1. Who we are
TuniGamers (tunigamers.com) operates this website and is the data controller responsible for the personal data processed in connection with it.
For privacy matters, contact [email protected].
2. What data we collect
We collect only the data needed to operate the Site, deliver your orders and prevent fraud:
- Account data: name, email, password (hashed), preferred currency and language.
- Order data: billing address, products purchased, payment method, order amount, order history.
- Payment data: we do not store full card numbers or CVV. Card payments are handled by certified processors (PayPal, etc.). We store transaction IDs and the masked metadata returned by the processor (last 4 digits, country of issue, payer email/name as supplied to the processor).
- Technical data: IP address, browser user agent, device fingerprint, login timestamps. Used for fraud prevention and abuse mitigation.
- Communications: support tickets, chat transcripts, emails you send us.
- Cookies: see our Cookie Policy.
3. Why we use it (legal basis)
- Performance of contract — processing your orders, delivering keys, providing customer support.
- Legal obligation — tax records, accounting, responding to lawful authority requests.
- Legitimate interests — fraud prevention, payment-dispute defence, securing the Site, preventing abuse, improving service.
- Consent — for marketing emails (optional, you can unsubscribe at any time) and for non-essential cookies.
4. Who we share it with
We do not sell your personal data. We share data only with parties strictly needed to deliver the service:
- Payment processors (PayPal and similar) to process your payment.
- Game-key suppliers and authorised distributors to fulfil orders.
- Email and infrastructure providers (hosting, transactional email).
- Fraud-prevention services we may use (such as IP-reputation databases).
- Authorities when required by law.
Some of these processors are based outside Tunisia, including in the European Union and the United States. They handle data under their own published privacy policies and applicable data-protection laws.
5. How long we keep it
- Account data — for as long as your account is active, plus up to 3 years after closure.
- Order & transaction records — up to 10 years (legal & accounting retention).
- Fraud-prevention logs (IP, device, blocklist entries) — up to 5 years.
- Marketing & analytics data — until you unsubscribe or withdraw consent.
6. Your rights (EU / UK / similar)
If your data is protected by the GDPR or a comparable framework, you have the right to: access your data, rectify it, erase it (where no overriding obligation applies), restrict processing, object to processing, request portability, and lodge a complaint with your national data-protection authority.
To exercise any of these rights, email [email protected] from the address on file. We may need to verify your identity before acting.
7. Security
We protect your data with industry-standard measures: TLS encryption in transit, hashed passwords, restricted access to production data, security headers (CSP, HSTS), rate-limiting on authentication endpoints. No system is perfectly secure; please choose a strong, unique password and notify us at once if you suspect a breach affecting your account.
8. Children
The Site is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.
9. Changes
We may update this policy. Changes are published on this page with a new effective date. Material changes affecting your rights will, where required by law, be notified to you by email.
10. Contact
Questions or requests: [email protected].