication providers),
• platform operators or community services where users interact with LegendGames through third-party environments (such as Discord), and
• public authorities or other entities where required by law.

4.4 Data Generated Through Use of Our Services

Some personal data is generated as a result of interactions with our services, including gameplay statistics, moderation or enforcement records, support case histories, and system-generated identifiers.

4.5 Combination of Data Sources

Personal data from different sources may be combined where necessary to operate services, provide support, ensure security, prevent abuse, and comply with legal obligations.

5. Legal Bases for Processing

LegendGames processes personal data only where there is a valid legal basis in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable. Depending on the context, one or more of the legal bases described below may apply.

5.1 Performance of a Contract

Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. This includes, in particular:

• creating and managing user accounts,
• providing gameplay, multiplayer, and community functionality,
• processing purchases and transactions, and
• delivering customer and technical support.

5.2 Legal Obligations

Processing is necessary to comply with applicable legal or regulatory obligations, including obligations related to:

• tax and accounting requirements,
• record-keeping and documentation duties,
• compliance with lawful requests from authorities, and
• other mandatory statutory obligations.

5.3 Legitimate Interests

Processing is necessary for the purposes of LegendGames’ legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms. Legitimate interests pursued by LegendGames may include:

• ensuring the security, stability, and integrity of our systems and services,
• preventing fraud, abuse, cheating, and unauthorized access,
• operating, improving, and optimizing our services and user experience,
• managing support, moderation, and enforcement activities, and
• protecting the rights, property, and safety of LegendGames, our users, and third parties.

5.4 Consent

Where required by applicable law, LegendGames relies on your consent as the legal basis for processing personal data. This may include, for example:

• the use of certain cookies or similar technologies,
• optional communications or notifications, or
• the processing of sensitive data, such as biometric information.

Where processing is based on consent, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

5.5 Vital Interests

In rare circumstances, processing may be necessary to protect the vital interests of you or another individual, such as preventing serious harm or addressing emergency situations.

6. How We Use Personal Data

LegendGames processes personal data solely for specific, explicit, and legitimate purposes. We do not process personal data in a manner that is incompatible with the purposes described in this Privacy Policy.

6.1 Service Provision and Account Management

To operate, maintain, and deliver our services, including:

• creating, administering, and managing user accounts,
• providing gameplay, multiplayer, and community functionality,
• processing purchases, subscriptions, and in-game transactions, and
• providing customer and technical support.

6.2 Communication and Support

To communicate with users and manage support interactions, including:

• responding to inquiries, requests, and reports,
• communicating via email, Discord, messaging services (such as WhatsApp), or other channels,
• providing service-related notifications and operational updates, and
• maintaining communication records for quality assurance and accountability.

6.3 Security, Safety, and Abuse Prevention

To protect our services, users, and community, including:

• monitoring for unauthorized access, fraud, cheating, or abuse,
• enforcing rules, policies, and contractual terms,
• investigating suspected violations or misconduct, and
• maintaining safe, fair, and secure environments.

6.4 Personalization and Service Improvement

To analyze usage patterns and improve our services, including:

• understanding how services are used,
• optimizing features, performance, and stability,
• developing new functionalities or services, and
• personalizing user experiences where legally permitted.

6.5 Compliance, Legal, and Business Purposes

To comply with legal obligations and protect legitimate business interests, including:

• meeting regulatory, tax, and accounting requirements,
• responding to lawful requests from authorities,
• enforcing agreements and resolving disputes, and
• maintaining records for audit and compliance purposes.

6.6 Consent-Based Processing

Where processing is based on your consent, personal data is used only for the specific purposes disclosed at the time consent is obtained. Consent may be withdrawn at any time, subject to applicable law.

7. Sharing and Disclosure of Personal Data

LegendGames does not sell personal data. Personal data is shared or disclosed only where necessary for legitimate purposes and in accordance with applicable data protection laws.

