Header Icon

Privacy Policy

This Privacy Policy explains how TCG World collects, uses, shares, retains, protects, and otherwise processes personal information when you access or use TCG World websites, accounts, game clients, launchers, downloadable content, digital items, virtual world features, creator and affiliate programs, marketplace interfaces, support systems, optional public-ledger features, UNIT-related functionality, events, promotions, and related services. Please read it carefully together with the TCG World Terms and Conditions, End User License Agreement, and Cookie Policy.

Effective Date: May 18, 2026

1Introduction

TCG World respects user privacy and is committed to explaining how personal information is collected, used, shared, retained, and protected when users interact with TCG World. This Privacy Policy is written for a live-service online game, virtual world, website, account system, marketplace interface, creator and affiliate program, downloadable software environment, support operation, optional public-ledger feature set, and related entertainment services. This Privacy Policy is intended to be comprehensive. It applies to information collected through official TCG World websites, accounts, profiles, game clients, launchers, installers, downloadable files, update systems, servers, support tools, payment flows, DLC purchases, digital item systems, virtual land features, marketplace interfaces, creator programs, affiliate and referral systems, communications, events, promotions, advertising, analytics, optional public-ledger features, UNIT-related functionality, and any other TCG World-operated or TCG World-branded service that links to this Privacy Policy. This Privacy Policy does not promise that every feature will collect every type of information. It describes categories of personal information that TCG World may collect, use, disclose, or otherwise process depending on which products, features, regions, platforms, devices, stores, payment methods, public-ledger tools, creator programs, support channels, and account settings apply to a user. By accessing or using TCG World, creating an Account, downloading or launching the Software, making a purchase, connecting a wallet, using support, joining a creator or affiliate program, participating in an event, submitting User Content, or otherwise interacting with TCG World, you acknowledge that you have read this Privacy Policy and understand that personal information may be processed as described here.

Table of Contents

2Effective Date and Contact

The effective date of this Privacy Policy is May 18, 2026. The last updated date is also May 18, 2026. TCG World may update this Privacy Policy from time to time as described in the Changes section below. Official privacy requests, privacy questions, privacy complaints, data access requests, deletion requests, correction requests, opt-out requests, and privacy-related legal notices should be sent to support@tcg.world unless TCG World later publishes a different official privacy contact method. When contacting us about privacy, please include enough information for us to understand the request, identify the account or interaction at issue, verify your identity where legally required or appropriate, and respond efficiently. Do not send unnecessary sensitive information unless specifically requested through a secure process.

3Scope of This Privacy Policy

This Privacy Policy applies to TCG World websites, account services, profile pages, game clients, launchers, installers, downloadable content, digital items, virtual land systems, marketplace interfaces, customer support, reporting tools, event systems, creator and affiliate programs, referral tracking, promotional campaigns, email communications, analytics, advertising, optional public-ledger features, UNIT-related functionality, and other online or offline interactions that reference this Privacy Policy. This Privacy Policy also applies to information collected through official forms, purchase flows, account registration, support tickets, identity or eligibility checks, bug reports, security reports, feedback submissions, creator applications, affiliate onboarding, social campaign participation, livestream promotions, and similar interactions with TCG World. This Privacy Policy does not control the privacy practices of third parties that operate their own services, including payment processors, game stores, app stores, launchers, wallet providers, public-ledger networks, Upfluence Pay, social platforms, livestreaming platforms, analytics providers acting independently, advertising networks acting independently, device platforms, and external websites. Those third parties may provide their own privacy policies, terms, settings, and rights processes.

4Relationship to Terms, EULA, and Cookie Policy

This Privacy Policy works together with the TCG World Terms and Conditions, End User License Agreement, Cookie Policy, purchase terms, creator and affiliate terms, event rules, platform or store rules, and any feature-specific disclosures presented to you. Those documents may explain additional rights, obligations, rules, restrictions, disclaimers, and risk disclosures that relate to TCG World. The Terms and Conditions govern the broader platform relationship, including accounts, purchases, digital items, virtual land, marketplace features, optional public-ledger features, UNIT, creator and affiliate programs, user conduct, support processes, dispute resolution, and general platform rules. The EULA governs software-specific matters, including installation, software use, updates, anti-cheat, technical restrictions, device requirements, and game-client restrictions. The Cookie Policy explains cookies and similar technologies in more detail. If a feature-specific privacy notice, store disclosure, payment disclosure, cookie banner, consent prompt, or region-specific privacy addendum is presented to you, that disclosure supplements this Privacy Policy for the specific feature, region, platform, transaction, or processing activity described.

5TCG World Entities and Responsible Parties

For purposes of this Privacy Policy, “TCG World,” “we,” “us,” and “our” mean TCG World US, Inc., TCG Bahamas Ltd., and their respective affiliates, subsidiaries, successors, assigns, officers, directors, employees, contractors, service providers, licensors, vendors, and agents, as applicable to the product, region, transaction, platform, or feature involved. Depending on the service, user location, business context, and applicable law, TCG World US, Inc., TCG Bahamas Ltd., or another TCG World-affiliated entity may be responsible for deciding why and how personal information is processed. Where required by law, the applicable TCG World entity will act as a controller or business with respect to personal information it controls. Certain third parties may independently determine how they process personal information. Examples may include game stores, app stores, console platforms, payment processors, wallet providers, public-ledger networks, Upfluence Pay, advertising networks, social media platforms, livestreaming platforms, analytics providers, fraud prevention vendors, KYC vendors, and other external services. TCG World is not responsible for independent third-party privacy practices except where applicable law imposes responsibility that cannot be disclaimed.

6Definitions

Capitalized terms not defined in this Privacy Policy have the meanings given in the TCG World Terms and Conditions or EULA. This includes Account, Account Entitlements, Digital Assets, Digital Collectible, DLC, Internal Records, Marketplace, Off-Chain Digital Items, Optional Public-Ledger Features, Payment Provider, Protected Parties, Services, TCG World Content, UNIT, User Content, and Software. “Personal information” or “personal data” means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to an identified or identifiable person or household, depending on the applicable law. Some laws use different terms, but this Privacy Policy uses these phrases broadly. “Processing” means collecting, recording, organizing, storing, using, disclosing, sharing, analyzing, protecting, deleting, deidentifying, or otherwise handling personal information. “Service providers” and “processors” refer to vendors that process personal information for TCG World under contractual restrictions, although legal terminology may vary by jurisdiction.

7Privacy at a Glance

TCG World collects information that is needed to operate accounts, provide the game and related services, process purchases, deliver digital items, support virtual land and marketplace features, provide customer support, run creator and affiliate programs, secure the platform, prevent cheating and fraud, comply with law, personalize experiences, measure advertising, and improve products. TCG World does not sell personal information for money. However, some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly, and certain advertising, analytics, retargeting, affiliate attribution, or measurement activities may be treated as sharing or targeted advertising under those laws. Where required, TCG World will provide opt-out rights and honor recognized opt-out signals as required by law. TCG World is intended for adults only. It is not directed to children, and users must be at least 18 years old or the age of legal majority in their jurisdiction, whichever is greater. If TCG World learns or reasonably believes that a minor has accessed the Services in violation of the Terms, TCG World may restrict, suspend, terminate, delete, or preserve records as appropriate under law and platform safety requirements. TCG World may use automated tools, human review, security vendors, anti-cheat signals, fraud systems, moderation systems, safety tools, analytics, and support workflows. These tools help operate and protect the Services, but no system is perfect, and TCG World does not guarantee that all unsafe, unlawful, abusive, or harmful activity will be prevented or detected.

8Information You Provide Directly

TCG World collects information that you provide directly when you register, create an Account, update your profile, make purchases, request support, submit forms, apply for creator or affiliate programs, participate in events, submit reports, provide feedback, contact us, connect third-party accounts, or otherwise interact with TCG World. Information you provide may include name, email address, username, display name, password or password-related credential data, date of birth or age-related information, country or region, account preferences, profile information, payment-related details, billing details, order details, support messages, complaint details, identity verification materials where required, tax or payout-related information where applicable, and any content or files you choose to submit. You are responsible for ensuring that information you provide is accurate, current, complete, lawful, non-misleading, and yours to provide. Providing false, incomplete, outdated, fraudulent, or unauthorized information may result in declined access, delayed support, failed payments, payout holds, feature restrictions, Account suspension, compliance review, or termination.

