Privacy Policy

Introduction

This Privacy Policy explains how GGArena collects, uses, stores and protects your personal data when you visit this website or use our services. The data controller is Vipgame UAB, company code 306461288, Savanorių pr. 15A, Vilnius 03116, Lithuania, info@ggarena.com.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

What data do we collect?

• Account data: name, email address, phone number, password (stored only as a cryptographic hash), preferred language and venue.
• Order and booking data: services ordered, booking date and time, venue, order number, amounts, discount and gift card codes, billing name, country and postcode, order notes.
• Payment data: the payment status, amount and reference returned to us by our payment provider. We do not receive or store your full card number, expiry date or security code.
• Gaming account data: where you use our in-venue gaming system, the linked account username and identifier.
• Communications: messages you send us through contact forms, email or messaging apps, and newsletter subscription status.
• Technical data: IP address, browser and device type, pages viewed and referring page, collected through cookies and server logs.

How do we collect your data?

Most data is provided directly by you when you register an account, place an order or booking, enter a tournament, buy a gift card, subscribe to our newsletter or contact us. Technical data is collected automatically through cookies and server logs. We also receive order status information from our payment provider.

How will we use your data?

We use your data for the following purposes and legal bases:

• Providing the services you ordered - processing bookings, orders, tournament entries and gift cards, and giving you access at the venue. Legal basis: performance of a contract.
• Payments and fraud prevention - processing payments, refunds and chargebacks. Legal basis: performance of a contract and legitimate interest.
• Service communications - order confirmations, booking reminders, cancellations and important service notices. Legal basis: performance of a contract.
• Accounting and tax - issuing and retaining invoices and accounting records. Legal basis: legal obligation.
• Marketing - newsletters and offers, only where you have given consent. Legal basis: consent.
• Website analytics and improvement - understanding how the site is used. Legal basis: consent, given through the cookie banner.

How do we store your data?

Your data is stored on servers located in the European Union. We apply technical and organisational measures including encrypted connections (HTTPS), hashed passwords, access control limited to authorised staff, and regular backups.

We keep account data for as long as your account is active and for 2 years after your last activity. Order, booking and accounting records are kept for 10 years as required by Lithuanian accounting and tax law. Newsletter data is kept until you unsubscribe. Contact form messages are kept for 1 year. Server logs are kept for 6 months.

We share data only with processors who help us run the service - our hosting provider, our payment provider Paysera LT, UAB, our in-venue gaming system provider, our email delivery provider and our analytics provider - each bound by a data processing agreement. We do not sell your personal data.

Marketing

We send marketing emails only if you have subscribed. Every marketing email contains an unsubscribe link, and you can withdraw consent at any time in your account settings or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and does not stop service emails relating to your orders.

What are your data protection rights?

Under the GDPR you have the right to:

• Access - request a copy of the personal data we hold about you.
• Rectification - ask us to correct data you believe is inaccurate or incomplete.
• Erasure - ask us to delete your data, where we are not required to keep it by law.
• Restriction - ask us to restrict processing of your data.
• Object - object to processing carried out on the basis of our legitimate interests.
• Portability - ask us to transfer your data to you or another organisation in a structured, machine-readable format.
• Withdraw consent - at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@ggarena.com. We will respond within one month of receiving your request.

Cookies

Cookies are small text files placed on your device that record information about your browsing. For more detail, see allaboutcookies.org.

How do we use cookies?

We use cookies to keep you signed in, remember your chosen venue and language, keep your cart and checkout session, protect forms against cross-site request forgery, and - with your consent - measure how the website is used.

What types of cookies do we use?

• Essential - required for the site to work: session, authentication, CSRF protection, selected venue and language. These cannot be switched off.
• Analytics - help us understand how visitors use the site so we can improve it. Set only with your consent.
• Marketing - used to measure the performance of campaigns. Set only with your consent.

How to manage cookies

You can accept or decline non-essential cookies in the cookie banner shown on your first visit, and change your choice at any time in your browser settings. Blocking essential cookies will prevent parts of the website from working.

Privacy policies of other websites

This website contains links to other websites, including our payment provider and social media pages. This Privacy Policy applies only to this website, so if you follow a link elsewhere you should read that site's own privacy policy.

Changes to our privacy policy

We keep this Privacy Policy under review and publish any updates on this page. The date of the last update is shown at the bottom of this page.

How to contact us

If you have questions about this Privacy Policy, the data we hold about you, or you wish to exercise any of your rights, contact us at info@ggarena.com or write to Vipgame UAB, Savanorių pr. 15A, Vilnius 03116, Lithuania.

How to contact the appropriate authority

If you wish to report a complaint, or if you feel we have not addressed your concern satisfactorily, you may contact the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, +370 5 271 2804, vdai.lrv.lt.