Privacy Policy

This Privacy Policy explains how we collect, use, share, and store your information, including personal data, when you use the website ggstand.com (the “Website”) and related services.

The Data Controller is ITSFAIL LTD, a company incorporated in England and Wales under company number 13246765, with registered address: 16 John Nicholas Crescent, Ellesmere Port, Cheshire, United Kingdom, CH65 2DL.

When you use payment services, certain information, including personal data, may also be processed by ITSFALL OÜ, registration number 171381261, registered at: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50-201, 10152, Estonia, acting as a Data Controller for payments (“Payment Data Controller”) where applicable.

In this Privacy Policy, “we”, “us”, or “our” refers to ITSFAIL LTD as the company responsible for your information under this Privacy Policy. Contact details are provided in Section 9 below.

1. 1. Information we collect
   1. We may collect your personal information that can be used to identify you, including but not limited to your first name, last name, date of birth, contact details, billing and delivery information, payment details, and any other information that you choose to provide to us when using the Website and our services (“Personal Information”).
   2. We may also collect information that you provide in surveys, contests, support requests, and feedback forms, including contact information (such as name, email address, mailing address, telephone number) and demographic information (such as country or age).
   3. In addition, when you use the Website, our servers automatically collect certain technical and usage information, including:
      • IP address and approximate location;
      • access time and date, visited pages, language used, and referrer URL;
      • device information, browser type and version, operating system;
      • log files, software crash reports, and other diagnostic data;
      • information about your interactions with the Website, such as clicks and game/lootbox activity.
      This log information is unique to you and is critical for providing our services as well as for security and fraud-prevention purposes.
   4. In some cases, we may use third-party verification services and anti-fraud providers to check your identity, age, address, and other registration data provided by you, and to verify that your use of the Website and financial transactions comply with our Terms of Use and applicable law. In this context, limited Personal Information may be disclosed to such third parties solely for verification and anti-fraud purposes.
2. 2. Purpose of processing your information
   1. We process your Personal Information to operate the Website and provide you with our services. In particular, we use your information for the following purposes and legal bases:
   2. 2.1. With your consent (and until it is withdrawn), for example:
      • to send you marketing communications, promotions, and news about our services;
      • to use optional cookies and similar technologies for analytics and personalization;
      • to conduct surveys, contests, and promotional campaigns.
   3. 2.2. For the performance of a contract with you, including:
      • creating and managing your account on the Website;
      • processing payments, deposits, and withdrawals;
      • providing access to cases, loot boxes, and other in-game items;
      • providing customer support and resolving disputes;
      • notifying you about changes to our services, policies, or technical issues.
   4. 2.3. To comply with legal obligations, including:
      • compliance with anti-money laundering, counter-terrorist financing, and sanctions legislation;
      • fulfilling tax, accounting, and reporting obligations;
      • responding to lawful requests from courts, regulators, or law-enforcement authorities.
   5. 2.4. For our legitimate interests, provided that they are not overridden by your rights, including:
      • maintaining and improving the Website and our services;
      • preventing fraud, abuse, and cheating, including misuse of bonuses and multi-accounts;
      • monitoring technical performance and security of our systems;
      • performing analytics, statistics, and game balancing;
      • protecting our legal rights and defending against claims.
      If our legitimate interests require further clarification or are unclear to you, you may contact us for additional information (see Section 9).
3. 3. How long we store your information
   1. We store your Personal Information only for as long as it is necessary to fulfill the purposes described in this Privacy Policy, unless a longer storage period is required or permitted by law.
   2. As a general rule, we store your account-related Personal Information for the entire period of your account’s activity and for up to 1 year after your account is closed or becomes inactive, unless applicable law requires a different retention period.
   3. Certain information, including transaction data and financial records, may be stored for up to 10 years after account closure if required for compliance with legal obligations (including accounting, anti-money laundering, and taxation rules).
   4. We may store log data and technical information for shorter periods where it is needed for security, fraud-prevention, and system integrity purposes.
   5. When Personal Information is no longer required, we will delete it or anonymize it so that it can no longer be associated with you.
4. 4. Your rights
   1. Depending on your country of residence and applicable law (including the GDPR and UK GDPR), you may have the following rights in relation to your Personal Information:
   2. 4.1. Right of access – to obtain confirmation whether we process your Personal Information and to receive a copy of such data.