9Account and Profile Information

TCG World may collect account registration information, login credentials, account identifiers, email address, username, display name, profile information, avatar information, account preferences, linked accounts, account status, account history, and records of your acceptance of TCG World legal terms. Account information is used to create and maintain your Account, authenticate you, provide account services, display public or semi-public profile elements, support user interactions, provide digital item access, support game progress, enable support, enforce rules, protect security, and maintain Internal Records. Certain profile information may be visible to other users depending on platform settings, feature design, creator participation, marketplace activity, livestream features, public profiles, user content, virtual land content, or account interactions. You should not include private or sensitive information in usernames, display names, avatar names, profile fields, land names, creator names, links, public chats, or other public-facing features.

10Identity, Age, Eligibility, and Compliance Information

TCG World may collect or receive information to verify identity, age, eligibility, jurisdiction, sanctions status, fraud risk, tax status, wallet control, payment legitimacy, creator eligibility, affiliate eligibility, event eligibility, or legal compliance. This may include name, date of birth, country, region, address, government identification details, identity verification results, risk scores, verification status, sanctions screening information, and compliance notes where applicable. TCG World may use third-party identity, age assurance, fraud prevention, sanctions screening, KYC, AML, risk review, payment verification, and compliance providers. These providers may collect information directly from you and may process it under their own privacy policies, terms, and compliance obligations. TCG World may decline, delay, restrict, suspend, or terminate access to features where identity, age, jurisdiction, tax, sanctions, wallet, payment, fraud, or compliance checks fail, are incomplete, are suspicious, or are required by law, platform rules, payment rules, or risk management processes.

11Payment, Purchase, Refund, and Transaction Information

TCG World may collect and process information relating to purchases, orders, receipts, invoices, DLC purchases, digital item access, virtual land features, marketplace interactions, refunds, chargebacks, payment disputes, fraud review, billing country, payment method type, transaction identifiers, payment status, taxes, subscriptions, discounts, coupon usage, referral attribution, and other purchase-related activity. Full payment card numbers, bank account credentials, and sensitive payment credentials may be collected and processed by third-party Payment Providers, banks, card networks, game stores, app stores, payment platforms, or other transaction processors rather than by TCG World directly. TCG World may receive payment confirmation, transaction identifiers, last-four indicators, payment status, fraud signals, dispute information, refund status, billing country, tax information, and similar records needed for operations and compliance. Payment and transaction information may be used to process purchases, deliver digital items, calculate taxes, prevent fraud, manage refunds or chargebacks, enforce all-sales-final terms, resolve disputes, maintain Internal Records, support customer service, comply with tax and accounting obligations, and protect TCG World from payment abuse.

12Creator, Affiliate, Influencer, and Partner Information

TCG World may collect information from creators, affiliates, influencers, streamers, promotional partners, agencies, vendors, sponsors, and similar participants. This may include name, email, social handles, streaming channels, audience information, application responses, profile links, referral code, affiliate link, campaign participation, content submissions, click data, conversion data, commission records, payout status, fraud review signals, communications, and compliance history. TCG World may use creator and affiliate information to approve or deny participants, issue referral links, track valid sales, measure campaign performance, calculate commissions, detect fraud, prevent bot traffic, monitor disclosure compliance, enforce creator rules, protect brand safety, review prohibited claims, and administer partnerships. TCG World may use or rely on third-party creator, affiliate, and payout providers such as Upfluence Pay. Those providers may collect payment details, tax forms, W-9 or W-8 information, taxpayer identifiers, banking or payout details, identity data, and other information needed to onboard creators and process payouts. Their own terms and privacy policies may apply to their collection and processing.

13Support, Legal, Complaint, and Communication Information

TCG World may collect information you submit through support tickets, legal notices, DMCA notices, trademark complaints, privacy requests, accessibility reports, bug reports, security reports, user reports, safety reports, chargeback communications, feedback forms, email, chat, messaging platforms, social media, or other communication channels. This information may include your name, email, Account information, order details, device details, screenshots, logs, wallet information where relevant, public-ledger transaction details, descriptions of issues, attachments, statements, evidence, user reports, legal claims, dispute information, and any other information included in your message. TCG World may retain and use support, legal, complaint, and communication information to respond to you, verify identity, resolve issues, investigate reports, enforce rules, defend legal claims, comply with law, improve products, identify recurring problems, detect fraud, prevent abuse of support processes, and protect TCG World and users.

14User Content, Public Profiles, Streams, and Community Information

TCG World may collect and process User Content and community information, including usernames, display names, avatar content, profile content, land builds, signs, text, images, videos, audio, streams, clips, screenshots, comments, links, event content, creator content, marketplace listings, public profile information, and other content that users create, upload, submit, display, transmit, publish, or make available through TCG World. User Content may be visible to other users, viewers, creators, moderators, vendors, platforms, or the public depending on the feature, user settings, platform design, event participation, marketplace activity, creator participation, streaming activity, or sharing choices. TCG World may not be able to control how other users copy, share, record, screenshot, stream, or further disclose content that you make public or semi-public. TCG World may use User Content for operation, moderation, safety, support, enforcement, troubleshooting, marketing, creator program administration, community promotion, product development, evidence preservation, legal compliance, and protection of TCG World rights, as allowed by the Terms and Conditions and EULA.

15Gameplay, Virtual World, Digital Item, and Marketplace Information

TCG World may collect and process gameplay and platform activity, including logins, session activity, gameplay events, interactions, movement, progression, achievements, inventory, DLC access, digital item use, virtual land features, map interactions, crafting, racing, farming, events, rewards, marketplace interactions, listings, purchases, sales, search activity, creator attribution, affiliate attribution, and other activity within the Services. TCG World may use gameplay and marketplace information to provide game functionality, maintain Internal Records, operate digital item systems, support virtual land features, balance gameplay, prevent cheating and fraud, investigate disputes, debug errors, improve features, measure engagement, support events, maintain platform integrity, and comply with legal obligations. Gameplay information may be associated with your Account, device, session, IP address, public-ledger address where connected, marketplace activity, support history, payment records, creator attribution, or other identifiers when necessary for operations, security, support, analytics, legal compliance, or enforcement.

16Device, Browser, Launcher, App, and Technical Information

TCG World may automatically collect device and technical information when you access websites, download software, launch a game client, use a launcher, connect to servers, access marketplace features, interact with content, or use support tools. This may include IP address, device identifiers, hardware characteristics, operating system, browser type, language, time zone, app or launcher version, graphics settings, driver information, crash state, installation path indicators, network information, and similar technical data. Technical information is used to operate the Services, authenticate sessions, prevent unauthorized access, detect errors, debug performance issues, verify compatibility, secure downloads, validate builds, provide updates, prevent abuse, detect cheating, support users, perform analytics, comply with store rules, and maintain platform reliability. TCG World may combine technical information with Account information, gameplay information, payment-related event data, fraud signals, anti-cheat signals, support records, and public-ledger information where necessary to protect the Services, investigate issues, enforce legal terms, or provide support.

17Telemetry, Crash Reports, Logs, Anti-Cheat, and Security Signals

TCG World may collect telemetry, crash reports, error logs, server logs, launcher logs, client logs, authentication logs, file-integrity results, build-validation data, anti-cheat signals, anti-tamper signals, fraud signals, moderation signals, bot-detection signals, behavioral signals, transaction risk indicators, and security alerts. This information may include device identifiers, account identifiers, session identifiers, IP addresses, timestamps, software versions, file states, process indicators, gameplay events, system configuration details, network events, integrity check results, error codes, suspicious activity signals, and other technical indicators relevant to security, stability, compliance, and platform integrity. TCG World uses telemetry and security information to prevent cheating, detect unauthorized tools, identify bots, stop exploits, protect payment systems, prevent fraud, investigate security incidents, debug crashes, maintain servers, improve performance, enforce rules, protect users, and defend TCG World against abuse. TCG World is not required to disclose detailed anti-cheat methods, security logic, fraud scores, thresholds, vendor tools, or internal investigation methods where disclosure could compromise safety or security.

