GLXYZ Privacy Policy

1. Who we are

The data controller for your personal data is E-Sports Cortez Holding Company Limited ("we", "us", "our"), the publisher of the GLXYZ mobile application (the "App").

Registered address: No. 571, RSU Tower, Unit 705, 7th Floor, Soi Sukhumvit 31, Sukhumvit Road, Khlong Tan Nuea Sub-district, Watthana District, Bangkok, Thailand.

Contact: developer@ygesports.gg

2. Scope

This Privacy Policy explains what personal data we collect through the App, how we use and share it, how long we keep it, and the choices and rights available to you. It applies to users of the App in Myanmar and other markets where the App is available.

3. Data we collect

Information you provide:

• Account data through third-party sign-in (Google or Apple), including your name, email address, and the third-party account identifier.
• Profile data, including display name, profile photo (optional), date of birth (optional), and games played (optional).
• Delivery data for merchandise, including recipient name, phone number, address, and an optional delivery note.

Information collected automatically:

• Usage and activity data, including content viewed, reactions, comments, predictions, quests, referrals, and Feather earning and spending.
• Device and technical data, including device type, operating system, app version, and identifiers used for push notifications.
• Analytics and crash data collected through Google Firebase services, including device identifiers, usage events, and crash reports, as described in section 6.

4. How we use your data

• To create and operate your account and provide the features of the App.
• To operate the Feather economy, quests, predictions, referrals, leaderboards, and achievements.
• To process and deliver merchandise orders and redemptions.
• To send notifications that you have enabled.
• To maintain security, prevent fraud and abuse, and comply with legal obligations.
• To understand how the App is used and to improve it.

5. How we handle your data

We process personal data on the basis of your consent, the performance of our agreement with you (the Terms and Conditions), our legitimate interests in operating and securing the App, and compliance with applicable law. You provide consent when you accept our Terms and Privacy Policy during onboarding.

6. Sharing and disclosure

• Service providers who help us operate the App, such as hosting, content delivery, push notifications, and logistics for merchandise, bound by confidentiality obligations.
• Google Firebase, which provides analytics, crash reporting, and push notification services for the App. Firebase collects device identifiers and usage data on our behalf and processes them under Google's terms. For more information, see the Google Privacy Policy at https://policies.google.com/privacy.
• Payment providers who process merchandise payments, under their own terms and privacy policies.
• Embedded YouTube content is provided by Google. When you view videos or live streams embedded in the App, Google may collect data about your viewing activity and device as described in the Google Privacy Policy at https://policies.google.com/privacy.
• Third-party sign-in providers (Google or Apple), under their own policies.
• Authorities or other parties where required by law, or to protect rights, safety, and security.
• We do not sell your personal data.

7. Payments

When you make a payment for merchandise, payment processing is handled by a supported payment provider. We receive confirmation of the transaction and a transaction reference. We do not store full payment credentials.

8. Data retention

We keep personal data for as long as your account is active and as needed to provide the App, after which we delete or anonymise it, except where longer retention is required by law or for legitimate security and fraud-prevention purposes.

9. Your rights

Subject to applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, to withdraw consent, and to object to certain processing. You can delete your account and associated personal data from within the App. To exercise other rights, contact us at developer@ygesports.gg.

10. Account deletion

You can delete your account at any time in the App settings. Deletion removes or anonymises your personal data, including profile information and delivery details, and forfeits any unspent Feathers. Some data may be retained where required by law or for legitimate security and fraud-prevention purposes.

11. Children's privacy

The App is not intended for users under the age of 13. We do not knowingly collect personal data from children below that age. If we learn that we have collected such data, we will delete it.

12. Security

We use reasonable technical and organisational measures to protect personal data. No system is completely secure, and we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified in the App or by other reasonable means.

14. Contact

If you have questions about this Privacy Policy or your personal data, contact us at developer@ygesports.gg.

E-Sports Cortez Holding Company Limited