Review how Cosmic Arcade Hub collects, uses, and protects information when you visit and play on our site.

Effective Date: January 1, 2026

1. Introduction

Welcome to Cosmic Arcade Hub ("we", "our", "us"). Your privacy is important to us, and this Privacy Policy outlines how we collect, use, and protect your information when you use our gaming platform and services (the "Services"). This policy applies to all users, including those in European Economic Area (EEA) and California (CCPA/CPRA). For more details on our cookie practices, please review our Cookie Policy.

Data Controller: Cosmic Arcade Hub (registered address: 123 Gaming Street, Digital City, Tech State 12345; company registration number: 123456789) is the data controller responsible for your personal data.

2. Information We Collect

Personal Information: When you register an account, we collect your name, email address, date of birth, and other information you provide voluntarily. For EU users (GDPR), we collect only what is necessary for provision of our Services.

Usage Data: We automatically collect information about your interactions with our platform, including game preferences, playing habits, and technical data (IP address, device ID, session data).

Device Information: We collect information about the device you use to access our services, including IP address, browser type, operating system, and geolocation data (with your explicit consent).

Cookie Data: We use cookies and similar tracking technologies to enhance your experience. You can manage your cookie preferences through the cookie consent banner at the bottom of this page.

3. Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account Data: Retained for the duration of your account plus 2 years after account closure (to comply with legal obligations).
  • Usage Data: Retained for 18 months from the date of collection (for analytics and service improvement).
  • Payment Data: Retained for 7 years (to comply with tax and accounting regulations).
  • Marketing Data: Retained until you opt out of marketing communications, plus 6 months to confirm opt-out.

After the retention period, your data will be anonymized or securely deleted in accordance with GDPR requirements.

4. Legal Basis for Processing (GDPR)

For users in EEA, we process your personal data based on:

  • Your consent (e.g., for marketing communications, cookies) - you may withdraw consent at any time via our cookie consent tool
  • Performance of a contract (e.g., providing gaming services)
  • Compliance with legal obligations
  • Legitimate interests (e.g., improving our Services, fraud prevention)

5. How We Use Your Information

To Provide Services: We use your information to deliver and improve our gaming platform, personalize your experience, and provide customer support.

For Communication: We may use your email address to send important updates, security alerts, and marketing communications (with your explicit consent, which you can withdraw at any time).

For Analytics: We analyze usage data to understand user behavior and improve our services. This includes cookie-based analytics, which you can opt out of via the cookie consent tool.

6. User Rights (GDPR/CCPA)

For EU Users (GDPR):

  • Right to access your personal data (request a copy of the data we hold about you)
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") - request deletion of your data where we no longer need it
  • Right to restriction of processing - request us to stop processing your data temporarily
  • Right to data portability - receive your data in a machine-readable format to transfer to another provider
  • Right to object to processing - object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent at any time (including cookie consent) - withdrawal does not affect lawfulness of processing before withdrawal
  • Right to lodge a complaint with a supervisory authority (e.g., ICO in the UK, CNIL in France) if you believe we have violated GDPR

For California Users (CCPA/CPRA):

  • Right to know what personal data we collect, use, disclose, and sell
  • Right to delete your personal data (subject to certain exceptions)
  • Right to opt out of data sales to third parties
  • Right to non-discrimination for exercising your rights (we will not deny services or charge higher fees)
  • Right to correct inaccurate personal data

To exercise your rights, please contact our Data Protection Officer (DPO) using the contact details below. We will respond to your request within 1 month (or 3 months for complex requests, with prior notification).

7. Data Protection Officer (DPO) Contact Information

Our Data Protection Officer (DPO) is responsible for overseeing GDPR compliance and handling your privacy-related requests. You can contact the DPO via:

We aim to respond to all DPO inquiries within 5 business days.

8. Contact Us

If you have any questions about this Privacy Policy or our data practices (other than DPO requests), please contact us at:

Email: [email protected]

Last Updated: January 2026