18Chat, Voice, Moderation, Safety, and Enforcement Information

TCG World may collect, process, monitor, record, transcribe, review, store, filter, moderate, delete, restrict, or disclose text chat, voice chat, messages, reports, user names, avatar names, profile content, land content, links, uploaded content, event participation, creator content, and other communications where permitted by law and as needed for safety, moderation, support, enforcement, legal compliance, or operations. Moderation and safety information may include user reports, reporter information, accused user information, message content, voice recordings or transcripts where enabled and lawful, screenshots, logs, timestamps, IP data, Account data, enforcement history, warning history, restrictions, appeals, safety-vendor findings, and law-enforcement-related records. TCG World may use moderation and safety information to investigate harassment, predatory conduct, threats, grooming, scams, impersonation, doxxing, exploitation, hateful conduct, illegal content, fraud, cheating, marketplace abuse, false reports, support abuse, and other conduct that may violate TCG World rules or law. TCG World does not guarantee that all harmful content or conduct will be detected, prevented, removed, or remediated.

19Wallet, UNIT, and Optional Public-Ledger Information

TCG World may allow users to connect wallets, view digital assets, interact with optional public-ledger features, use UNIT-related functionality, sign messages, claim or link supported digital assets, display metadata, or interact with third-party wallet tools. If you use these features, TCG World may collect or process wallet addresses, public transaction data, signature details, connection status, linked Account information, metadata display information, claim status, eligibility information, fraud signals, sanctions screening results, and related support records. Public-ledger records are generally public, searchable, persistent, and outside TCG World control. Wallet addresses and transaction details may be visible to anyone through public-ledger explorers, third-party indexers, analytics providers, marketplaces, wallet tools, and other external services. TCG World cannot delete, alter, hide, or reverse records that exist on public-ledger networks. When you connect a wallet or interact with public-ledger features, TCG World may associate your wallet address with your Account, device, IP address, purchases, support records, claims, marketplace activity, or compliance review where needed to provide features, verify eligibility, prevent fraud, screen risk, maintain Internal Records, or comply with law.

20Information From Third Parties

TCG World may receive information about you from third parties. Examples include payment processors, game stores, app stores, launchers, platform providers, wallet providers, public-ledger services, analytics providers, advertising partners, affiliate platforms, Upfluence Pay, fraud prevention vendors, KYC vendors, sanctions screening services, customer support vendors, social media platforms, livestreaming platforms, creators, affiliates, users, regulators, law enforcement, public sources, and business partners. Third-party information may include account identifiers, platform account information, payment status, order status, refund status, chargeback data, fraud scores, compliance status, identity verification results, public-ledger data, advertising identifiers, campaign attribution, referral conversions, social handles, public profile information, user reports, and other data used to operate, secure, support, or improve TCG World. TCG World may combine information from third parties with information we collect directly or automatically. This helps us verify accounts, provide services, prevent fraud, detect cheating, process transactions, administer affiliate programs, comply with law, personalize features, measure advertising, and protect TCG World and users.

21Stores, Platforms, Launchers, and Payment Providers

If you access TCG World through Steam, Epic Games Store, app stores, console platforms, launchers, browser platforms, device platforms, payment platforms, or other third-party distribution channels, those third parties may collect and share information with TCG World. Information may include account identifiers, platform IDs, purchase confirmations, refund status, entitlement data, user region, user settings, anti-fraud signals, store compliance information, and technical data. Third-party stores and platforms may also collect information directly from you under their own privacy policies and terms. Their data practices may include platform telemetry, purchase history, account activity, friend or social information, store browsing, refund processing, content moderation, and device or network information. TCG World does not control those independent practices. TCG World may use store, platform, launcher, and payment information to deliver purchases, verify entitlements, comply with store requirements, process refunds where applicable, prevent fraud, resolve support issues, restrict unsupported features, provide store-specific versions, and maintain Internal Records.

22Upfluence Pay and Affiliate Payout Providers

TCG World may use Upfluence Pay or other creator, affiliate, influencer, and payout providers to administer creator onboarding, affiliate links, campaign tracking, commission calculations, payment information, tax collection, tax reporting, W-9 or W-8 processes, payout delivery, fraud review, and related support. Creators, affiliates, influencers, streamers, and partners who use Upfluence Pay or another payout provider may be required to provide information directly to that provider. This may include name, address, taxpayer identification information, government forms, business information, banking or payment details, identity verification information, and other records needed for payout and tax reporting. The provider’s own privacy policy and terms may apply. TCG World may receive from payout providers limited information needed to administer the program, such as approval status, payout status, commission status, tax compliance status, payment error status, fraud signals, account identifiers, campaign performance, and support-related details. TCG World may retain records needed for accounting, audit, dispute, fraud prevention, tax, and compliance purposes.

23Analytics, Advertising, Measurement, and Attribution Partners

TCG World may work with analytics, advertising, retargeting, measurement, attribution, affiliate tracking, referral tracking, conversion tracking, email marketing, customer engagement, and business intelligence providers. These partners may collect or receive identifiers, cookie data, device data, browser data, IP address, page views, clicks, referral links, campaign IDs, conversion events, purchase events, approximate location, and interactions with ads or content. TCG World uses analytics and advertising information to understand website and product performance, measure campaigns, attribute creator and affiliate sales, prevent fraudulent clicks and conversions, improve conversion funnels, personalize communications, show relevant promotions where permitted, operate retargeting where permitted, and evaluate product growth. Some advertising, measurement, and retargeting activities may be considered “sharing,” “sale,” or “targeted advertising” under certain privacy laws even where TCG World does not sell personal information for money. Where required, TCG World will provide opt-out rights, recognize applicable browser opt-out signals, and describe choices in this Privacy Policy and the Cookie Policy.

24Cookies, Pixels, SDKs, Local Storage, and Similar Technologies

TCG World may use cookies, pixels, tags, SDKs, local storage, session storage, device identifiers, log files, web beacons, and similar technologies on websites, account services, checkout flows, creator dashboards, support tools, emails, game clients, launchers, and related services. These technologies may be used for account login, security, fraud prevention, remembering preferences, maintaining sessions, analytics, performance measurement, advertising, retargeting, affiliate attribution, referral tracking, campaign measurement, error detection, A/B testing, and platform improvement. The TCG World Cookie Policy provides more detail about cookie categories, user choices, browser controls, consent tools, non-essential tracking, and how to manage preferences. Some cookies and technologies are necessary for security or core functionality and cannot be disabled through TCG World tools without affecting access or functionality. Non-essential cookies and similar technologies will be handled according to applicable law and consent requirements.

25Why We Use Personal Information

TCG World uses personal information to operate, provide, maintain, secure, support, improve, personalize, analyze, market, and protect the Services. This includes creating accounts, authenticating users, providing gameplay, operating virtual world features, delivering DLC and digital items, maintaining Internal Records, enabling marketplace interfaces, supporting optional public-ledger features, and responding to user requests. TCG World also uses personal information to process purchases, verify payment status, manage refunds and chargebacks, administer creator and affiliate programs, track valid referrals, calculate commissions, send operational notices, provide customer support, troubleshoot technical problems, debug crashes, measure performance, improve products, test features, and develop new services. Personal information may also be used for safety, security, legal, and compliance purposes, including preventing cheating, detecting bots, fighting fraud, enforcing rules, investigating abuse, moderating content, responding to legal requests, verifying identity or eligibility, screening sanctions risk, complying with tax obligations, preserving evidence, protecting users, and protecting TCG World and the Protected Parties. TCG World may use personal information for advertising, analytics, campaign measurement, personalization, retargeting, affiliate attribution, referral tracking, and promotional communications where permitted by law and subject to user choices that apply in the user’s jurisdiction.