7.1 Service Providers and Processors

LegendGames may share personal data with trusted third-party service providers that process data on our behalf, such as hosting providers, payment processors, analytics services, and communication or support platforms.

Such service providers are contractually required to process personal data only in accordance with LegendGames’ instructions, maintain confidentiality, and implement appropriate security measures.

7.2 Legal and Regulatory Disclosure

Personal data may be disclosed where required to comply with applicable laws, regulations, court orders, or lawful requests from public authorities.

7.3 Protection of Rights, Safety, and Security

LegendGames may disclose personal data where necessary to protect the rights, property, or safety of LegendGames, users, or others, prevent abuse or fraud, or enforce policies and agreements.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of such a transaction, subject to appropriate safeguards.

7.5 With Your Direction or Consent

Personal data may be shared with third parties where you have expressly requested or consented to such disclosure.

8. International Data Transfers

LegendGames operates internationally and may process or store personal data in countries other than the country in which you reside.

Where personal data is transferred to countries that do not provide an equivalent level of data protection, LegendGames implements appropriate safeguards in accordance with applicable data protection laws.

8.1 Safeguards for International Transfers

Depending on the circumstances, such safeguards may include:

• Standard Contractual Clauses approved by relevant authorities,
• equivalent contractual or legal mechanisms recognized under applicable law, and
• additional technical and organizational measures to protect personal data.

8.2 Consistent Level of Protection

LegendGames takes reasonable steps to ensure that personal data transferred internationally is protected in a manner consistent with the principles set out in this Privacy Policy.

9. Automated Decision-Making and Profiling

LegendGames may use automated systems to process personal data in order to support the operation, security, and improvement of its services.

9.1 Purpose of Automated Processing

Automated processing may be used for purposes such as:

• fraud detection and prevention,
• security monitoring and abuse prevention,
• supporting moderation and enforcement activities, and
• personalizing certain features or content where legally permitted.

9.2 Safeguards and Human Oversight

Automated processing is subject to appropriate safeguards and oversight. Where automated decision-making produces legal or similarly significant effects, individuals have the right, where required by law, to:

• request information about the logic involved,
• express their point of view, and
• request human review of the decision.

9.3 No Fully Automated Decisions with Significant Effects Without Safeguards

LegendGames does not rely solely on automated decision-making to produce legal or similarly significant effects without an appropriate legal basis and safeguards in place.

10. Data Retention

LegendGames retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal and regulatory obligations, and to protect legitimate business interests.

Retention periods are determined based on the type of data, the purpose of processing, and applicable legal requirements. Once personal data is no longer required, it is securely deleted, anonymized, or otherwise rendered inaccessible.

10.1 Account and Identification Data

• Retention period: For the duration of an active account and up to 24 months after account deletion or last activity.
• Purpose: Account management, service provision, security, and dispute resolution.

10.2 Support and Communication Data

• Retention period: Up to 36 months after case closure, unless a longer period is required for legal or compliance reasons.
• Purpose: Support delivery, quality assurance, documentation, and legal defense.

10.3 Gameplay and Usage Data

• Retention period: Stored in identifiable form for up to 24 months; longer in aggregated or anonymized form.
• Purpose: Service operation, analytics, balancing, and improvement.

10.4 Technical, Log, and Security Data

• Retention period: Typically 6 to 12 months, extended where necessary for security investigations.
• Purpose: Security monitoring, fraud prevention, and system stability.

10.5 Transaction and Payment Data

• Retention period: Up to 10 years, where required by tax, accounting, or financial regulations.
• Purpose: Payment processing, audits, and legal compliance.

10.6 Moderation, Enforcement, and Compliance Data

• Retention period: Typically 36 to 60 months after case resolution, longer for serious violations or ongoing legal matters.
• Purpose: Community safety, policy enforcement, and legal defense.

10.7 Consent and Preference Records

• Retention period: For the duration of consent and up to 5 years after withdrawal, where required to demonstrate compliance.
• Purpose: Legal accountability and compliance.

