Privacy Policy

Data Controller: Eternel Games Ltd, a company registered in England and Wales (Company No. 17139657), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

Contact: [email protected]

Eternel Games Ltd is the operational entity responsible for processing your personal data. Platform intellectual property is owned by Eternel Games LLC (Wyoming, USA).

Note: No Data Protection Officer (DPO) is currently appointed. This may need to be reassessed if processing reaches a scale requiring one under UK GDPR Article 37.

We believe in transparency. Here is an explicit list of what we do not do with your data:

• We do not use advertising trackers of any kind
• We do not sell, rent, or share personal data with advertisers
• We do not build advertising or behavioral profiles
• We do not collect biometric data
• We do not perform automated decision-making or profiling beyond anti-fraud and anti-collusion
• We do not store payment card numbers (handled entirely by payment processors)

We do not rely on “consent” as a legal basis for core data processing. Consent is only used where specifically required (e.g., analytics cookies, marketing emails if introduced in the future).

• All data is stored on servers hosted by Hetzner in the European Union
• Security measures include: encryption at rest, encryption in transit (TLS), cryptographically hashed passwords, access controls, and regular security audits
• KYC documents are stored encrypted with access restricted to authorized personnel only, and deleted as required by AML regulations

Eternel Games Ltd is established in the United Kingdom. Your data is primarily stored on servers in the European Union (Hetzner, Germany). Some data is processed by service providers located in the United States.

• UK to EU: Transfers from the UK to the EU/EEA are covered by the UK adequacy regulations, which recognize the EU as providing an adequate level of data protection.
• UK to US: Transfers to US-based processors (such as Clerk and PostHog) are governed by the UK International Data Transfer Agreement (UK IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), as applicable. Each US processor is bound by a Data Processing Agreement (DPA) that includes these transfer mechanisms.
• EU users: Where EU GDPR applies to the processing of your data (by virtue of Article 3(2) — offering services to individuals in the EU), the same transfer safeguards apply under EU Standard Contractual Clauses.

After the retention period expires, data is permanently deleted or irreversibly anonymized.

As a data subject, you have the following rights:

• Access — Request a copy of all personal data we hold about you (response within 30 days)
• Rectification — Correct inaccurate or incomplete data
• Erasure — Request deletion of your data (subject to legal retention requirements — e.g., AML-required KYC data cannot be deleted before the mandatory retention period)
• Restriction — Request that we stop processing your data in certain circumstances
• Portability — Receive your data in a structured, machine-readable format
• Object — Object to processing based on legitimate interest
• Withdraw consent — Where consent is the legal basis (currently limited to analytics cookies and marketing, if applicable)
• Complaint — Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk. If you are located in the EU, you may also contact your local EU supervisory authority.

To exercise your rights: Email [email protected] with subject “Data Rights Request.” We will respond within 30 days (extendable by 60 days for complex requests, with notification).

The following third parties process data on behalf of Eternel Games Ltd:

All processors are bound by Data Processing Agreements (DPAs) compliant with UK GDPR. Transfers to US-based processors are covered by UK IDTAs or the UK Addendum to EU SCCs. We do not share data with advertisers, data brokers, or social media platforms.

We use strictly necessary cookies for authentication/session security and analytics cookies related to PostHog.

Where required by law (including under UK PECR and EU ePrivacy Directive), analytics cookies are enabled only after consent. We do not use advertising cookies.

For a detailed list of all cookies, their purposes, and how to manage your preferences, see our Cookie Policy.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

• We do not sell your personal information to third parties.
• We do not share your personal information for cross-context behavioral advertising.
• You have the right to know what personal information we collect, request deletion, and opt out of any future sale (though we do not currently sell data).
• We will not discriminate against you for exercising your CCPA/CPRA rights.

The categories of personal information we collect are described in Section 2 above. To exercise your California privacy rights, email [email protected] with subject “California Privacy Request.”

Free, no-money gameplay may be available to users under 18 where lawful. Paid features (including deposits and withdrawals) are restricted to users 18+.

If we discover a minor using paid features, we may disable paid access and apply account restrictions required for compliance.

If you are a parent or guardian and believe your child has created an account, please contact us immediately at [email protected].

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or in-platform notification at least 14 days in advance. The “Last Updated” date at the top of this policy always reflects the current version.

Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions: [email protected]

For general support: [email protected]

Eternel Games Ltd, 128 City Road, London, EC1V 2NX, United Kingdom