MagiCavern Privacy Policy
1. Introduction
- This Privacy Policy explains how NextByte Market UAB (“Company”, “we”, “our”, “us”) collects, uses, and protects personal data of users (“User”, “you”) when accessing and using the MagiCavern Game.
- We comply with the General Data Protection Regulation (GDPR) and applicable Lithuanian and EU legislation.
2. Data Controller
- NextByte Market UAB
- Address: Bausko gatve 7-49E, Venta, LT-85327 Akmenes r.
- Registration code: 307071750
- Email: support@magicavern.com
3. Data We Collect
- Account Data: email address, username, password (hashed).
- Transaction Data: purchase history, payment confirmations (via third-party payment processors).
- Gameplay Data: progress, achievements, in-game currency balance.
- Technical Data: IP address, device type, browser version, cookies.
4. Purpose of Processing
- Account creation and verification.
- Delivering Virtual Items after purchase.
- Ensuring security and preventing fraud.
- Providing customer support and handling refund requests.
- Legal obligations (e.g., tax and accounting records).
5. Legal Basis
- Contract performance (Art. 6(1)(b) GDPR).
- Legal obligation (Art. 6(1)(c) GDPR).
- Legitimate interest (Art. 6(1)(f) GDPR).
- Consent (Art. 6(1)(a) GDPR) for optional marketing and cookies.
6. Data Retention
- Account data: retained while your account is active, and up to 3 years after closure.
- Transaction data: retained for 10 years under Lithuanian tax law.
- Cookies: see Cookie Policy.
7. Data Sharing
- With payment providers (for purchases).
- With IT service providers (hosting, analytics).
- With authorities, if legally required.
- We never sell personal data.
8. User Rights (GDPR)
- Access, rectification, deletion, restriction, objection, portability, and consent withdrawal.
- Requests can be made via support@magicavern.com.
9. International Transfers
- If data is transferred outside the EU/EEA, we ensure safeguards (e.g., Standard Contractual Clauses).
10. Children’s Privacy
- The Game is not intended for children under 13. If we discover that we have collected data from minors without parental consent, we will delete it.