10.8 Legal Hold and Exceptional Circumstances

In certain situations, such as ongoing investigations, disputes, or regulatory requirements, personal data may be retained beyond standard retention periods until the matter is resolved.

11. Data Security

LegendGames implements robust technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or destruction. Our security program is designed to reflect the state of the art, the sensitivity of the data processed, and the potential risks involved.

11.1 Technical Security Measures

• Encryption of data in transit using secure protocols (such as TLS/HTTPS)
• Encryption or hashing of sensitive data at rest where appropriate
• Role-based access controls and strict authentication requirements
• Multi-factor authentication for privileged systems where applicable
• Firewall, network segmentation, and intrusion detection systems
• Continuous monitoring and logging of system activity
• Regular vulnerability assessments, patch management, and updates

11.2 Organizational Security Measures

• Internal data protection and information security policies
• Confidentiality obligations for employees, contractors, and partners
• Regular security and privacy training for personnel
• Controlled onboarding and offboarding procedures
• Segregation of duties and access minimization principles

11.3 Incident Response and Breach Management

LegendGames maintains procedures to detect, assess, and respond to security incidents and personal data breaches. Where required by law, affected individuals and authorities will be notified in a timely manner.

11.4 Third-Party Security

Third-party service providers processing personal data on behalf of LegendGames are subject to contractual security obligations and are selected based on their ability to meet applicable security standards.

11.5 No Absolute Guarantee

While we strive to protect personal data using strong security measures, no system can be guaranteed to be completely secure. Users are encouraged to protect their account credentials and report suspected security issues promptly.

12. Cookies and Similar Technologies

LegendGames uses cookies and similar technologies to ensure the functionality, security, and performance of its websites and services.

Cookies are small text files stored on a user’s device that enable systems to recognize the device and retain certain information.

12.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core functionality, authentication, security, and session management.
• Functional Cookies: Enable enhanced features and remember preferences or settings.
• Security-Related Cookies: Used to detect abuse, prevent fraud, and protect user accounts and systems.

12.2 Managing Cookies

Users may control or disable cookies through browser or device settings. Disabling certain cookies may affect the availability or functionality of parts of our services.

13. Children’s Privacy

LegendGames’ services are intended for individuals aged 13 and older.

LegendGames does not knowingly collect or process personal data from children under the age of 13 without verifiable parental consent, where such consent is required by applicable law.

If we become aware that personal data of a child under the age of 13 has been collected without appropriate authorization, we will take reasonable steps to delete such data promptly.

14. Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws (including the General Data Protection Regulation (GDPR) where applicable), you may have certain rights with respect to your personal data.

• Right of Access: You may request confirmation of whether we process personal data about you and obtain a copy of such data.
• Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to legal, contractual, or regulatory retention obligations.
• Right to Restriction of Processing: You may request that the processing of your personal data be restricted in certain circumstances.
• Right to Object: You may object to the processing of your personal data where processing is based on legitimate interests.
• Right to Data Portability: You may request to receive personal data you have provided in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

LegendGames will respond to verified requests in accordance with applicable legal timeframes. Certain requests may be subject to limitations or exceptions as permitted by law.

15. Updates to This Privacy Policy

LegendGames may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, technical standards, business practices, or the scope of our services.

Material changes will be communicated through appropriate channels, such as publication on our website or other official communication methods. The effective date at the top of this Privacy Policy indicates when the current version became applicable.

Continued use of LegendGames services after an update constitutes acknowledgment of the revised Privacy Policy, where permitted by applicable law.

16. Contact and Complaints

For privacy-related requests, data subject rights inquiries, or complaints, you may use the following official channels:

• Privacy & Data Protection Contact Form
• LegendGames Support Hub

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact LegendGames through our designated contact and request channels.

LegendGames encourages individuals to raise privacy-related concerns directly so they can be addressed promptly and transparently.

Where applicable, you also have the right to lodge a complaint with a competent data protection supervisory authority, particularly in the country where you reside, work, or where you believe a data protection violation has occurred.