26Legal Bases for Processing

Where UK, EEA, Swiss, or similar privacy laws require a legal basis, TCG World may process personal information under one or more legal bases depending on the context. These include performance of a contract, legitimate interests, consent, legal obligation, protection of vital interests, and public interest where applicable. Performance of a contract may apply where processing is needed to provide accounts, software access, gameplay, DLC, digital items, virtual land features, marketplace interfaces, support, purchases, creator features, or other Services requested by the user. Legitimate interests may apply where TCG World processes information to secure the platform, prevent fraud, detect cheating, moderate content, protect users, improve services, perform analytics, defend legal claims, enforce terms, communicate with users, measure campaigns, prevent abuse, and operate a live-service game, provided those interests are not overridden by user rights under applicable law. Consent may apply where required for non-essential cookies, certain marketing communications, certain optional features, certain public-ledger interactions, or other processing activities where law requires consent. Legal obligation may apply to tax, accounting, sanctions, law enforcement, regulatory, consumer protection, privacy rights, and similar compliance obligations.

27How We Share Personal Information

TCG World may share personal information with affiliates, subsidiaries, service providers, processors, contractors, developers, moderators, hosting providers, cloud providers, analytics providers, advertising partners, payment processors, game stores, app stores, launchers, wallet providers, public-ledger service providers, support providers, email providers, security vendors, anti-cheat providers, fraud vendors, KYC providers, sanctions screening providers, creator and affiliate platforms, Upfluence Pay, and other vendors that help operate TCG World. TCG World may share information for account operations, payment processing, digital item delivery, marketplace functionality, public-ledger feature support, creator and affiliate administration, analytics, advertising measurement, fraud prevention, anti-cheat, moderation, customer support, email delivery, hosting, storage, legal compliance, tax compliance, safety, and business operations. TCG World may also disclose information to law enforcement, courts, regulators, tax authorities, payment networks, banks, platform operators, stores, rights holders, safety organizations, professional advisors, auditors, insurers, buyers, investors, successor entities, and other parties where required or permitted by law, necessary to protect rights, or relevant to a business transaction. TCG World may make information visible to other users or the public when you use public-facing features, submit User Content, join events, stream, create public profiles, list items, display virtual land content, use creator tools, or connect public-ledger features.

28Public Areas and Information Visible to Others

Certain TCG World features are public or semi-public by design. Information that may be visible to others can include usernames, display names, avatars, public profiles, creator names, social links you choose to share, streams, clips, screenshots, land builds, signs, chat, event participation, marketplace listings, digital item displays, public-ledger addresses, and User Content. You should not post private, confidential, sensitive, financial, identity, contact, or safety-related information in public areas. TCG World may remove or restrict public content, but cannot guarantee that other users will not copy, screenshot, record, stream, share, index, archive, or misuse content that you make public or that appears in public gameplay. TCG World may use public or semi-public content for moderation, security, support, legal compliance, platform operation, development, community promotion, creator program administration, marketing, and evidence preservation, subject to the Terms and Conditions, EULA, and applicable law.

29Public-Ledger Transparency and Irreversible Records

Optional public-ledger features may involve external networks, wallet tools, explorers, indexers, marketplaces, analytics tools, and public records that TCG World does not control. Public-ledger records may include wallet addresses, transaction details, timestamps, network fees, metadata references, asset identifiers, approvals, and other public information. Public-ledger records may be permanent, searchable, linkable, copied by third parties, analyzed by external services, and associated with other information over time. TCG World cannot delete, modify, hide, reverse, or make private public-ledger records that exist outside TCG World systems. If you connect a wallet to TCG World, sign a message, claim a supported feature, use UNIT-related functionality, list or transfer a supported asset, or contact support about a public-ledger issue, TCG World may associate that wallet address and related public information with your Account, support history, eligibility records, fraud review, sanctions screening, and Internal Records.

30Advertising, Retargeting, Affiliate Attribution, and Analytics

TCG World may use advertising, analytics, measurement, and attribution tools to understand how users find TCG World, measure campaign performance, attribute creator and affiliate sales, prevent referral fraud, improve product pages, deliver relevant promotions, and evaluate marketing effectiveness. Affiliate and referral tracking may include unique links, referral parameters, cookies, click IDs, campaign IDs, timestamps, conversion events, purchase events, device or browser identifiers, anti-fraud signals, and dashboard reporting. TCG World may use this information to determine whether a sale is valid, whether commission is payable, whether fraud occurred, and whether a creator or affiliate program rule was violated. Advertising and analytics partners may collect or receive information through cookies, pixels, SDKs, tags, or similar technologies. Depending on applicable law, certain advertising or retargeting may be treated as targeted advertising, sale, or sharing. Users may have choices described in this Privacy Policy, the Cookie Policy, and any cookie preference center.

31Email, Marketing, and Operational Communications

TCG World may send operational communications, including account notices, purchase receipts, payment notices, security alerts, policy updates, support responses, enforcement notices, event notices, service announcements, legal notices, privacy notices, and communications required for account or service functionality. Users may not be able to opt out of operational communications while maintaining an Account or using certain Services. TCG World may send marketing communications, newsletters, promotional offers, event promotions, creator campaign updates, DLC announcements, product updates, partner promotions, or similar non-operational communications where permitted by law. Users may opt out of marketing emails using unsubscribe links or by contacting support@tcg.world. Opting out of marketing does not opt you out of operational, legal, security, or account-related messages. TCG World may use email analytics, pixels, click tracking, open tracking, and delivery tools to measure communication performance, diagnose delivery issues, improve messaging, prevent abuse, and maintain user preferences, subject to applicable law.

32AI, Automated Tools, Moderation, Fraud Detection, and Profiling

TCG World may use automated tools, AI-assisted systems, rules-based systems, machine-learning models, anti-cheat systems, fraud detection systems, moderation tools, support prioritization tools, safety tools, risk scoring, analytics, and human review to operate and protect the Services. Automated and AI-assisted systems may help detect cheating, bots, fraud, payment abuse, account compromise, unsafe content, predatory conduct, scams, harassment, spam, malware, prohibited claims, affiliate manipulation, referral fraud, marketplace abuse, and other violations. These systems may use account data, device data, gameplay data, telemetry, communications, User Content, payment-related events, support history, public-ledger-related information, and other signals. Automated systems may make mistakes, produce false positives, miss violations, or require human review. TCG World may use human review where appropriate, but is not required to disclose confidential security logic, risk scores, detection methods, vendor tools, or internal deliberations where disclosure would compromise security, safety, legal compliance, or platform integrity.

33Security Measures and No Guarantee of Perfect Security

TCG World uses administrative, technical, and organizational measures designed to protect personal information. These may include access controls, encryption in transit, limited access to sensitive systems, logging, monitoring, vendor review, security testing, incident response procedures, authentication tools, fraud detection, anti-cheat tools, backups, and internal policies. No online game, website, software system, payment system, wallet system, public-ledger network, data storage system, email system, or vendor platform can be guaranteed to be completely secure. Unauthorized access, phishing, malware, account compromise, device compromise, vendor failures, public-ledger risks, human error, and cyberattacks may occur despite safeguards. Users are responsible for protecting their credentials, email accounts, devices, wallets, recovery phrases, authentication tools, store accounts, platform accounts, and networks. TCG World will not ask for private wallet recovery phrases. Users should not share passwords, authentication codes, private keys, or recovery phrases with anyone.

34Data Retention

TCG World retains personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide the Services, maintain accounts, deliver purchases, operate the game, support users, comply with law, enforce agreements, prevent fraud, detect cheating, resolve disputes, preserve evidence, defend legal claims, maintain accounting records, and protect TCG World and users. Account information may be retained while an Account is active and for a period afterward as needed for account recovery, dispute resolution, fraud prevention, enforcement, legal compliance, tax compliance, audit, security, or business records. Payment and transaction records may be retained as required for tax, accounting, fraud, chargeback, refund, and compliance purposes. Support, complaint, safety, moderation, and enforcement records may be retained to investigate issues, prevent repeat abuse, protect users, comply with law, defend claims, and maintain platform integrity. Telemetry, logs, crash reports, and security signals may be retained for operational, security, analytics, and debugging periods that vary based on purpose and risk. Public-ledger records are outside TCG World control and may persist indefinitely. Deidentified, aggregated, or anonymized data may be retained indefinitely where permitted by law. Backup copies may persist for a limited time after deletion from active systems. Deletion requests may be limited by legal, security, fraud prevention, dispute, accounting, or operational needs.

