Last updated: 2025-10-08

This privacy policy (“Privacy Policy”) explains how GFAL GULF GAMES FZCO (“GFAL”, “we”, “our”), a company incorporated under the laws of the United Arab Emirates, processes your personal data when you use or interact with our Games (“Game” or “Games”).

Who is responsible for processing your data?

The data controller is the one who decides the purpose for which your personal data is used, in this case, GFAL GULF GAMES FZCO, a company incorporated under the laws of the United Arab Emirates, with registered offices at Unit No.: 05-PF-CWC122, Detached Retail 05, Plot No.: Level No 1, Jumeirah Lakes Towers, Dubai, United Arab Emirates, Registration Number DMCC199814, and License Number DMCC-934923; duly represented by Mr. Manuel Sort González in his capacity as Manager.
You can contact the Data Protection Officer (“DPO”) of GFAL GULF GAMES FZCO at the following email address: dpo@gfal.com

What data is processed at GFAL GULF GAMES FZCO?

Personal data (“Data”) is any information about an identified or identifiable natural person (the “Data Subject” or “Data Owner”). The personal data processed by GFAL GULF GAMES FZCO comes from the information that you, as a User, provide us when filling out the forms found on the Game(s), when browsing the Game(s), when registering for our programs and/or making purchases through the Game(s), and/or when sending us your inquiries or requests for information. In addition, if you choose to create a Wallet through GFAL ID, it will provide us with your Wallet Address along with your email address.

In each form, GFAL GULF GAMES FZCO indicates the contact information that is mandatory to be able to respond to your inquiry or request with an asterisk. Data that is not marked as mandatory through an asterisk is completely optional. Only the necessary data for each purpose is collected. Please note that if you do not provide the mandatory information, GFAL GULF GAMES FZCO may not be able to respond to your inquiry or request or manage the processing.

Specifically, we process the following information about you:

• Communication data: email address.
• Navigation data: IP address.

To access certain services provided through this Game, you may be required to provide personal data. In compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its Executive Regulations (Cabinet Decision No. 32 of 2022). Where applicable, if you are located in the European Economic Area, we also comply with Regulation (EU) 2016/679 (the “GDPR”), we inform you that the personal data you submit via forms on this Game will be processed by GFAL GULF GAMES FZCO, located in the UAE, as the data controller responsible for the Game(s)’ operation and infrastructure.

The data will be used solely for the purpose of managing your access to our services, maintaining the functionality of the platform, and providing you with information and updates about improvements to the Game(s).

What is the purpose of GFAL GULF GAMES FZCO processing your data?

GFAL GULF GAMES FZCO will process your Data for the following purposes:

• SUBSCRIPTION TO THE NEWSLETTER. In the event that you want to receive commercial communications or newsletters about GFAL GULF GAMES FZCO, its programs and events, GFAL GULF GAMES FZCO will use your contact information to manage the sending of these communications.

• NAVIGATION THROUGH OUR Game. Through the use of cookies and other technologies, GFAL GULF GAMES FZCO can measure and analyze navigation traffic, usability, and your experience as a User on the Game(s) statistically. The installation and use of cookies depend on the configuration you make both in the cookie banner and through your browser.

What is the legitimacy for the processing of your data?

The processing of your personal data is primarily based on your consent, except when processing is necessary to perform a contract to which you are a party, to respond to your inquiries, or to comply with a legal obligation under UAE law. You may withdraw your consent at any time as described below. Unless you revoke your consent given through registration in the corresponding forms, at any time proceeding as indicated below: free of charge and without the need to provide any justification, you can request not to receive commercial communications by sending us an email to dpo@gfal.com mentioning “opt-out” in the subject of your email. Alternatively, you can use the voluntary opt-out procedure provided in any promotional message you receive from us.

Alternatively, you can use the voluntary opt-out procedure provided in any promotional message you receive from us.

Please note that opting not to receive promotional messages from us will not prevent you from receiving information related to any contract you have entered into with us.

Likewise, the processing of your Data when you contact GFAL GULF GAMES FZCO may be based on the execution of pre-contractual measures or on the legitimate interest of GFAL GULF GAMES FZCO in addressing the inquiry.

This consent is managed in accordance with the UAE PDP Law and can be withdrawn at any time through your browser or cookie settings.

