GDPR Information

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018, in the European Union (EU) and European Economic Area (EEA). It sets out rules for how organizations collect, use, and protect personal data of individuals located in the EU/EEA.

Even though orbitforge.games primarily serves customers in Ontario, Canada, we respect and comply with GDPR principles for any European users who may access our services.

Your GDPR Rights

If you are located in the EU/EEA, you have the following rights regarding your personal data:

1. Right to Access (Article 15)

You have the right to obtain confirmation as to whether we process your personal data and, if so, access to that data. You can request:

• A copy of your personal data
• Information about the purposes of processing
• Categories of personal data concerned
• Recipients or categories of recipients
• Retention periods
• Your rights to rectification, erasure, or restriction

2. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed. You can update your information through your account settings or by contacting us.

3. Right to Erasure (Article 17) - "Right to be Forgotten"

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the original purpose
• You withdraw consent and there is no other legal basis
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Deletion is required to comply with a legal obligation

Note: We may be required to retain certain data for legal or regulatory compliance (e.g., anti-money laundering requirements, gaming regulations).

4. Right to Restrict Processing (Article 18)

You can request that we limit how we use your personal data when:

• You contest the accuracy of the data
• Processing is unlawful, but you oppose erasure
• We no longer need the data, but you need it for legal claims
• You have objected to processing pending verification

5. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where:

• Processing is based on consent or contract
• Processing is carried out by automated means

6. Right to Object (Article 21)

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests
• Processing is for direct marketing purposes
• Processing is for scientific or historical research or statistical purposes

7. Right to Withdraw Consent (Article 7)

If processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

8. Right to Lodge a Complaint (Article 77)

You have the right to lodge a complaint with a supervisory authority in your EU/EEA member state if you believe your data protection rights have been violated.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

Data Protection Officer (DPO): dpo@orbitforge.games

Privacy Email: privacy@orbitforge.games

Phone: 1-800-522-2876

Mailing Address: Deck Entertainment B.V., Curaçao

Response Time: We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, and we will inform you of any delay.

Verification: We may need to verify your identity before processing your request to ensure data security.

Legal Basis for Processing

We process your personal data based on the following legal bases under GDPR:

• Consent: When you consent to marketing communications or certain data processing activities
• Contract: To fulfill our contractual obligations (e.g., processing bets, managing your account)
• Legal Obligation: To comply with legal requirements (e.g., anti-money laundering, age verification, tax reporting)
• Legitimate Interests: For our legitimate business interests (e.g., fraud prevention, security, business operations)

Data Transfers Outside the EU/EEA

Your personal data may be transferred to and processed in countries outside the EU/EEA, including Canada and Curaçao. We ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Other appropriate safeguards as required by GDPR

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Some data may be retained longer as required by gaming regulations, anti-money laundering laws, or other legal requirements.

Automated Decision-Making

We may use automated processing, including profiling, for fraud prevention, risk assessment, and responsible gaming purposes. You have the right not to be subject to decisions based solely on automated processing that produces legal or similarly significant effects, unless:

• It is necessary for entering into or performing a contract
• It is authorized by law
• You have given explicit consent

Updates to This Information

This GDPR information page may be updated from time to time to reflect changes in law or our practices. We encourage you to review this page periodically.

Last Updated: January 2025