35Deidentified, Aggregated, and Anonymized Data

TCG World may create, use, retain, disclose, and commercialize deidentified, aggregated, anonymized, or statistical information that does not reasonably identify a specific person, subject to applicable law. This information may be used for analytics, security, product development, business planning, investor reporting, creator program analysis, advertising measurement, performance benchmarking, fraud prevention, and operational improvement. TCG World will not attempt to reidentify information that it maintains as deidentified where prohibited by applicable law, except where necessary to test deidentification, comply with law, investigate misuse, or protect security and legal rights. Deidentified or aggregated data may be retained indefinitely and may be shared with affiliates, service providers, partners, advertisers, investors, vendors, researchers, or the public where permitted by law and where it does not reasonably identify a user.

36Your Privacy Choices

Depending on your location and applicable law, you may have choices relating to account information, marketing communications, cookies, advertising, public profile information, connected accounts, wallet connections, user content, and certain privacy rights. Choices may be available through account settings, cookie tools, device settings, browser settings, platform settings, unsubscribe links, support requests, or privacy request processes. You may opt out of marketing emails by using unsubscribe links or contacting support@tcg.world. You may manage cookies through browser controls and any TCG World cookie preference tool. You may disconnect certain linked accounts or wallets where functionality permits, although disconnecting may affect access, support, eligibility, marketplace features, or public-ledger-related functionality. Some processing is necessary for account security, authentication, purchases, legal compliance, fraud prevention, anti-cheat, support, dispute resolution, or core Services. If you decline or withdraw consent for optional processing, or if you request deletion or restriction of information needed to provide Services, some features may become unavailable.

37How to Submit Privacy Requests

You may submit privacy requests by emailing support@tcg.world with the subject line “Privacy Request.” Your request should identify the right you wish to exercise, the Account or email address involved, the country or state where you are located, and enough information for TCG World to verify your identity and process the request. TCG World may ask for additional information to verify your identity, protect account security, prevent fraudulent requests, identify records, confirm authorization, or understand the scope of the request. TCG World may refuse or limit requests where permitted by law, including where requests are unverifiable, fraudulent, excessive, repetitive, technically infeasible, harmful to others, legally restricted, or inconsistent with security, fraud prevention, legal, tax, accounting, dispute, or enforcement obligations. TCG World will respond to privacy requests within timeframes required by applicable law. Where legally permitted, TCG World may extend response periods, charge reasonable fees for excessive or unfounded requests, or decline requests that cannot be verified or are not required to be honored.

38Identity Verification, Authorized Agents, and Appeals

To protect users and TCG World, we may verify identity before responding to access, deletion, correction, portability, opt-out, or other privacy requests. Verification may require confirming control over an email address, logging into an Account, providing account details, confirming recent transactions, providing jurisdiction information, or using a verification provider where appropriate. If you use an authorized agent to submit a request, TCG World may require proof that you authorized the agent, may require the agent to verify identity, and may require you to confirm the request directly unless prohibited by law. TCG World may deny agent requests that cannot be verified or that appear fraudulent, abusive, or unauthorized. Where applicable law provides an appeal right, you may appeal a denied privacy request by contacting support@tcg.world and stating that you are appealing a privacy decision. TCG World will review appeals according to applicable law and may require additional information to process the appeal.

39U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under state privacy laws. Depending on your state and the applicability of the law to TCG World, these rights may include the right to access personal information, confirm processing, correct inaccurate personal information, delete personal information, obtain a portable copy of personal information, opt out of sale, opt out of sharing, opt out of targeted advertising, opt out of certain profiling, limit certain sensitive information uses, appeal a denial, and not be discriminated against for exercising rights. TCG World will honor applicable U.S. state privacy rights where legally required. Rights may be subject to exceptions for security, fraud prevention, legal compliance, tax, accounting, dispute resolution, enforcement, free expression, public information, public-ledger records, and other permitted purposes. TCG World does not sell personal information for money. Some advertising, analytics, retargeting, and attribution activities may be considered sale, sharing, or targeted advertising under certain U.S. state laws. Where required, TCG World will provide opt-out mechanisms and honor recognized browser-based opt-out preference signals as required by applicable law.

40California Notice at Collection

For California residents, this section provides notice of categories of personal information TCG World may collect, the purposes for collection and use, and the categories of parties to whom information may be disclosed. TCG World may collect identifiers, account information, contact information, commercial information, payment-related records, internet or network activity, device information, geolocation inferred from IP address, audio or visual information where users submit it or use voice features, professional or creator-related information, inferences, and sensitive personal information where necessary for verification, compliance, security, or payments. Categories of sources may include you, your device, your Account activity, your purchases, your gameplay, your support submissions, other users, creators, affiliates, payment processors, stores, platforms, Upfluence Pay, analytics providers, advertising partners, fraud vendors, identity vendors, public-ledger records, public sources, and service providers. Business and commercial purposes may include operating the Services, providing accounts, processing purchases, delivering digital items, maintaining Internal Records, providing support, securing the platform, preventing fraud and cheating, moderating content, protecting users, complying with law, administering creator and affiliate programs, measuring advertising, personalizing experiences, improving products, and conducting business operations. Categories of recipients may include affiliates, service providers, contractors, payment processors, hosting providers, analytics providers, advertising partners, security vendors, anti-cheat vendors, fraud vendors, identity vendors, Upfluence Pay, stores, platforms, wallet providers, public-ledger services, professional advisors, law enforcement, regulators, tax authorities, and parties involved in business transfers.

41California Sale, Sharing, Targeted Advertising, and Sensitive Information Rights

TCG World does not sell personal information for money. However, California and other privacy laws may define “sell,” “share,” or “targeted advertising” to include certain disclosures to advertising, analytics, measurement, and retargeting partners. If TCG World engages in activity that qualifies as sale, sharing, or targeted advertising under applicable law, you may have the right to opt out. California residents may submit opt-out requests by contacting support@tcg.world or by using any “Do Not Sell or Share My Personal Information” or cookie preference tool that TCG World makes available. Where required by law, TCG World will also honor applicable opt-out preference signals, such as Global Privacy Control, in a manner required by applicable law and technically feasible for the relevant browser, device, or service. TCG World may collect sensitive personal information in limited contexts, such as account login credentials, precise information you voluntarily submit, government identification information where verification is required, payment-related information handled by providers, approximate location, wallet-related information, and safety or compliance records. TCG World uses sensitive personal information for permitted purposes such as providing services, security, fraud prevention, identity verification, legal compliance, payment processing, user safety, and platform integrity. Where applicable law gives a right to limit certain sensitive information uses, TCG World will honor that right as required by law. TCG World will not discriminate or retaliate against users for exercising privacy rights protected by applicable law. However, certain features, services, purchases, support processes, public-ledger features, creator or affiliate program features, security processes, or account functions may be unavailable, limited, delayed, or discontinued if the requested privacy action prevents TCG World from processing information needed to provide, secure, verify, support, or legally operate those features.

42UK, EEA, and Swiss Privacy Rights

Users in the United Kingdom, European Economic Area, and Switzerland may have rights under applicable data protection laws. These may include the right to access personal data, correct inaccurate data, delete data, restrict processing, object to processing, obtain data portability, withdraw consent where processing is based on consent, object to direct marketing, and lodge a complaint with a supervisory authority. These rights may be subject to limitations and exceptions, including legal compliance, fraud prevention, security, public-ledger records outside TCG World control, dispute resolution, exercise or defense of legal claims, tax and accounting obligations, and the rights of other users. TCG World may require identity verification before honoring requests. Where processing is based on legitimate interests, users may object as permitted by law. Where processing is based on consent, users may withdraw consent at any time, but withdrawal does not affect processing that occurred before withdrawal and may affect access to optional features. Operational, security, legal, and transactional communications may continue where lawful and necessary.

43International Data Transfers

TCG World operates internationally and may transfer, store, access, or process personal information in countries other than the country where you are located. These countries may include the United States, The Bahamas, and countries where TCG World affiliates, service providers, hosting providers, payment providers, support providers, analytics providers, security vendors, or other vendors operate. Where required by applicable law, TCG World may use appropriate transfer mechanisms, such as Standard Contractual Clauses, data processing agreements, transfer impact assessments, adequacy decisions, user consent, performance of contract, legal necessity, or other lawful transfer mechanisms. International transfers may involve risks because laws in other countries may differ from those in your country. TCG World will take steps required by applicable law, but no transfer, storage, or processing system can be guaranteed to eliminate all risk.

