Privacy Policy

Last updated: June 20, 2026

1. Who is responsible (controller)

Play Jogos is the controller of the personal data processed on this portal — that is, the party that decides how and why your data is used. The contact and identification details of the portal's operator are available on the Contact page. The address is Porto Velho, RO.

2. Data we collect

2.1. Data you provide to us

• Registration and profile: name/nickname, e-mail, country, city/state, Discord, games of interest, avatar and bio.
• Verified contact: phone and/or WhatsApp — required to use the Marketplace and to register servers.
• Social login: when you sign in with Google or Twitch, we receive the name, e-mail and picture provided by those providers.
• Generated content: comments, posts, marketplace listings, chat messages, votes, polls, videos and reviews.
• Payments: the data needed to process purchases (handled by Mercado Pago — see section 7).
• Newsletter: the e-mail you provide to receive communications, when you subscribe.

2.2. Data collected automatically

• Technical and browsing data: IP address, country of access, device and browser type, pages visited and date/time.
• Browser identifier (anti-fraud): the first time you access the portal, we store a cookie with a random code that identifies the browser — not your name, e-mail or any personal data. It is used exclusively to prevent one person from creating several accounts to claim codes, wheel spins and giveaway entries more than once. This history is visible only to the administration and is deleted automatically after 180 days without use.
• Cookies and identifiers: for session, security and metrics (see section 4).
• Audit logs: records of sensitive actions (moderation, votes, payments, role changes) for security and legal compliance.

Sensitive data such as e-mail, phone, WhatsApp and IP are never shown on your public profile.

3. What we use it for and legal bases

We process your data for specific purposes, supported by legal bases under the LGPD (art. 7):

• Creating and managing your account and providing the portal's features — performance of a contract.
• Security, fraud and abuse prevention (captcha, rate limiting, phone verification, logs) — legitimate interest and compliance with a legal obligation.
• Content moderation and enforcement of the portal's rules — legitimate interest and performance of a contract.
• Processing payments for products and services — performance of a contract and legal/tax obligation.
• Metrics and service improvement (analytics) — consent (cookies) and legitimate interest.
• Communications and newsletter — consent, revocable at any time.
• Complying with legal obligations and exercising rights in proceedings — legal compliance and regular exercise of rights.

4. Cookies and Google Analytics

We use cookies and similar technologies to: keep you signed in (session), ensure security and measure use of the portal. We use Google Analytics to understand how the site is used in aggregate. When you visit, you see a cookie notice and can accept or refuse metrics cookies. Essential cookies (session and security) are required for the portal to work and cannot be disabled. You can also manage cookies in your browser settings.

Among the essential cookies is the multi-account prevention one: a random code per browser, without any personal data, that lets us identify when several accounts from the same device try to claim the same benefit. It is not used for advertising nor shared with third parties.

5. Who we share it with

We do not sell your personal data. We share only what is necessary with service providers (processors) that help us run the portal, under security and confidentiality obligations:

• Supabase — database, authentication and storage.
• Cloudflare — anti-bot verification (Turnstile) and image storage/delivery (R2/CDN).
• Mercado Pago — payment processing (PIX and card).
• Google — metrics (Google Analytics) and Google sign-in.
• Twitch — Twitch sign-in.
• Upstash — request rate limiting (anti-abuse protection).
• Discord and YouTube — embedded content and community.
• Public authorities — when required by law or court order.

6. International transfer

Some of the providers above may process data on servers outside Brazil. In those cases, we adopt the safeguards set out in the LGPD to ensure an adequate level of protection for your data.

7. Payments

Payments are processed by Mercado Pago. We do not store card data on our servers — that data is handled directly by Mercado Pago, under its own privacy policy. We keep only the transaction information needed for order control, benefit activation and tax obligations.

8. How long we keep it

We keep your data while your account is active and for as long as necessary for the purposes described. After the account is closed, we may retain certain data for legal periods (for example, access logs for at least 6 months under the Internet Civil Framework, and tax documents for the applicable periods), or to exercise rights. Once those periods end, the data is deleted or anonymised.

9. Security

We adopt technical and organisational measures to protect your data, including: encryption in transit (HTTPS), hashed password storage, database access protection through security policies (RLS), anti-bot verification, rate limiting and audit logs. No system is 100% secure; if a relevant incident occurs, we will act in accordance with the LGPD and notify those affected and the ANPD where applicable.

10. Your rights (data subject)

The LGPD (art. 18) guarantees you the right, at any time, to request:

• Confirmation that we process your data and access to it;
• Correction of incomplete, inaccurate or outdated data;
• Anonymisation, blocking or deletion of unnecessary data or data processed in breach of the law;
• Portability of the data to another provider;
• Deletion of data processed on the basis of consent;
• Information about who we share your data with;
• Withdrawing consent at any time (e.g. unsubscribing from the newsletter);
• Information about the possibility of not consenting and the consequences of that.

You can exercise these rights through the channels on the Contact page. You can also edit most of your data directly in My Account.

11. Children and teenagers

The portal is not intended for those under 13 years old, who must not create an account. Processing of children's and teenagers' data observes their best interest (art. 14 of the LGPD) and depends on the consent of at least one parent or legal guardian. Purchases and payments require legal age (18) or the guardian's authorisation/assistance. If we identify an irregular registration by a minor, we may suspend the account and delete the data.

12. Changes

We may update this Policy to reflect changes to the portal or to the law. The “last updated” date at the top indicates the version in force. Relevant changes may be announced on the portal.

13. Contact and Data Protection Officer (DPO)

For questions, requests about your data or to talk to our Data Protection Officer (DPO), use the channels on the Contact page. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).

See also our Terms of Use and the Advertising Policy.