   3. 4.2. Right to rectification – to request correction of inaccurate or incomplete Personal Information about you.
   4. 4.3. Right to erasure (“right to be forgotten”) – to request deletion of your Personal Information in certain cases (for example, where data are no longer needed or where you withdraw your consent), provided that no legal obligations require us to retain this data.
   5. 4.4. Right to restriction of processing – to request that we temporarily restrict processing of your Personal Information under certain conditions.
   6. 4.5. Right to data portability – to receive your Personal Information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
   7. 4.6. Right to object – to object to our processing of your Personal Information based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.
   8. 4.7. Right to withdraw consent – where processing is based on your consent, you may withdraw such consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
   9. 4.8. Right to lodge a complaint – you have the right to lodge a complaint with a competent supervisory authority if you consider that we have violated your data protection rights.
   10. To exercise your rights, please contact us using the details specified in Section 9 below. We may need to verify your identity before responding to your request.
5. 5. Your consent to data processing and its withdrawal
   1. Where our processing of your Personal Information is based on your consent, such consent is given freely, specifically, informed, and unambiguously by you, for example by ticking a box, clicking a button, or adjusting your account or browser settings.
   2. You may withdraw your consent at any time by:
      • changing your account settings (where applicable);
      • using “unsubscribe” links in marketing emails; or
      • contacting us directly by email (see Section 9).
      After withdrawal of consent, we will stop processing your Personal Information for the relevant purposes, unless we have another legal basis for such processing.
   3. Please note that if you withdraw consent or refuse to provide certain data, we may be unable to provide some services or features of the Website.
6. 6. Security
   1. We take the security of your Personal Information seriously and implement appropriate technical and organizational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
   2. Your Personal Information is stored in secure databases within our protected network and is accessible only to authorized personnel who require such access to perform their duties.
   3. While we strive to protect your Personal Information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we continually work to improve our security practices.
7. 7. Automated decision-making and profiling
   1. We may use automated tools and profiling techniques to:
      • monitor and detect suspicious activity, fraud, and abuse of our services;
      • apply risk scores to transactions and accounts to prevent cheating and misuse of bonuses or multi-account schemes;
      • personalize certain aspects of your experience on the Website (for example, language, content, or offers).
   2. Such processing is carried out based on our legitimate interests in protecting our business and other users, as well as to comply with legal and regulatory obligations.
   3. Where automated decision-making has legal or similarly significant effects on you, we will implement safeguards required by applicable law and you may request human intervention, express your point of view, and contest the decision.
8. 8. International transfers
   1. We may store and process your Personal Information on servers located in the United Kingdom, the European Union, and other countries where we or our partners, suppliers, or service providers operate.
   2. When transferring Personal Information outside the European Economic Area or the United Kingdom, we ensure that appropriate safeguards are in place, such as:
      • an adequacy decision by the European Commission or UK Government; or
      • standard contractual clauses or other lawful transfer mechanisms.
   3. You can contact us for more information about international transfers of your Personal Information and the safeguards applied.
9. 9. Contact and complaints
   1. If you have any questions, requests, or complaints regarding this Privacy Policy or our processing of your Personal Information, you may contact us:
   2. By email: ggstandoff@ggstand.com
   3. By post (Data Controller – ITSFAIL LTD):
      ITSFAIL LTD
      Company number 13246765
      16 John Nicholas Crescent
      Ellesmere Port, Cheshire
      United Kingdom, CH65 2DL
   4. By post (Payment Data Controller – ITSFALL OÜ):
      ITSFALL OÜ
      Harju maakond, Tallinn, Kesklinna linnaosa
      Vesivärava tn 50-201, 10152
      Estonia
   5. We will do our best to respond to your request or complaint within a reasonable time and in accordance with applicable data protection laws.
10. 10. Changes to this Privacy Policy
    1. We may update or amend this Privacy Policy from time to time, for example to reflect changes in our practices, legal requirements, or technical developments.
    2. The updated Privacy Policy will be published on the Website with a new “Version date”. We encourage you to review this page regularly to stay informed about how we process your Personal Information.
    3. If the changes are significant, we may also notify you via email or through your account on the Website where appropriate.
11. 11. Data protection legislation
    1. We process your Personal Information in accordance with applicable data protection laws, including, where relevant, the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and other local laws.
    2. For more information about the GDPR, you may visit the official information portal: https://gdpr-info.eu/