Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, protected, and deleted when you use the Website and Services. It also outlines your privacy rights, consent choices, cookie use, data handling practices, and the legal basis for processing. The sections below explain these principles in more detail.

Scope and Definitions

This section explains what this Privacy Policy covers and how key privacy terms are used throughout the Website and Services. It defines the policy’s scope, the main platform entities, and commonly used data protection terms in a clear and practical way. 

References to the Website, Services, Account, User, Steam, and third-party providers should be interpreted as described throughout this policy and the related Terms of Use.

Principles of Data Processing

Personal data is processed according to established data protection principles that help ensure information is handled responsibly and securely. Processing is carried out lawfully, fairly, and transparently, with data collected only for specific purposes and limited to what is necessary. 

Reasonable steps are taken to keep information accurate, up to date, protected against unauthorized access, and processed in a way that maintains its integrity and confidentiality.

Personal Data We Process

Using the Website and Services may require the collection of different categories of personal data. This helps operate your account, process transactions, improve security, and provide platform features. Depending on how you use the services, the following information may be processed:

• Identity information, such as your name, date of birth, or verification details.
• Contact details, including your email address.
• Payment and transaction information.
• Steam account and gameplay activity.
• Account settings, purchases, and participation in events or promotions.
• Device, browser, IP address, cookies, and other technical information.
• Customer support requests and communication history.
• Social interactions, referrals, and marketing preferences.

Why We Collect Personal Data

Personal data is collected to operate the Website securely and provide the Services you request. It also helps verify accounts, process payments, prevent fraud, improve platform performance, and meet legal obligations.

Your information may be used to:

• Create and manage your account.
• Process payments and deliver services.
• Verify identity and support AML/KYC procedures.
• Protect accounts and prevent fraud or abuse.
• Personalize promotions, rewards, and platform features.
• Analyze usage trends and improve the Website.
• Send service notifications and, where permitted, marketing communications.
• Support case openings, trading features, events, giveaways, and customer support.

Where Personal Data Comes From

Personal data does not come only from registration forms. Depending on how you use the Website and Services, information may be collected from several sources to support account management, security, and platform functionality.

These sources may include information you provide directly, payment providers, Steam account activity, gameplay and trading records, device and browser data, cookies, server logs, customer support conversations, transaction history, and trusted third-party service providers that support the operation of the platform.

Third-Party Data

In some situations, the Website may receive limited personal data from trusted third parties or publicly available sources. This information can be combined with existing account records to verify identity, improve security, personalize services, support marketing activities, and ensure the Website operates efficiently. 

Third-party data may include information from payment providers, Steam, analytics partners, advertising platforms, public databases, or promotional partners, where permitted by applicable law.

Legal Basis for Processing

Personal data is processed only when there is a valid legal reason to do so. Depending on the situation, processing may be based on your consent, the need to perform a contract, compliance with legal obligations, or Hellcase’s legitimate interests, such as maintaining platform security, preventing fraud, and improving the Website and Services.

Data Retention

Personal data is kept only for as long as it is needed to provide the Services, comply with legal obligations, resolve disputes, or protect the platform’s legitimate interests. Retention periods vary depending on the type of information collected, the purpose of processing, and applicable legal or regulatory requirements. 

Once the data is no longer required, it is securely deleted or anonymized where appropriate.

Sharing Personal Data

Some personal data may need to be shared so the Website and Services can operate as intended. Depending on the purpose, information may be shared with payment providers, analytics partners, advertising partners, technical service providers, public authorities, or other trusted third parties that support platform operations. 

Data is shared only when there is a legitimate business or legal reason to do so.

Partner and Service Sharing

To keep the platform running smoothly, certain information may be shared with carefully selected operational partners. These may include payment processors, analytics providers, cloud hosting services, technical infrastructure partners, fraud prevention services, and other providers that help deliver the Website and Services. 

Each partner receives only the information necessary to perform its specific role.

Legal and Regulatory Disclosure

Personal data may also be disclosed when required by law or in response to a valid request from a competent authority. This may include requests from courts, law enforcement agencies, regulators, supervisory authorities, or other public bodies where disclosure is necessary to comply with legal obligations, protect legal rights, or support official investigations.