44Children’s Privacy and Adult-Only Platform Notice

TCG World is intended for adults only. Users must be at least 18 years old or the age of legal majority in their jurisdiction, whichever is greater. TCG World is not directed to children and does not knowingly collect personal information from children in a manner intended for child-directed services. If TCG World learns or reasonably believes that a person under the required age has created an Account, accessed the Services, submitted personal information, made a purchase, connected a wallet, joined a creator or affiliate program, or otherwise interacted with TCG World in violation of the Terms, TCG World may restrict, suspend, terminate, delete, or preserve the Account and related records as appropriate under law, safety requirements, refund rules, fraud prevention, chargeback handling, and legal obligations. Parents or guardians who believe a minor has provided personal information to TCG World may contact support@tcg.world. TCG World may require verification and additional information to identify the relevant Account or records. Because TCG World is an adult platform, adults, parents, guardians, device owners, household members, and account holders are responsible for preventing unauthorized access by minors through devices, payment methods, wallets, emails, store accounts, and platform accounts.

45Third-Party Services, Links, Stores, Wallets, and Platforms

TCG World may link to or integrate with third-party services, including game stores, app stores, launchers, payment processors, wallet providers, public-ledger networks, public-ledger explorers, marketplaces, analytics providers, advertising partners, livestreaming platforms, social media platforms, Discord, YouTube, Twitch, Kick, X, Upfluence Pay, customer support tools, identity providers, and other external services. Third-party services may collect, use, share, retain, and protect information under their own privacy policies and terms. TCG World does not control independent third-party data practices, security, privacy settings, account decisions, content moderation, payment decisions, wallet behavior, store rules, or platform policies. Users should review third-party privacy policies, settings, and terms before using external services, connecting accounts, connecting wallets, following links, making purchases, or participating in campaigns. TCG World is not responsible for third-party privacy or security failures except where liability cannot be limited by law.

46Business Transfers and Corporate Transactions

TCG World may disclose or transfer personal information in connection with a merger, acquisition, financing, investment, due diligence, reorganization, restructuring, asset sale, bankruptcy, insolvency, change of control, corporate transaction, affiliate transfer, vendor transition, or sale or transfer of all or part of TCG World business or assets. Personal information may be disclosed to buyers, sellers, investors, lenders, advisors, auditors, attorneys, insurers, successor entities, affiliates, service providers, or other parties involved in the transaction. TCG World may also retain copies where needed for legal, tax, accounting, dispute, fraud prevention, or business continuity purposes. If a transfer results in a material change to the handling of personal information, TCG World will provide notice where required by applicable law.

47Legal, Safety, Compliance, and Law Enforcement Disclosures

TCG World may preserve, access, use, or disclose personal information where required or permitted by law, or where TCG World believes disclosure is reasonably necessary to comply with legal process, respond to law enforcement, respond to regulators, satisfy tax obligations, enforce agreements, protect rights, protect users, protect payment systems, prevent fraud, detect cheating, investigate safety issues, respond to emergencies, or protect TCG World and Protected Parties. TCG World may disclose information to courts, arbitrators, regulators, tax authorities, law enforcement, payment processors, banks, card networks, stores, platform operators, safety organizations, rights holders, professional advisors, auditors, insurers, fraud vendors, anti-cheat vendors, security vendors, and other parties where appropriate. TCG World may preserve or disclose records without notifying you where notice is prohibited by law, would compromise an investigation, would create risk to users or TCG World, would expose confidential security methods, would be impractical, or is not required by law.

48Region-Specific Terms and Non-Waivable Rights

Privacy rights, obligations, and terminology vary by jurisdiction. This Privacy Policy is intended to apply to the maximum extent permitted by law. Nothing in this Privacy Policy is intended to limit rights that cannot legally be limited or waive obligations that cannot legally be waived. Where applicable law requires a different privacy notice, consent, right, process, disclosure, retention period, transfer mechanism, or remedy, TCG World will comply to the extent required for the specific user, region, transaction, feature, or processing activity. Any required accommodation does not create a broader voluntary policy or remedy for other users or regions unless TCG World states otherwise. TCG World may provide region-specific notices, consent flows, cookie choices, opt-out tools, privacy request processes, or supplemental disclosures where required or appropriate.

49Changes to This Privacy Policy

TCG World may update this Privacy Policy from time to time to reflect changes in law, technology, products, services, business operations, data practices, vendors, advertising tools, public-ledger features, creator programs, payment processes, support tools, or security requirements. TCG World may provide notice of changes by posting the updated Privacy Policy on the website, changing the effective date, sending email notice, presenting an in-platform notice, updating account or launcher notices, or using other reasonable methods. Where required by law, TCG World will provide additional notice or obtain consent for material changes. Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated policy. If you do not agree with the updated policy, you must stop using the Services, subject to any surviving obligations under the Terms and Conditions and EULA.

50Contact Information

For privacy questions, privacy requests, privacy complaints, data access requests, deletion requests, correction requests, opt-out requests, cookie preference questions, authorized agent requests, appeal requests, or other privacy-related inquiries, contact TCG World at support@tcg.world. Please use the subject line “Privacy Request” for privacy rights requests. Include your Account email, username, country or state of residence, the right you wish to exercise, and enough information for TCG World to verify your identity and locate relevant records. Do not include passwords, private keys, wallet recovery phrases, unnecessary government identification, or sensitive information unless TCG World specifically requests it through a secure process. TCG World may require verification before responding to requests involving personal information, Account information, payment-related records, wallet-related records, support records, safety records, enforcement records, or other sensitive information.

51Detailed Categories of Personal Information

TCG World may collect categories of personal information that are common to online game, software, website, account, payment, creator, affiliate, advertising, public-ledger, and support operations. These categories include identifiers, contact information, account credentials, device identifiers, internet or network activity, commercial information, payment-related records, gameplay information, user-generated content, communications, support records, fraud and security signals, compliance information, approximate location, public-ledger information, creator and affiliate information, and inferences drawn from activity. The exact categories collected depend on how you use TCG World. A user who only visits the website may generate website analytics, cookie, device, and approximate location data. A user who creates an Account may provide email, username, credential, profile, age, region, and login data. A user who purchases DLC may generate order, receipt, payment status, billing region, tax, fraud, refund, and chargeback records. A user who connects a wallet may generate wallet address, signature, public transaction, public-ledger, eligibility, and risk-screening records. A creator or affiliate may generate application, social profile, referral, commission, payout, tax, and campaign records. TCG World may also create derived information or inferences, such as fraud risk indicators, account risk status, creator conversion metrics, referral validity determinations, likely region, campaign source, user segment, product preference, gameplay engagement, enforcement status, support priority, security risk, suspected automation, or account compromise indicators. These inferences are used for operations, security, personalization, analytics, advertising, creator program administration, and legal compliance.

52Detailed Sources of Personal Information

TCG World obtains personal information from multiple sources. The most direct source is the user, when the user registers, provides an email address, creates a username, contacts support, makes a purchase, submits a report, applies to a creator program, uploads content, enters an event, connects a wallet, signs a message, submits feedback, or otherwise provides information intentionally. TCG World also receives information automatically from devices, browsers, game clients, launchers, servers, cookies, local storage, security tools, anti-cheat systems, crash-reporting tools, logs, analytics tools, fraud detection systems, and similar technologies. Automatic collection helps TCG World operate the Services, prevent unauthorized access, debug errors, detect cheating, improve performance, maintain account security, and protect the game economy. TCG World may receive information from third parties, including payment processors, game stores, app stores, launchers, platforms, public-ledger services, wallet providers, Upfluence Pay, affiliate tracking providers, advertising partners, analytics providers, fraud vendors, identity verification vendors, sanctions screening vendors, users who submit reports, creators who submit content, law enforcement, regulators, public sources, and business partners. TCG World may combine information from these sources where necessary or appropriate for the purposes described in this Privacy Policy.

