User privacy policy
Last updated on September 2026
Introduction
At PlaySafe ID Ltd ("we", "us", or "our"), we are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, share, and process your personal information when you:
Visit or use https://playsafeid.com/ (“Website”);
Visit or use https://app.playsafeid.com/ (“Platform”);
Interact with us via our Website, email, telephone, post or other communication methods such as social media; and
Create, log in and/or use your PlaySafe ID (“User” or “you”).
Who We Are
We are the data controller of your personal data for the purposes of data protection law. If you have any queries about this privacy policy or our data protection practices, please contact us at complaints@playsafeid.com.
Collection of Personal Data
We collect the following personal data:
Personal and contact information such as: name, email address, and date of birth.
Account information such as: unique ID for any game account you connect to your PlaySafe ID, confirmation of successful ID verification (such ID verification is conducted by our third party service providers).
Biometric data: we may receive your biometric data (e.g., an alpha-numeric representation of facial data or an encrypted and sealed biometric token) for the purposes of retaining a record of users who have had a PlaySafe ID. This biometric data is pseudonymised and cannot be converted back into an image or face.
Penalty records: If you are issued a penalty for rule violations or prohibited behaviours, we retain the following:
The penalty record, including the date it was issued, the category of the offence, and evidence related to the penalty.
Pseudonymised biometric references created at the time of verification.
Identifiers of game accounts connected to your PlaySafe ID at the time of the penalty.
Your date of birth for identity matching and duplicate prevention purposes.
Your email address to correspond with you about the penalty, appeals, and the status or eventual deletion of these records.
Technical information collected from your device when you are browsing on our Website, Platform, or our digital communications such as emails. This includes: your IP address, your location (by country, state and city), device type, browser type, operating system, interaction with, and responses to, our marketing communication and activity on our Website and Platform. Please see our cookies policy for more information.
Communications between you and us such as: by email, Website and social media.
Other: any other information you voluntarily provide
How We Collect Data
We collect personal data from a variety of sources such as:
from you directly when you create an account with us as a User, contact us as a a User, add a game account to your PlaySafe ID.
from information we generate about you during our relationship with you such as: technical data collected from cookies and other similar technologies which are described in our Cookies Policy when you use our Website and Platform; and
from information we collect about you from third parties such as: developers who use our services by integrating PlaySafe ID into their games to facilitate PlaySafe Protected matchmaking (“Developers”) and to enforce penalties for rule violations such as notifying us of any cheating offences; and confirmation of your ID verification and biometric data (e.g. a numerical face representation or an encrypted token) from our third party service providers who assist us such as for ID verification purposes.
Purposes of Processing Data
Your personal data may be used by us for the following purposes and lawful bases.
Please note if you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as providing you with a PlaySafe ID to access a game), or we may be prevented from complying with our legal obligations (such as to ensure safety).
| Purpose | Types of information we may use | Lawful basis |
|---|---|---|
| To create and manage a User’s PlaySafe ID account. | Personal and contact details Account information Technical information Biometric Data Penalty Record Information from third parties |
To comply with our contractual obligations to you to create and manage your account. It is also in our legitimate interest and third parties (such as Developers of games) to ensure your account functions properly and securely to allow you access to a game. When processing biometric data and in some cases, the processing of penalty records which may include criminal offence data, we rely on legal grounds, such as substantial public interest. Where we rely on substantial public interests, such interests are:
|
| To respond to your enquiries and communications via the Website, email, telephone, post, or social media. | Personal and contact information Account information Communications Technical information Information from third parties Other information you voluntarily provide |
It is in our legitimate interest to respond to your communications and provide customer support. |
| To monitor and improve your experience on our Website, Platform and digital communications (e.g., emails). | Personal and contact information Account information Communications Technical information Information from third parties Other information you voluntarily provide |
It is in our legitimate interest to monitor user behaviour to improve and personalise your experience on our Website, Platform and digital communications as well as to conduct research, analytics and measure performance in relation to the running of our business, Website and Platform so that we can understand any issues. We rely on your consent to deploy non-strictly necessary cookies and similar technologies. You have the right to withdraw consent at any time. |
| To comply with legal and regulatory requirements, including ID verification processes. | Personal and contact information Account information Communications Technical information Information from third parties Other information you voluntarily provide |
To comply with legal obligations and ensure regulatory compliance. |
| To communicate important updates about your account, our services, or changes to our terms and policies. | Personal and contact information Account information Communications Technical information |
To comply with our contractual obligations to keep you informed about your account and our services. It is also in our legitimate interest to ensure you are aware of important updates. |
| To operate our business in an efficient, safe and lawful way and protect it from fraudulent or unlawful activity. | Personal and contact details Account information Technical information Communications Information from third parties Other information you decide to provide |
