Privacy policy

1. Controller

FaceOff B.V., Amsterdam, Netherlands. [email protected].

2. What we collect

• Account: email, username, password hash, country, date of birth confirmation, gamertags you add.
• Play data: matches, results, ratings, tournament entries, dispute messages and evidence links.
• Financial: wallet ledger (deposits, withdrawals, escrow). Card/bank details are held by our payment provider, not us.
• Technical: IP address, device/browser, timestamps, error logs — for security, anti-fraud and region matching.
• Identity documents when KYC is required by law or above payout thresholds.

3. Why (legal bases)

• To provide the service — matchmaking, escrow, payouts, disputes (contract).
• Fraud prevention, cheat detection and dispute evidence (legitimate interest).
• Anti-money-laundering and tax obligations (legal obligation).
• Marketing emails (consent — opt out any time).

4. Sharing

Our payment service provider, KYC provider, email provider, hosting (EU region), analytics. Your username, rating and match history are public on leaderboards and profiles. Your opponent sees the gamertags you added. We never sell personal data.

5. Retention

Account data for as long as you have an account plus 12 months. Financial records 7 years (statutory retention). Dispute evidence 24 months. Logs 90 days.

6. Your rights

Access, correction, deletion, portability, restriction, objection, and the right to withdraw consent. Email [email protected]. You can also complain to your local data-protection authority (for the Netherlands: Autoriteit Persoonsgegevens).

7. Cookies

We use a strictly necessary session cookie (login) and, with consent, analytics cookies. No third-party ad cookies.

8. Security

Passwords are hashed (bcrypt), traffic is TLS-only, wallets are ledger-based and auditable, and admin actions are logged.

9. International transfers

Data is stored in the EU. Where a provider processes data outside the EU we rely on Standard Contractual Clauses.