Privacy Policy

1. Contact channel

The channel for questions, requests, and exercise of rights related to personal data is support@cs2club.com.

2. Data that may be processed

CS2CLUB may process identification and registration data needed to operate the account. On Steam login, data from the integration may be processed, such as Steam identifier, public name, avatar, and other information needed to authenticate and operate the account.

Technical and security data may also be processed (IP address, access logs, device, browser, date and time, technical identifiers, and relevant events), as well as Platform-use data, including history of deposits, case openings, Upgrade, battles, Arena, rewards, sales, inventory, Swap, withdrawals, and other account operations.

Payment data may be processed by CS2CLUB and the contracted payment gateway, according to each party’s role. KYC data and documents are processed with support from a specialized third-party provider; CS2CLUB may receive results, status, and information needed for validation and to meet its obligations.

3. Purposes of processing

Data may be used to create, authenticate, and administer accounts; carry out deposits, operations, deliveries, and withdrawals; keep activity history; provide support; perform KYC; prevent fraud, abuse, and unauthorized access; investigate failures and disputes; meet legal obligations; exercise rights; improve Platform security and operation; and send permitted communications.

CS2CLUB may use data for promotional communications and digital marketing, subject to unsubscribe options and applicable legal requirements. Where appropriate, processing is limited to what is adequate and necessary for the corresponding purpose.

4. Legal bases

Processing may take place on the legal bases provided in applicable law, according to the purpose and nature of the processing. Those bases may include performance of a contract, compliance with a legal or regulatory obligation, regular exercise of rights, legitimate interest where applicable, and consent when that is the appropriate basis.

Using consent for a given purpose does not mean every other processing activity depends on the same legal basis.

5. KYC and identity verification

Identity verification is carried out with support from a specialized third-party company. The amount and nature of data requested may vary according to security, fraud-prevention, legal, and operational requirements.

CS2CLUB will seek to limit its access to KYC documents and information to what is needed for validation, security, support, fraud prevention, and applicable obligations. The KYC provider may process data according to its own legal and contractual obligations.

6. Payments

Deposits and other financial operations may be processed by a contracted third-party payment gateway. The gateway may receive and process data needed to execute, secure, prevent fraud in, and evidence transactions.

CS2CLUB must not request or store payment data beyond what is needed for the operation and the records it is legally required to keep. Information about specific providers may be updated when vendors change.

7. Data sharing

Personal data may be shared, when necessary, with KYC providers, the payment gateway, Steam, hosting and infrastructure providers, security tools, support, analytics, advertising, and digital marketing. Sharing occurs only to the extent needed for the corresponding purpose, subject to applicable security and data-protection obligations.

Data may also be shared when required by law, court order, or competent authority, or when needed for fraud prevention, protection of rights, and security. CS2CLUB does not represent that it sells users’ personal data to advertisers.

8. Cookies

CS2CLUB only uses cookies and similar technologies that are essential to running the platform: language, sign-in session, security, and recording this consent. Details are in the Cookie Policy. We do not use advertising, remarketing, or social-network cookies.

9. Marketing and communications

CS2CLUB may send communications related to the account, security, transactions, and service operation, as well as promotional communications through permitted channels such as email and other means you provide.

You may opt out of promotional communications via an unsubscribe mechanism or support@cs2club.com. Opting out of marketing does not stop essential communications related to the account, security, operations, or legal obligations.

10. Storage and retention

The Platform’s primary infrastructure as informed is hosted in Brazil, without prejudice to third-party services that may process data in other locations.

Data is kept for the period needed for the purposes for which it was collected and, thereafter, for the periods needed to meet legal, regulatory, and contractual obligations, prevent fraud, and regularly exercise rights. CS2CLUB does not adopt as a general rule the eternal and indiscriminate retention of all personal data. When retention is no longer needed, data must be deleted, anonymized, or kept only where there is a legal basis to retain it.

11. International transfers

Although the informed primary infrastructure is in Brazil, certain global vendors, integrations, analytics, marketing, security, or other third-party services may involve processing or storage of data outside Brazil. When there is an international transfer of personal data, CS2CLUB must adopt the mechanisms and safeguards required by applicable law.

Serving users who live in other countries may require additional privacy obligations, which will be observed according to the territories actually served.

12. Security

CS2CLUB will adopt reasonable technical and administrative measures commensurate with the risks to protect personal data against unauthorized access, loss, destruction, alteration, disclosure, or improper processing. No system connected to the internet is absolutely immune to incidents.

In a security incident involving personal data, the investigation, containment, remediation, and notification measures required by applicable law will be taken.

13. Data-subject rights

You may exercise the rights provided by applicable law, including, where applicable, confirmation that processing exists, access, correction, information about sharing, anonymization, blocking, deletion, portability, withdrawal of consent, and objection. Requests may be sent to support@cs2club.com.

CS2CLUB may request information needed to confirm the requester’s identity and avoid improper disclosure of data. A deletion request does not mean immediate erasure of information whose retention is required or authorized by law, fraud prevention, legal obligations, or regular exercise of rights.

14. Account deletion and closure

You may request closure of your account through the channels provided by the Platform. After closure, data may continue to be stored when there is an obligation or legitimate basis for retention. Data that no longer needs to be kept will be deleted or anonymized according to the applicable retention criteria.

15. Minors

CS2CLUB is intended exclusively for users aged 18 or older. If the Platform identifies use by a minor, it may suspend the account and take steps to investigate and handle the data in accordance with applicable law.

16. International users

CS2CLUB may make its services available to users outside Brazil only in territories where the operation is permitted and in accordance with applicable rules. This Policy does not replace the need to comply with local laws of the countries actually served. When local rules confer additional data-protection rights, those rights will be observed to the extent they apply to the operation.

17. Changes to this Policy

This Policy may be updated to reflect legal, operational, technological, vendor, or feature changes. When a change requires new notice or consent under applicable law, CS2CLUB will follow the corresponding procedure. The current version remains available on the Platform.

18. Contact

Questions, requests, or complaints related to privacy and personal-data processing may be sent to support@cs2club.com.