It will also be necessary, as indicated in the previous section 3, your consent for the use of your data collected through non-mandatory Cookies as indicated in the Cookie Policy. This will be obtained, where appropriate, through the Cookie banner at the start of the Game(s) and/or through the Cookie Settings.

How long are your data kept?

Your data will be kept for the necessary period to fulfill the purpose for which it was collected, specifically:

Regarding the data you provide to GFAL GULF GAMES FZCO for inquiries, requests, or contacting GFAL GULF GAMES FZCO, we will process the data for as long as necessary to respond to your inquiry or request and/or grant you access to the services, as well as, if applicable, for the time necessary to address any claims or queries from you.

Regarding the sending of communications, the data will be processed until you revoke your consent, object to the processing, and/or request the deletion of your personal data, for a maximum period of two years.

Once the data is no longer necessary for the purpose for which it was processed, it will be kept blocked solely for the purpose of addressing any liability or obligations that may arise from the processing, in accordance with the legally established deadlines.

To which recipients will your data be communicated?

Your data may be communicated to third-party service providers who provide a service to GFAL GULF GAMES FZCO in order for the latter to carry out its activities, such as IT tools, technical support services, payment providers, financial services, etc.

Some of the mentioned providers may process data outside the United Arab Emirates. GFAL GULF GAMES FZCO ensures that any transfer of personal data outside the UAE complies with the requirements of the UAE Data Office under the UAE PDP Law. In particular, transfers are only made to countries or entities that provide an adequate level of protection, or where appropriate safeguards are implemented to protect your data.

Where personal data of users located in the European Economic Area is transferred, GFAL GULF GAMES FZCO also applies the safeguards required by the GDPR, such as standard contractual clauses.

To receive more information about these transfers or the safeguards used, you can contact GFAL GULF GAMES FZCO at dpo@gfal.com

In cases where it is necessary to comply with GFAL GULF GAMES FZCO’s legal obligations, the data may be disclosed to public administration and law enforcement authorities.

Registration and monitoring of corporate accounts on web social networks

In the case of the profiles maintained by GFAL GULF GAMES FZCO on different social media platforms linked from this Game, for example, through plugins or third-party applications, your data may be subject to the privacy policies of the owners of those social media platforms.

The use of these connectors is voluntary. If you choose to use them, you will be authorizing the communication of your personal data (IP address, browsing data) to the respective social media platforms, and GFAL GULF GAMES FZCO will not be responsible for any further processing that they may carry out with your data. GFAL GULF GAMES FZCO recommends that you review the terms and conditions of use of those platforms prior to interacting with GFAL GULF GAMES FZCO profiles on social media.

The profiles on social media platforms linked from this Game have been created to provide you with better insight into our activities and offer different communication channels for individuals interested in our organization and the services we provide.

Security Measures

GFAL GULF GAMES FZCO places special emphasis on ensuring the security of your personal data. Your data is stored in GFAL GULF GAMES FZCO’s information systems, where security measures, both technical and organizational, have been implemented to prevent any loss or unauthorized use by third parties. For example, GFAL GULF GAMES FZCO’s Games use HTTPS data encryption protocols.
These measures comply with the requirements set out in the Executive Regulations of the UAE PDP Law.

Which are your rights?

As a data subject, you have the right to:

• request access to your personal data;
• request correction or deletion of inaccurate or outdated data;
• request restriction of processing;
• object to processing in certain circumstances; and
• request data portability, where applicable.

You can also withdraw your consent at any time. Once you do so, we will stop processing your data unless it is required for legal or contractual reasons.

PTo exercise these rights, please contact the Data Protection Officer (DPO) at dpo@gfal.com, attaching a copy of an identification document and indicating “Data Protection” in the subject line.

To exercise these rights, please write to the Games for a Living Data Protection Officer (DPO), attaching a copy of an identification document, at the following email address: dpo@gfal.com. To help process your request, please indicate “Data Protection” in the subject line.

If you have any questions regarding the exercise of your rights, before contacting the supervisory authority, GFAL GULF GAMES FZCO reminds you that you can directly consult the DPO of GFAL GULF GAMES FZCO, who will try to assist you in the best possible way.

Finally, you have the right to lodge a complaint with the competent data protection authority in the United Arab Emirates — the UAE Data Office, established under Federal Decree-Law No. 45 of 2021 (the UAE PDP Law) — if you believe your personal data has been processed in breach of the applicable law.