It is in our legitimate interest to operate our business in an efficient, safe and lawful way and protect it from fraudulent or unlawful activity. For example, to exercise our legal rights, detect, prevent and respond to:
In some cases, we are under a legal obligation (whether by legislation, a regulatory authority or a court order). While we do not routinely process personal data related to criminal convictions or special categories of personal data such as ethnicity, religion or health data, where we do for this purpose, we do for the establishment, exercise or defence of legal claims. |
| To promote our products, services, events or other news about our business. | Personal and contact details Account information Technical information Communications |
For users, we send emails to market our Discord server or new games that may integrate PlaySafe ID into their games. This is on the basis of your consent which you may withdraw at any time without affecting the lawfulness of the consent provided before its withdrawal. Where we send users emails about our service such as technical updates, we rely on our legitimate interests to provide users with such updates. |
| To share and receive personal data with third parties such as service providers and Developers. | Account information Technical information Penalty Record Information from third parties |
It is in our legitimate interest and the interests of third parties to share data with service providers who assist us in delivering our services and Developers who use our Services, such as:
|
| To handle reports of prohibited behaviours and enforce penalties (e.g., temporary or permanent bans). | Personal and contact information Account information Information from third parties Technical information Penalty Record Biometric Data Communications |
It is in our legitimate interest and those of third parties such as Developers to ensure the integrity of PlaySafe Protected games and services by investigating reports and enforcing penalties. When processing biometric data and in some cases, the processing of penalty records which may include criminal offence data, we rely on legal grounds, such as substantial public interest. Where we rely on substantial public interests, such interests are:
|
Data Sharing
We may also disclose your personal data with other third parties, for example:
Companies that help us: such as our third-party ID verification partners (e.g., Onfido, Incode) to verify a user’s identity and we receive confirmation of a successful ID verification. This is on the basis of our legitimate interests and of third parties, to carry out our services.
Our professional advisers: including accountants, lawyers and other professional advisers that assist us in carrying out our business activities.
Group companies we work closely with: for security, improving our products and services, and internal reporting, based on our legitimate business interests.
In the context of a transaction: we may share your personal data with potential partners and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business. This is on the basis of our legitimate interests for our business operations and the legitimate interests of third parties such as those in connection with the transaction.
Government authorities, law enforcement, fraud prevention agencies and relevant third parties. This is on the basis of our legitimate interests for the establishment, exercise or defence of legal claims to protect our business.
In compliance with applicable legal and regulatory obligations: we may share your personal data with law enforcement agencies, courts, government authorities or other third parties where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of a third party.
International Transfers
For customers living within the UK or the European Economic Area (EEA) your personal information will only be processed within the UK and EEA. However, we may work with international third parties, which could mean your information is transferred to countries outside the UK and EEA that may not offer the same level of data protection.
As such, if we transfer personal information outside the UK or EEA, we will implement appropriate and suitable safeguards to ensure that such personal information will be protected as required by applicable data protection law.
In these cases, we rely on approved data transfer mechanisms, including legal exceptions, adequacy decisions, recognised frameworks (e.g. the EU-US Data Privacy Framework), and standard contractual clauses. If you are located in the UK or the EEA, you may contact us for a copy of the safeguards.
Data Retention
We will retain your personal data for only as long as necessary in line with our retention criteria taking into consideration: legal obligations, best industry practice, limitation periods, our business needs and for the establishment, exercise or defence of a legal claims.
This is subject to the Penalty Records section below, which explains what we retain, and for how long, following a request to delete, object to, or withdraw consent to the processing of your personal data.
Your Rights
You have certain rights with respect to your personal information. These may include the rights to access, correct, delete, restrict or object to our use of, or the processing of your personal data. You may also request a portable copy of your personal data in a usable electronic format. Where you have provided your consent to any use of your personal data, you can withdraw this consent at any time without affecting the lawfulness of any processing undertaken prior to you withdrawing such consent.
Please note, that these rights are not absolute - they may only apply in certain circumstances and are subject to certain exemptions.
For example, where you ask us to delete your personal data, withdraw your consent, or object to our processing of your personal data, we will action your request without undue delay and in any event within one month (which we may extend by a further two months where the request is complex or we have received a number of requests from you, or where we pause the process to seek clarification of your request or to request a copy of your ID).
Following such a request, we will delete or anonymise your game connection and activity history (other than evidence relating to any penalty on your account), display name, preferences and settings, marketing data, and other personal data as set out in our internal deletion log. Your account will no longer be usable to access PlaySafe Protected games or services, although you may still be able to sign in.
