Personal data processing policy

This is a translation for your convenience. If there is any difference, the Spanish version prevails.

This policy explains how R1 Games collects, uses, stores and protects its customers' personal data, under Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other applicable Colombian regulations.

1. Data controller

2. Data we collect

When you place an order we ask for:

• Full name.
• ID or passport number.
• Phone / WhatsApp and email.
• Country and city.

We also store the order details: games and account type chosen, date, amounts, coupon used and order status, and the date and time you authorized the processing of your data.

We never ask for the passwords of your personal gaming accounts, and we never see or store card details. If you pay by bank transfer, we verify it on WhatsApp. If you pay online, your payment details go directly to Wompi, and we only receive the status, method and amount of the transaction.

If you sign in with your email, we store that email and an account identifier so you can see your orders. Signing in is required to pay online, but not to buy on WhatsApp.

3. What we use your data for

• To create, verify and deliver your digital orders.
• To contact you on WhatsApp or by email about your purchase.
• To handle warranties, questions and complaints.
• To identify the buyer and prevent fraud or impersonation. For this reason the ID number is required on every purchase.
• To meet legal, accounting and tax obligations.

We don't sell or give your data to third parties, and we don't use it for purposes other than the ones described here.

4. Data stored in your browser and cookies

So you don't lose your purchase if you leave the page by mistake, the store saves in your own browser (local storage) your cart, the account type chosen and the coupon for 7 days, the form details you typed (name, phone, email, country and city) so you don't have to type them again, the language you chose and, if you signed in with your email, your session. Your ID number is never saved in your browser. You can delete this information at any time from your browser settings. We don't use advertising cookies.

Google Analytics. If you accept the cookie notice, we use Google Analytics to know how many people visit the store, which games they view and how many purchases are completed. It stores cookies in your browser and sends Google browsing data such as pages viewed, your device type and your approximate location. We don't send it your name, ID, phone or email. If you don't accept, it isn't loaded. You can change your choice at any time with the “Cookies” link at the bottom of the store.

5. How we protect your data

• The store only works over an encrypted connection (HTTPS, TLS 1.2 or higher).
• The ID number is stored encrypted (AES-256-GCM). The admin panel only shows the last 4 digits; seeing the full number requires the administrator password and every lookup is logged.
• The admin panel is password-protected and blocks repeated attempts with a wrong password.
• Only the controller has access to the database and the panel.

6. Where your data is stored

The store uses Microsoft Azure cloud services. The database is located in Brazil (Brazil South region) and the web application runs in the United States (Central US region). This means an international transfer or transmission of data, carried out with a provider that applies security and confidentiality measures to the information.

Sign-in is handled by Supabase, which stores your email and account in Brazil (São Paulo region). Online payments are processed by Wompi, in Colombia.

The store's images and data are stored in Microsoft Azure services with restricted access: the database only accepts connections from the application itself and from the controller's computer.

For technical operation, basic data about each visit is logged (IP address, date, page visited and errors) for security and troubleshooting. The store loads its fonts from Google Fonts, so your browser connects to Google servers when you open the page. If you accept cookies, Google Analytics, a Google service, processes the browsing data described in section 4 and may do so outside Colombia.

7. How long we keep your data

We keep your data for as long as you keep using the products you bought from us (for example, while the account we gave you is still active or under warranty), because we need it to support you, verify your identity and handle complaints.

When you stop using our products, or earlier if you ask us, we delete or anonymize your data: your name, ID, phone, email, country and city are deleted and the order is kept without details that identify you. We will only keep information the law requires us to keep (for example, accounting or tax records), and only for the period that law requires.

8. Your rights

As the data owner you can:

• Know, update and correct your data.
• Ask for proof of the authorization you gave us.
• Know how we have used your data.
• Revoke the authorization and ask us to delete your data, when there is no legal or contractual duty to keep it.
• File complaints with Colombia's Superintendence of Industry and Commerce (SIC).
• Access your data free of charge.

9. How to make requests and complaints

Write to sntiajoforex@gmail.com with your name, the phone or email you used to buy, what you are requesting and, if it is a complaint, the facts and documents that support it.

• Requests: answered within 10 business days of receipt at most (extendable by 5 more business days, telling you why).
• Complaints (correction, update, deletion or non-compliance): answered within 15 business days at most (extendable by 8 more business days, telling you why). If the complaint is incomplete we will ask you for what is missing within the following 5 days.

10. Changes to this policy

We may update this policy because of legal or technical changes or changes in how the store works. The current version will always be published on this page with its update date.