53Detailed Business and Commercial Purposes

TCG World processes personal information for business and commercial purposes including account creation, authentication, software access, game access, website operation, purchase processing, DLC delivery, digital item access, virtual land functionality, marketplace interface operation, event operation, creator program administration, affiliate attribution, referral tracking, customer support, product improvement, analytics, advertising, security, anti-cheat, fraud prevention, compliance, and legal protection. TCG World processes information to protect the integrity of the Services. This includes detecting account compromise, suspicious logins, bot activity, automation, cheating, unauthorized tools, modified clients, private servers, false reports, harassment, predatory conduct, payment fraud, chargeback abuse, creator fraud, affiliate fraud, referral manipulation, marketplace abuse, public-ledger risk, and unauthorized commercial activity. TCG World processes information for business development, product planning, financial reporting, investor analysis, platform growth, creator campaign performance, marketing measurement, product testing, feature development, user engagement analysis, and similar internal purposes. Where feasible and appropriate, TCG World may use aggregated or deidentified information for these purposes.

54Detailed Disclosure Categories

TCG World may disclose identifiers, account data, device data, support data, transaction data, gameplay data, creator data, affiliate data, advertising data, public-ledger data, and security data to service providers, processors, contractors, affiliates, and vendors that support the Services. These parties may include hosting providers, database providers, customer support vendors, analytics providers, email providers, payment processors, fraud vendors, anti-cheat vendors, identity vendors, KYC vendors, sanctions screening vendors, cookie consent tools, advertising partners, and creator or payout platforms. TCG World may disclose personal information to external parties that users intentionally interact with, such as public profile viewers, marketplace participants, other users, livestream viewers, social platforms, wallet providers, public-ledger networks, game stores, app stores, payment platforms, creator tools, and connected account providers. These disclosures may occur because the user chooses to use public or connected features. TCG World may disclose personal information to legal, tax, compliance, and safety recipients such as courts, arbitrators, regulators, law enforcement, tax authorities, payment networks, banks, rights holders, safety organizations, professional advisors, auditors, insurers, investors, acquirers, and successor entities where required or permitted by law or necessary to protect TCG World, users, or the Services.

55Data Needed for Core Services

Some personal information is necessary for TCG World to provide core Services. Without certain account, device, authentication, payment, entitlement, gameplay, security, and support information, TCG World may not be able to create an Account, authenticate a user, deliver software access, provide game access, process purchases, deliver DLC, display digital items, provide support, protect security, or maintain Internal Records. TCG World may require users to provide and maintain accurate account and contact information. If required information is missing, unverifiable, false, outdated, or inconsistent with TCG World records, features may fail, support may be delayed, purchases may not complete, payouts may be withheld, public-ledger features may not function, and TCG World may restrict access. Users who request deletion, restriction, objection, withdrawal of consent, or opt-out of certain processing should understand that some requests may make it impossible or impractical for TCG World to provide certain Services. TCG World may close accounts, disable features, deny support, or retain necessary records where allowed or required by law.

56Data Needed for Security, Anti-Cheat, Fraud Prevention, and Safety

TCG World relies on security, anti-cheat, fraud prevention, and safety processing to operate a fair and secure live-service game. This processing may include account identifiers, device identifiers, IP addresses, gameplay activity, transaction records, public-ledger data, file integrity checks, process indicators, crash logs, behavioral signals, chat or voice records where enabled and lawful, support history, user reports, and vendor risk scores. TCG World uses this information to detect unauthorized access, account compromise, bots, modified clients, private servers, exploit use, duplication glitches, reward manipulation, marketplace manipulation, affiliate fraud, referral fraud, chargeback abuse, scams, harassment, predatory conduct, and other activity that can harm users or the Services. Security and anti-cheat processing may result in warnings, restrictions, feature blocks, payment review, payout holds, claim denial, item reversal, commission reversal, device bans, wallet restrictions, IP restrictions, Account suspension, Account termination, platform reports, legal claims, or law enforcement referrals. TCG World is not required to disclose confidential detection methods, vendor tools, algorithms, thresholds, source code, or risk models.

57Data Needed for Public-Ledger Features and UNIT

Optional public-ledger features and UNIT-related functionality may require processing wallet addresses, connection status, signed messages, public transaction information, eligibility records, claim status, metadata display records, fraud signals, sanctions review, marketplace interactions, and support records. This information may be associated with an Account when a user connects a wallet or seeks support involving a wallet or public-ledger feature. TCG World may use wallet and public-ledger information to verify eligibility, prevent fraud, enforce rules, screen risk, maintain Internal Records, support user requests, display supported assets, provide optional functionality, comply with law, and protect TCG World from public-ledger-related disputes. TCG World may refuse or limit support where wallet control cannot be verified, records are inconsistent, fraud risk exists, or legal or security concerns apply. Users should understand that public-ledger addresses are not private in the same way as ordinary account data. Public-ledger records may be copied, indexed, analyzed, and linked by third parties without TCG World involvement. TCG World cannot guarantee that a wallet address will remain unassociated with an identity once a user connects it, publishes it, uses it publicly, or contacts support about it.

58Data Needed for Creator and Affiliate Programs

Creator, affiliate, influencer, and streamer programs require additional processing because TCG World must approve participants, create or track links, attribute valid sales, prevent fraud, calculate commissions, enforce disclosure rules, monitor brand safety, process payouts through providers, and resolve disputes. TCG World may process creator applications, social handles, channel URLs, audience metrics, campaign assignments, referral IDs, click data, conversion data, commissions, payout status, fraud indicators, content review notes, prohibited-claim records, support messages, termination records, and clawback information. TCG World may also share program information with Upfluence Pay or other providers that administer onboarding, tax forms, and payouts. Creators and affiliates are responsible for complying with applicable advertising, endorsement, tax, platform, and privacy obligations. TCG World may use creator and affiliate data to investigate undisclosed promotions, fake traffic, bot clicks, self-dealing, coupon abuse, cookie stuffing, misleading claims, child-directed marketing, prohibited UNIT claims, or other violations.

59Data Needed for Advertising, Attribution, and Growth

TCG World may process advertising, analytics, and attribution information to measure growth and marketing performance. This may include referral source, campaign ID, click ID, landing page, time of visit, conversion event, purchase event, device type, browser, approximate region, cookie identifiers, ad identifiers, and interactions with marketing emails or ads. TCG World uses this data to understand which campaigns produce registrations, purchases, DLC sales, creator conversions, affiliate conversions, newsletter signups, event participation, and other outcomes. This helps TCG World decide where to advertise, how to improve product pages, how to compensate affiliates, how to detect invalid traffic, and how to communicate with users. Where advertising or attribution involves non-essential cookies, retargeting, cross-context behavioral advertising, targeted advertising, sale, or sharing under applicable law, TCG World will provide applicable notices and choices through this Privacy Policy, the Cookie Policy, cookie preference tools, “Do Not Sell or Share” tools, browser opt-out signals, or other legally required mechanisms.

60Account Closure, Deletion, and Continuing Records

Closing an Account, uninstalling the Software, disconnecting a wallet, opting out of marketing, or requesting deletion does not automatically delete every record associated with a user. TCG World may retain records where needed for legal compliance, tax, accounting, payment disputes, chargebacks, fraud prevention, anti-cheat, enforcement history, safety investigations, support records, public-ledger features, internal audit, business continuity, or defense of legal claims. TCG World may delete or deidentify certain account data where required by law and where deletion does not conflict with permitted retention purposes. However, some information may remain in backups for a limited time, in deidentified or aggregated form, in legally required records, in security records, in transaction records, in support history, or in public-ledger records outside TCG World control. If deleting information would prevent TCG World from providing an Account, purchase access, support, public-ledger-related features, marketplace features, creator program access, or other Services, TCG World may close or restrict the Account or feature rather than continue providing the Service without necessary data.

61Privacy Limits in a Live-Service Online Game

TCG World is a live-service online game and virtual world. Unlike a purely static website, the Services involve real-time gameplay, multiplayer interactions, public profiles, user-generated content, chat or voice features where enabled, streaming, marketplace interfaces, creator campaigns, affiliate attribution, public-ledger features, anti-cheat systems, and ongoing security monitoring. These features create privacy limitations. Usernames, avatars, public content, gameplay, streams, land builds, marketplace displays, public-ledger addresses, user reports, and public interactions may be visible to others. Safety and anti-cheat systems may require monitoring, logging, analysis, and evidence preservation. Public-ledger networks may make wallet and transaction data visible outside TCG World control. Users who participate in public, social, creator, marketplace, or optional public-ledger features should expect that some information may be visible, recorded, copied, indexed, or further disclosed by others. TCG World may provide controls where available, but cannot guarantee complete privacy in public or multiplayer environments.

