Data Controller Information
Cosmic Arcade Hub ("we", "us", "our") is the data controller responsible for your personal information.
Business Email: [email protected]
Data Protection Officer (DPO)
Our Data Protection Officer can be contacted at:
Email: [email protected]
Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
- Consent: For marketing communications, cookie usage, and optional data collection (you may withdraw consent at any time)
- Performance of a contract: To provide gaming services you have requested (account creation, game access, payment processing)
- Legal obligation: To comply with tax, accounting, and other legal requirements
- Legitimate interests: To operate and improve our platform, prevent fraud, ensure security (our interests do not override your privacy rights)
California Consumer Privacy Act (CCPA/CPRA)
For California residents, this section supplements our general privacy practices to comply with the CCPA/CPRA:
- Categories of personal information collected: Identifiers, commercial information, internet activity, geolocation data, audio/visual data, inferences about your preferences
- Sale of personal information: We do not sell your personal information to third parties for monetary consideration
- Right to opt-out: You may submit an opt-out request by emailing [email protected]
- Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights
Information We Collect
Personal Information
When you create an account or use our services, we may collect the following personal information:
- Name and email address
- Username and password
- Date of birth (for age verification)
- Payment information (processed through secure third-party services)
- Profile information and preferences
Technical Information
We automatically collect certain technical information when you visit our platform:
- IP address and device information
- Browser type and operating system
- Game play statistics and preferences
- Cookies and similar tracking technologies (see Cookie Policy for details)
- Usage patterns and interaction data
Data Retention Periods
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:
- Account information: Retained for the duration of your account plus 2 years after account closure (to prevent fraud)
- Payment information: Retained for 7 years (to comply with tax/accounting laws)
- Game play data: Retained for 1 year after last activity (for service improvement)
- Marketing data: Retained until you opt-out or for 3 years after last interaction
- Customer support records: Retained for 2 years after resolution
- Legal compliance data: Retained for the period required by applicable laws
How We Use Your Information
We use your information to:
- Provide and maintain our gaming platform
- Personalize your gaming experience
- Process transactions and send purchase confirmations
- Communicate with you about our services
- Improve our games and develop new features
- Ensure platform security and prevent fraud
- Comply with legal obligations
Data Sharing and Disclosure
We may share your information in the following circumstances:
- With game developers: To provide you with access to games and improve game experiences
- With payment processors: To process your purchases securely
- With service providers: Who help us operate our platform (hosting, analytics, customer support)
- For legal reasons: When required by law or to protect our rights
- Business transfers: In connection with mergers, acquisitions, or asset sales
Data Security
We implement industry-standard security measures to protect your information:
- SSL encryption for data transmission
- Secure servers and hosting environments
- Regular security audits and updates
- Access controls and authentication systems
- Employee training on data protection
User Rights and Choices (GDPR/CCPA)
For EU/EEA Residents (GDPR Rights)
You have the following rights under the GDPR:
- Right to access: Request a copy of your personal information and details of how we process it
- Right to rectification: Update or correct inaccurate or incomplete personal information
- Right to erasure: Request deletion of your personal information ("right to be forgotten")
- Right to restriction of processing: Limit how we process your personal information
- Right to data portability: Request a copy of your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: Withdraw any consent you have given at any time (without affecting prior processing)
- Right to lodge a complaint: File a complaint with your local data protection authority
For California Residents (CCPA/CPRA Rights)
You have the following rights under the CCPA/CPRA:
- Right to know: Request information about what personal data we collect, use, disclose, or sell
- Right to delete: Request deletion of your personal information (subject to certain exceptions)
- Right to opt-out: Opt out of the sale of your personal information (we do not sell your data)
- Right to correct: Request correction of inaccurate personal information
- Right to non-discrimination: Receive the same service and pricing even if you exercise your CCPA rights
To exercise any of these rights, please submit a request to: [email protected]. We will respond to valid requests within 30 days (15 days for CCPA requests).
Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and login status (essential cookies)
- Analyze platform usage and performance (analytics cookies)
- Personalize content and recommendations (functionality cookies)
- Provide relevant advertisements (marketing cookies)
You can control cookie settings through our cookie consent banner or your browser preferences. You may withdraw your consent to non-essential cookies at any time.
For more details on our cookie usage, please see our Cookie Policy.
Children's Privacy
Joxdo is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it. For users in the EU under 16, we require verifiable parental consent before collecting any personal data.
International Data Transfers
Your information may be transferred to and processed in countries outside the EU/EEA or California. We ensure appropriate safeguards are in place, including:
- EU Standard Contractual Clauses (SCCs) for transfers to third countries
- Compliance with the EU-US Privacy Shield (where applicable)
- Binding corporate rules for internal transfers within our group
Changes to This Policy
We may update this privacy policy from time to time. For material changes affecting EU users, we will provide at least 30 days' notice before the changes take effect. We will notify you by email, in-app notification, or prominent notice on our website.
Contact Us
If you have questions about this privacy policy or how we handle your personal information, please contact us:
- General Privacy Inquiries: [email protected]
- Data Protection Officer: [email protected]
- CCPA Requests: [email protected]
- Contact Form: Contact Page
Form Privacy Notice (For All Data Collection Forms)