Marketing and Advertising Use

Where permitted by law, personal data may be used to deliver relevant promotions, newsletters, event invitations, and other marketing communications. Information may also support audience analysis, advertising campaigns, and joint marketing activities with selected partners. 

You remain in control of your marketing preferences and can unsubscribe from promotional emails at any time without affecting essential service communications.

Analytics and Research

We pay attention to how the Website is used because that’s the easiest way to spot problems before users do. Usage data helps us understand which features are popular, where people run into issues, and what needs improving. We also use these insights to test updates, improve performance, and make future releases more useful.

International Data Transfers

Some of the companies that help us run the Website are based in other countries. As a result, your personal data may be processed outside your home country. Whenever that happens, we use appropriate legal and technical safeguards to help keep your information protected and handle it in line with applicable data protection laws.

Data Security

No website can claim to be completely immune to security risks, and we won’t pretend otherwise. What we can do is take security seriously. We use encrypted connections, protected servers, restricted employee access, continuous monitoring, and secure third-party services to reduce risk and protect the information you trust us with.

Data Deletion

If we no longer need your personal data, we won’t keep it just because we can. Information is removed once its purpose has been fulfilled or after a valid deletion request, where applicable. Before deleting anything, we may ask you to verify your identity to make sure the request really comes from you.

Exceptions to Deletion

There are situations where deleting data immediately isn’t possible. We may need to keep certain records to comply with the law, investigate fraud, resolve disputes, or meet regulatory requirements. In those cases, the data is kept only for as long as necessary and, where possible, is restricted or anonymized.

Your Privacy Rights

You remain in control of your personal data. Depending on the laws that apply to you, you may have the right to access your information, correct it, delete it, restrict its use, move it to another provider, object to certain processing activities, withdraw consent, or file a complaint. The rights below explain what each one means in practice.

Right to Access and Information

You can ask whether we process your personal data and, where permitted by law, request a copy of the information we hold about you. You may also request details about how and why your data is used.

Right to Rectification and Erasure

If any of your personal information is inaccurate or incomplete, you can ask us to correct it. You may also request deletion of your data where legal or contractual obligations do not require us to keep it.

Right to Restrict or Object

In certain situations, you can ask us to limit how we process your personal data or object to specific types of processing. We will review each request in line with applicable data protection laws.

Right to Portability

Where this right applies, you can request your personal data in a structured, commonly used, and machine-readable format. You may also ask for it to be transferred to another provider where technically possible.

Right to Withdraw Consent

If we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect any processing that was carried out lawfully before your request.

Automated Decision-Making

Some services may rely on automated processes to improve security, detect fraud, or support platform functionality. Where required by law, you may have the right to object to certain automated decisions or request human review.

Right to Complain

If you believe your personal data has not been handled in accordance with applicable law, you can submit a complaint to the relevant data protection or supervisory authority in your country or region.

Cookies Policy

Like most modern websites, this Website uses cookies and similar technologies to keep things running smoothly and improve your experience. Some cookies are essential for core functions, while others help us understand how the Website is used or remember your preferences.

The Website may use:

• Essential cookies to support login, security, and basic functionality.
• Preference cookies to remember your settings and improve usability.
• Analytics cookies to measure traffic and understand how visitors use the Website.
• Third-party cookies provided by trusted partners that support analytics, payments, or other services.

You can manage or block cookies through your browser settings at any time. However, disabling certain cookies may affect how some parts of the Website or Services work.

Updating This Policy

We will update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. When this happens, the updated version will be published on the Website and, where appropriate, you may also receive a notification. By continuing to use the Website or Services after the changes take effect, you confirm your acceptance of the updated Privacy Policy.

Applicable Law

This Privacy Policy is intended to comply with applicable data protection laws in the jurisdictions where the Website and Services operate. Where relevant, this includes the General Data Protection Regulation (GDPR) and other privacy laws that govern the collection, use, storage, and protection of personal data.

Acceptance of the Policy

By accessing or using the Website and Services, you acknowledge that you have read and accepted this Privacy Policy. If you continue to use the platform after any updates take effect, you also accept the revised policy and the processing of your personal data as described in this document.

Data Controller Details

The entity responsible for processing personal data collected through the Website acts as the data controller for the purposes described in this Privacy Policy. The applicable data controller depends on your region and is identified in the Terms of Use, where you can also find the relevant company information, registration details, and contact information.