62No Private Key or Wallet Recovery Phrase Collection

TCG World does not need and will not ask for your private keys, wallet recovery phrases, seed phrases, or full wallet credentials. You should never provide private keys, recovery phrases, seed phrases, or authentication codes to TCG World personnel, support channels, creators, affiliates, moderators, community members, or anyone claiming to represent TCG World. TCG World may ask for wallet addresses, public transaction hashes, screenshots, signed messages, or other verification materials when reviewing public-ledger-related support requests, but it will not require disclosure of private keys or wallet recovery phrases. Anyone asking for those materials is likely attempting fraud or impersonation. Users are solely responsible for securing wallets, private keys, recovery phrases, devices, browser extensions, approvals, signatures, and public-ledger interactions. TCG World cannot recover lost keys, reverse mistaken transactions, restore compromised wallets, or remove public-ledger records outside TCG World control.

63Privacy by Platform, Store, Device, and Region

TCG World may offer different versions of the Services through different websites, stores, launchers, platforms, devices, and regions. Each version may involve different data collection, store requirements, platform telemetry, payment providers, age rules, advertising tools, public-ledger feature availability, cookie controls, consent flows, and privacy notices. For example, a website version may use web cookies, analytics, affiliate tracking, and payment checkout tools. A game client may use telemetry, crash logs, anti-cheat signals, and gameplay logs. A store version may involve store account IDs, store purchase records, store refund rules, and store telemetry. A creator program may involve referral tracking and payout provider records. Optional public-ledger features may involve wallet addresses and public transaction data. TCG World may provide different notices, controls, feature availability, opt-out methods, and consent mechanisms depending on the platform, store, device, region, legal requirement, and technical feasibility.

64Accessibility, Support, and Special Request Information

If users contact TCG World about accessibility, disability-related access, safety, support needs, technical issues, or special circumstances, they may choose to provide information that is sensitive or personal. TCG World will use that information to review the request, provide support where appropriate, evaluate feasibility, comply with legal obligations, and protect users and the Services. Users should provide only the information needed to evaluate the request. TCG World does not require users to provide unnecessary medical details, sensitive documents, or private information unless legally or operationally necessary for a specific request. TCG World may retain request records for support, legal, accessibility, compliance, safety, and dispute purposes. Accessibility or support requests do not guarantee a particular outcome, feature change, refund, account restoration, content restoration, public-ledger support, or custom accommodation except where required by law.

65Maximum Protective Interpretation of Privacy Practices

This Privacy Policy is intended to provide transparent notice while preserving TCG World ability to operate and protect a live-service online game, virtual world, website, software client, creator program, affiliate program, marketplace interface, and optional public-ledger feature set. If more than one lawful basis, purpose, retention reason, disclosure category, or exception applies, TCG World may rely on all applicable grounds to the fullest extent permitted by law. If any provision of this Privacy Policy is found unenforceable, overbroad, or limited by applicable law, that provision should be interpreted or modified to the maximum extent permitted by law while preserving TCG World legitimate operational, security, compliance, safety, and legal interests. All other provisions remain in effect. Nothing in this Privacy Policy limits TCG World rights under the Terms and Conditions, EULA, Cookie Policy, creator terms, purchase terms, platform rules, applicable law, equity, or signed written agreements. Nothing in this Privacy Policy creates a refund right, software right, account right, marketplace right, public-ledger right, creator payout right, or support right beyond what is expressly required by applicable law or written agreement.

66Final User Acknowledgment

By using TCG World, you acknowledge that TCG World may collect, use, share, retain, protect, and otherwise process personal information as described in this Privacy Policy. You acknowledge that TCG World is a live-service online game and virtual world platform that may involve accounts, game clients, downloadable content, digital items, virtual land features, marketplace interfaces, creator programs, affiliate tracking, analytics, advertising, public communications, optional public-ledger features, UNIT-related functionality, support systems, moderation systems, anti-cheat systems, fraud detection, and third-party providers. You acknowledge that public areas, user interactions, creator content, streams, marketplace displays, public-ledger records, wallet addresses, and third-party platforms may involve privacy risks outside TCG World complete control. You should use caution when sharing information, connecting accounts, connecting wallets, interacting with other users, approving wallet prompts, participating in creator campaigns, or using external services. This Privacy Policy is intended to be comprehensive, cumulative, transparent, and protective. It does not reduce any protection, disclaimer, limitation, ownership right, enforcement right, or remedy provided to TCG World under the Terms and Conditions, EULA, Cookie Policy, applicable law, platform rules, or any written agreement signed by an authorized officer of TCG World.

67Appendix A. Category Mapping for California and Similar U.S. Privacy Laws

The following table summarizes common statutory categories of personal information that TCG World may collect, use, disclose, or share depending on the user, feature, region, and applicable law. This table is intended to supplement the sections above and should be read together with the full Privacy Policy.

Identifiers

Examples: Name, email, username, Account ID, IP address, device identifiers, platform IDs, wallet address where connected. Purposes: Account operation, authentication, support, security, purchases, public-ledger features, analytics, advertising, compliance. Categories of recipients: Service providers, affiliates, payment providers, stores, analytics partners, advertising partners, security vendors, platforms, legal recipients.

Commercial information

Examples: Purchases, DLC, receipts, refunds, chargebacks, marketplace interactions, commission records, referral conversions. Purposes: Process transactions, deliver services, administer commissions, prevent fraud, maintain records, comply with law. Categories of recipients: Payment providers, stores, Upfluence Pay, affiliates, accountants, auditors, fraud vendors, legal recipients.

Internet or network activity

Examples: Logins, page views, clicks, gameplay events, launcher activity, server logs, cookie data, referral tracking. Purposes: Operate services, analytics, security, advertising, attribution, anti-cheat, support, product improvement. Categories of recipients: Hosting providers, analytics partners, advertising partners, anti-cheat vendors, fraud vendors, affiliates.

Geolocation information

Examples: Approximate location inferred from IP address, billing country, region settings, jurisdiction information. Purposes: Regional access, compliance, fraud prevention, localization, tax, store rules, analytics. Categories of recipients: Service providers, payment providers, fraud vendors, analytics providers, legal recipients.

Audio, electronic, or visual information

Examples: Voice chat if enabled, uploaded videos, screenshots, streams, support attachments, User Content. Purposes: Moderation, safety, support, creator programs, marketing, legal compliance, platform operation. Categories of recipients: Moderation vendors, support providers, platforms, legal recipients, users where public.

Professional or partner information

Examples: Creator profiles, social handles, audience information, applications, campaign participation, payout status. Purposes: Approve creators, administer affiliate links, measure campaigns, pay commissions, enforce rules. Categories of recipients: Upfluence Pay, affiliates, analytics providers, payment providers, legal and tax recipients.

Sensitive personal information

Examples: Account login data, identity verification information where required, payment-related data handled by providers, approximate location, wallet-related information. Purposes: Security, identity, age, eligibility, fraud prevention, payments, compliance, legal obligations. Categories of recipients: Identity vendors, payment providers, fraud vendors, compliance vendors, legal recipients where required.

68Appendix B. Privacy Request Instructions

Email support@tcg.world with the subject line “Privacy Request.” Include your Account email, username, state or country of residence, the right you are exercising, and a clear description of the request. Do not send passwords, private keys, wallet recovery phrases, unnecessary identification documents, or sensitive information unless TCG World specifically requests it through a secure process. If you are requesting access, deletion, correction, portability, opt-out, or appeal, TCG World may verify your identity before processing the request and may refuse unverifiable, fraudulent, excessive, repetitive, or legally restricted requests. If your request relates to public-ledger records, understand that TCG World cannot delete or alter public records maintained outside TCG World systems, but may review whether TCG World-controlled account records can be addressed under applicable law.