This Privacy Policy explains how Reactoonz collects, uses, stores, and protects personal data from players in the United Kingdom. It is issued to ensure transparency regarding data handling practices and to outline the lawful bases under which information is processed. The policy covers account management, transaction processing, security protocols, and compliance with data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. By reading this document, individuals can understand the types of information collected, the purposes of processing, and the rights available to them. This policy applies to all players who access or use the Reactoonz platform and serves as a formal record of the brand’s obligations and procedures regarding personal data.
Data Collection and Types of Information Processed
The Reactoonz brand collects various categories of personal data from players during account registration, gameplay, and ongoing account administration. This data is necessary to establish identity, manage accounts, and fulfil legal obligations under United Kingdom gambling regulations. The following categories are processed:
- Registration details: full name, date of birth, residential address, email address, and telephone number.
- Identification data: copies of passports, driving licences, utility bills, or other documents required for age and identity verification.
- Transactional information: deposit and withdrawal records, payment method details, transaction amounts, timestamps, and account balance history.
- Technical data: IP address, device type, operating system, browser settings, session duration, and interaction data derived from the reactoonz play interface.
- Compliance-related records: self-exclusion flags, account restriction notes, correspondence with regulatory bodies, and records of responsible gambling checks.
- Marketing preferences: selections regarding receipt of promotional materials, though no marketing language is included in this document.
Personal data may be collected directly from the player, through automated systems, or from third-party verification services. The reactoonz series of games and platforms may generate additional technical logs that are stored in accordance with standard operational procedures.
Data Usage and Legal Basis for Processing
Personal data is used for purposes directly related to account administration, transaction execution, security monitoring, and compliance with legal obligations. The Reactoonz brand relies on specific lawful bases for each processing activity, as outlined below:
- Contractual necessity: processing is required to provide access to the reactoonz freeplay mode and full gameplay features under the terms of service.
- Legal obligation: data is processed to comply with United Kingdom anti-money laundering regulations, age verification requirements, and Gambling Commission guidance.
- Legitimate interest: data may be used for fraud detection, network security, account stability, and internal analytics, provided such interests do not override player rights.
- Consent: where processing for non-essential purposes occurs, such as reactoonz 2 free trial access or voluntary data sharing for feedback, explicit consent is obtained and can be withdrawn.
All processing activities are documented and subject to periodic review. Data is not used for automated decision-making that produces legal effects unless permitted by applicable legislation and disclosed to the player in advance.
Data Storage, Security Measures, and Retention Rules
Personal data is stored on secure servers located within the European Economic Area and the United Kingdom. Storage systems employ encryption at rest and in transit, using industry-standard protocols. Access is restricted to authorised personnel who require the data to perform their duties, with access controls and audit logs maintained. The following security measures are implemented:
- Firewalls and intrusion detection systems to prevent unauthorised access.
- Pseudonymisation and masking of identifiable data where possible.
- Regular security assessments and penetration testing by external auditors.
- Staff training on data protection and confidentiality obligations.
Retention periods are determined by the purpose of processing and legal requirements. Account data is retained for the duration of the account’s active status and for a period of six years after account closure to comply with financial and regulatory record-keeping standards. Data no longer required is securely deleted or anonymised. Temporary logs, including those generated during reactoonz play sessions, are retained for up to 12 months unless required for an ongoing investigation.
Player Rights and Data Access Procedures
Players in the United Kingdom have rights under data protection law regarding their personal data. The Reactoonz brand processes all requests in accordance with statutory timelines and verification requirements. The following rights are available:
- Right of access: individuals may request confirmation of whether data is processed and obtain a copy of the information held.
- Right to rectification: inaccurate or incomplete data may be corrected upon request.
- Right to erasure: data may be deleted where it is no longer necessary for the purpose collected, or where consent is withdrawn.
- Right to restrict processing: processing may be limited in specific circumstances, such as during a dispute over data accuracy.
- Right to object: individuals may object to processing based on legitimate interest, including for direct marketing purposes.
- Right to data portability: structured, machine-readable copies of data provided by the player may be requested in certain cases.
All requests must be submitted in writing to the data protection officer, and identity verification is required before any action is taken. Verification may involve providing a copy of a government-issued identification document and proof of address. The brand will respond within one calendar month, although this period may be extended for complex or multiple requests. No fee is charged unless the request is manifestly unfounded or excessive. Complaints may be directed to the Information Commissioner’s Office in the United Kingdom.