Privacy Policy

1. Introduction

LootBase ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and when you use our services, and it will tell you about your privacy rights and how the law protects you in Egypt.

This policy complies with the Egyptian Personal Data Protection Law (Law No. 151 of 2020), its Executive Regulations, and international data protection standards. We are registered with the Egyptian Data Protection Center under applicable laws.

2. Important Information and Who We Are

2.1 Purpose of This Privacy Policy

This privacy policy aims to give you information on how we collect and process your personal data through your use of this website and our services, including any data you may provide when you sign up for our newsletter, purchase a service, register for our game deals platform, or take part in a competition.

2.2 Data Controller

LootBase is the controller and responsible for your personal data. We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

2.3 Contact Details

• Full name of legal entity: LootBase
• Email address: [email protected]
• Postal address: Galleria40, 26th of July Corridor, Sheikh Zayed City, Giza, Egypt
• Telephone number: +20 2 3795 1111

3. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

3.1 Identity Data

• First name, last name, username or similar identifier
• Date of birth
• Gender
• National ID or passport number (for registration purposes)

3.2 Contact Data

• Billing address
• Delivery address
• Email address
• Telephone numbers

3.3 For Children and Young Users

• Emergency contact information
• Medical information (allergies, medical conditions, medications)
• Gaming preferences and history
• Age verification information
• Parental consent records

3.4 Technical Data

• Internet protocol (IP) address
• Browser type and version
• Time zone setting and location
• Browser plug-in types and versions
• Operating system and platform
• Other technology on the devices you use to access this website

3.5 Profile Data

• Your username and password
• Your interests, preferences, feedback, and survey responses
• Registration history with our platform

3.6 Usage Data

• Information about how you use our website and services

3.7 Marketing and Communications Data

• Your preferences in receiving marketing from us and our third parties
• Your communication preferences

3.8 Special Categories of Personal Data

We may collect information about your health or medical conditions to ensure the safety and well-being of users of our platform. This is only collected with your explicit consent.

4. How We Collect Your Personal Data

4.1 Direct Interactions

You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

• Apply for our services or register on our platform
• Create an account on our website
• Subscribe to our publications
• Request marketing to be sent to you
• Enter a competition, promotion, or survey
• Give us feedback

4.2 Automated Technologies or Interactions

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.

4.3 Third Parties or Publicly Available Sources

We may receive personal data about you from various third parties and public sources such as analytics providers, advertising networks, and search information providers.

5. How We Use Your Personal Data

5.1 To Register You as a New Customer/Member

• Process and manage your registration on our platform
• Set up and manage your account

5.2 To Provide Our Services

• Manage payments, fees, and charges
• Collect and recover money owed to us
• Track game deals and price changes
• Provide personalized game recommendations
• Ensure the safety and well-being of users

5.3 To Manage Our Relationship with You

• Notify you about changes to our terms or privacy policy
• Ask you to leave a review or take a survey
• Respond to your inquiries and requests

5.4 To Improve Our Website and Services

• Administer and protect our business and website
• Use data analytics to improve our website, services, marketing, customer relationships, and experiences

5.5 To Make Recommendations and Marketing

• Deliver relevant website content and advertisements to you
• Measure or understand the effectiveness of the advertising we serve to you

6. Disclosures of Your Personal Data

We may share your personal data with the following categories of recipients:

• Service providers acting as processors who provide IT and system administration services
• Professional advisers including lawyers, bankers, auditors, and insurers
• Game retailers and partners, when necessary for processing orders and providing services
• Government bodies or regulatory authorities, when required by law

7. International Transfers

We operate primarily in Egypt and store most of our data within Egypt. However, some of our external third-party service providers may be based outside Egypt, so their processing of your personal data may involve a transfer of data outside Egypt.

As required by the Egyptian Personal Data Protection Law (Law No. 151 of 2020), we only transfer personal data to countries that provide an adequate level of protection for personal data, or under one of the following conditions:

• We have obtained specific approval from the Egyptian Data Protection Center
• We have implemented appropriate safeguards (such as Standard Contractual Clauses)
• You have explicitly consented to the transfer after being informed of the potential risks
• The transfer is necessary for the performance of a contract between you and us
• The transfer is necessary for important reasons of public interest

8. Data Security

In accordance with Article 31 of the Egyptian Personal Data Protection Law, we have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data where appropriate
• Regular testing and evaluation of the effectiveness of security measures
• The ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems
• A process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures
• The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
• Staff training on data protection and security

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For children's data, we typically retain this information until they reach adulthood, or for a maximum of 7 years after they leave our platform, whichever is longer.

10. Your Legal Rights

10.1 Right to Access

You have the right to obtain confirmation as to whether your personal data is being processed and, if so, access to your personal data and the following information:

• The purposes of processing
• The categories of personal data concerned
• The recipients to whom the personal data has been or will be disclosed
• The period for which the personal data will be stored
• Information about the source of the data, if not collected directly from you

10.2 Right to Rectification

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.

10.3 Right to Erasure ("Right to be Forgotten")

You have the right to obtain the erasure of your personal data without undue delay in certain circumstances, such as when the personal data is no longer necessary for the purposes for which it was collected.

10.4 Right to Restriction of Processing

You have the right to obtain restriction of processing in certain circumstances, such as when you contest the accuracy of your personal data.

10.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit this data to another controller.

10.6 Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10.8 Right to File a Complaint

You have the right to file a complaint with the Egyptian Data Protection Center if you believe that the processing of your personal data infringes the law.

11. Data Breach Procedures

In the event of a personal data breach, we will notify the Egyptian Data Protection Center without undue delay and, where feasible, not later than 72 hours after becoming aware of it, unless the breach is unlikely to result in a risk to your rights and freedoms. We will also notify you of the breach without undue delay when the breach is likely to result in a high risk to your rights and freedoms.

12. Children's Privacy

We take additional precautions when processing personal data of children under 18 years of age:

• We obtain verifiable parental consent before collecting or using children's personal data
• Our information notices are written in clear, plain language that a child can understand
• We implement age verification mechanisms where appropriate
• We do not use children's personal data for marketing or profiling purposes without explicit parental consent

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this page. We will notify you of any material changes to this policy through a prominent notice on our website or by sending you an email. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.