However, we will retain a limited record relating to you (the "Penalty Record") containing only: the penalty record issued to you, including the offence category and the date you were notified of it (and of its retention period); the evidence relating to that penalty; pseudonymised biometric references created at verification, comprising an encrypted token that only our third party verification provider can decrypt with the reference we provide and under specific circumstances, and an alpha-numeric embedding held by that provider, neither of which can be turned back into a face or image; the identifiers of any game accounts connected to your PlaySafe ID at the time of the penalty; your date of birth, retained for identity-matching and duplicate-account-prevention purposes; and your email address, retained solely so we can correspond with you about the penalty, any appeal, and the status and eventual deletion of the Penalty Record.
The Penalty Record is retained for as long as necessary in line with our retention criteria described under Data Retention above.
The rights to erasure (Article 17 UK GDPR), to object (Article 21 UK GDPR) and to withdraw consent (Article 7 UK GDPR) are not absolute. The right to erasure applies only in certain circumstances, such as where you withdraw consent and there is no other legal ground for the processing, or where you object and we have no overriding legitimate grounds to continue. The right to object applies only where we process your personal data for direct marketing purposes, or where we do not have a compelling legitimate ground which overrides your interests, rights or freedoms. The right to withdraw consent applies only where our processing is based on your consent.
The Penalty Record is not processed on the basis of your consent. We rely on other legal grounds, together with compelling legitimate grounds that override your interests, rights and freedoms, namely:
Article 6(1)(f) UK GDPR (legitimate interests), given the legitimate interests we and the third parties to whom we provide our services (such as games) have in maintaining the integrity of PlaySafe Protected games and services; and
Article 9(2)(g) UK GDPR (substantial public interest), together with one or more of the following conditions under Schedule 1 to the Data Protection Act 2018, as applicable to the Penalty Record in question:
Paragraph 18 (safeguarding of children and individuals at risk): retention and processing of a Penalty Record is necessary for the purposes of protecting children and individuals at risk from harm, must be carried out without your consent because obtaining your consent would prejudice that protection, and is necessary for reasons of substantial public interest, including so that individuals penalised for harmful conduct towards children or individuals at risk cannot re-enter protected environments;
Paragraph 10 (preventing or detecting unlawful acts): retention and processing of a Penalty Record is necessary for the purposes of preventing or detecting an unlawful act, must be carried out without your consent so as not to prejudice those purposes, and is necessary for reasons of substantial public interest;
Paragraph 12 (regulatory requirements relating to unlawful acts): retention and processing of a Penalty Record is necessary for the purposes of complying with, or assisting other persons (such as the games and third parties we offer our services to) to comply with, a regulatory requirement which involves establishing whether another person has committed an unlawful act or has been involved in dishonesty, malpractice or other serious improper conduct, must be carried out without your consent so as not to prejudice the prevention or detection of further unlawful acts, and is necessary for reasons of substantial public interest; and
Paragraph 11 (protecting the public against dishonesty): retention and processing of a Penalty Record is necessary for the exercise of a protective function, such as our function of protecting members of the public, including other players in a game, against dishonesty, malpractice or other seriously improper conduct, or against unfitness or incompetence, and this must be carried out without your consent so as not to prejudice the exercise of that function, and is necessary for reasons of substantial public interest.
Complaints
In the UK, if you are not satisfied with our response, you may escalate the matter via our complaints procedure by contacting us. During this process we will acknowledge your complaint within 30 days, make enquiries into the complaint without undue delay and make an appropriate level of enquiries.
To do so, please contact us at complaints@playsafeid.com, providing full details of your complaint. We are committed to resolving any concerns promptly and transparently.
If after the complaints process, you remain dissatisfied, you have the right to lodge a complaint with the UK data protection regulator is the Information Commission, see www.ico.org.uk. If you are in the EU, you do not need to escalate the matter via our complaints process and you can complain to the data protection regulator in the country you live or work in. For the EU, a list of supervisory authorities and their contact details can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Use of cookies
We use cookies to enhance your experience, remember your preferences, and for measurement purposes related to our advertising strategies. Please see our cookies policy for more information.
Children
We are committed to ensuring the safety and privacy of children who use our services. PlaySafe ID is designed to protect children by allowing only verified Users to participate in PlaySafe Protected games and services.
PlaySafe ID does not knowingly collect, store, or process any data from children under the age of 13 without their parent or legal guardian’s consent.
If a child is under 13 of years age or is over 13 years of age and does not have the necessary identification to create an account, a parent or legal guardian must create and verify their own account first. Parents can then create a child’s PlaySafe ID by providing minimal information, such as the child’s age and an email address. This ensures that children can enjoy a safe and secure gaming experience without exposing unnecessary personal data.
All children’s accounts are linked to a parent or guardian’s verified account for supervision and management. Any User found engaging in inappropriate behaviour towards children, such as grooming or sexual misconduct, will be permanently barred from accessing PlaySafe Protected games or services.
Changes to the Privacy Policy
We will notify you of any changes to our privacy policy via email and by posting a notice on our Website and Platform.