Privacy Policy

Introduction

Guild Arcade ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social gaming platform.

Information We Collect

Personal Information You Provide User Controlled

• Account Information: Name, email address, date of birth, province/territory, username
• Identity Verification: Government-issued ID, address verification documents (when required for regulatory compliance)
• Communication: Messages sent through our contact forms, customer support interactions
• Gaming Preferences: Game choices, responsible gaming settings, time limits
• Financial Information: Payment details for virtual currency purchases (processed securely by third-party providers)

Information Automatically Collected

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on site, game session duration, click patterns
• Gaming Analytics: Virtual currency transactions, game outcomes, responsible gaming tool usage
• Geolocation: Approximate location based on IP address for regulatory compliance and age verification
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (with your consent)

Information from Third Parties

• Identity Verification Services: Age and identity confirmation from authorized verification providers
• Payment Processors: Transaction confirmations and fraud prevention data
• Analytics Providers: Aggregated usage statistics and performance metrics

How We Use Your Information

Service Provision

• Create and manage your gaming account
• Provide access to social gaming features and virtual currency system
• Process virtual currency transactions and maintain account balances
• Enable social features like chat, leaderboards, and friend connections
• Customize your gaming experience based on preferences

Legal and Regulatory Compliance

• Verify age and identity in compliance with Canadian gaming regulations
• Report to regulatory authorities as required by law
• Implement responsible gaming measures and monitor usage patterns
• Prevent fraud, money laundering, and other illegal activities
• Maintain records for audit and compliance purposes

Platform Security and Safety

• Protect against security threats, fraud, and unauthorized access
• Monitor for suspicious activity and policy violations
• Implement and maintain cybersecurity measures
• Investigate and respond to security incidents

Communication and Support

• Respond to customer service inquiries and support requests
• Send important account notifications and security alerts
• Provide responsible gaming resources and intervention when needed
• Send marketing communications (with your explicit consent)

Analytics and Improvement

• Analyze platform usage to improve features and user experience
• Conduct research on responsible gaming practices
• Develop new games and features based on user preferences
• Optimize platform performance and technical infrastructure

Data Retention

Account Information

• Active Accounts: Retained while your account remains active
• Closed Accounts: Most data deleted within 30 days of account closure
• Regulatory Records: Some information retained for 7 years as required by Canadian gaming regulations

Transaction Records

• Virtual currency transactions retained for 7 years for regulatory compliance
• Payment information retained only as long as necessary for dispute resolution
• Responsible gaming data retained to support ongoing player protection

Communication Records

• Customer support communications retained for 3 years
• Marketing consent records retained until withdrawn
• Legal notices and important communications retained for 7 years

Your Privacy Rights

Access Rights

• Request a copy of all personal information we hold about you
• Receive information about how your data is being used
• Access your account settings and privacy preferences

Correction Rights

• Update or correct inaccurate personal information
• Request deletion of outdated or irrelevant information
• Modify your communication preferences

Deletion Rights

• Request deletion of your account and associated data
• Remove specific pieces of personal information (subject to legal requirements)
• Withdraw consent for data processing activities

Portability Rights

• Receive your personal data in a machine-readable format
• Transfer your data to another service provider

Objection Rights

• Object to certain types of data processing
• Opt out of marketing communications
• Restrict processing of your personal information

Exercising Your Rights

Data Security

Technical Safeguards

• Encryption: All data transmitted using TLS 1.3 encryption
• Storage Security: Data encrypted at rest using AES-256 encryption
• Access Controls: Role-based access with multi-factor authentication
• Network Security: Firewalls, intrusion detection, and monitoring systems
• Regular Updates: Security patches and system updates applied promptly

Organizational Measures

• Staff Training: Regular privacy and security training for all employees
• Background Checks: Security clearance for personnel with data access
• Data Minimization: Collecting only necessary information
• Incident Response: Procedures for security breach notification and response

Data Breach Notification

In the event of a data breach that poses a risk to your personal information, we will:

• Notify relevant authorities within 72 hours
• Inform affected users within 72 hours when possible
• Provide details about the breach and steps being taken
• Offer guidance on protective measures you can take