1. Data Controller
X-Playce SAS, registered at 14 Rue de Rivoli, 75001 Paris, France, is the data controller responsible for your personal data. For any privacy-related request, you can contact our Data Protection Officer (DPO) at dpo@xplayce.com.
2. Information We Collect
Account & Identity Data: name, email address, date of birth, government ID (for KYC).
Transaction & Wallet Data: crypto wallet addresses, trading history, deposit/withdrawal records.
Technical Data: IP address, device info, browser type, and cookies.
Usage Data: interactions with our platform (NFT purchases, tournaments, gaming).
3. How We Use Your Data
- Provide, maintain and improve X-Playce services (trading, wallet, gaming).
- Process transactions, prevent fraud and comply with legal obligations (AML/KYC).
- Send service notifications, security alerts and respond to support requests.
- Personalize your experience and display relevant content (e.g., NFT recommendations).
- Analyze platform performance and fight against unauthorized access.
4. Legal Basis (GDPR / CCPA)
We process your data based on: (i) contract performance (user agreement), (ii) compliance with legal obligations, (iii) legitimate interests (security, fraud prevention), and (iv) your explicit consent (marketing cookies). California residents have the right to opt-out of “sales” of personal information — we do not sell your data.
5. Data Retention & Security
We retain your personal information for as long as your account is active or as necessary to provide services, comply with legal obligations (5–7 years for transaction records), resolve disputes and enforce agreements. We implement AES-256 encryption, cold storage for crypto assets, and regular third-party audits.
6. Your Rights
- Access & Portability: Request a copy of your data.
- Rectification: Correct inaccurate information.
- Erasure (right to be forgotten): Request deletion where legally permissible.
- Restrict or object: Limit certain processing (e.g., direct marketing).
- Withdraw consent: Anytime for cookie-based tracking.
To exercise your rights, please contact privacy@xplayce.com. We will respond within 30 days.
7. Cookies & Tracking
We use essential, functional, and analytical cookies to improve navigation and security. You can manage cookie preferences via our cookie settings. Third-party cookies (e.g., for analytics) are only placed with your consent.
8. International Transfers
Your information may be transferred to and processed in countries outside the EEA (including UAE, Singapore). We ensure adequate safeguards (Standard Contractual Clauses) and data protection agreements to maintain EU/UK data protection standards.
Last amendment: This Privacy Notice is reviewed regularly. We will notify you of material changes via email or platform notice.
