Privacy policy

The policy defines the rules for collecting and processing personal data while enjoying GAME LOUNGE STUDIOS services and products such as website located at (“Website”)and Unbound metaverse platform (“Unbound”).

The details on the terms of using the services and products of GAME LOUNGE STUDIOS can be found in the Terms of Service (available on:  Terms of service).

  1. Identity and contact details of the controller

The controller of your personal data is: Game Lounge Studios FZE with its seat in Umm Al Quwain, Al Shmookh Business Center, One UAQ, UAQ Free Trade Zone, United Arab Emirates („GAME LOUNGE STUDIOS”)

Contact with GAME LOUNGE STUDIOS is possible in particular by e-mail:

  1. How we collect your data?

We receive your personal data that you provide us while using the Website or Unbound or when you try to reach us by traditional post, e-mail, phone number, chat on social platform, etc. We get the personal data you put in the contact form on the Website when you contact us through it.

You also provide us your data through using Unbound. In that regard, we can also receive your personal data from you through platforms and portals which you use in connection to the Unbound, for example in order to download and install it.

We receive necessary information about your account on Epic Store from Epic Games when you download and access Unbound through this platform.

In addition, we could receive personal data from you (after getting your consent – if applicable) as a result of the use of analytical and marketing tools implemented in our services and products.

  1. How we protect your data

We assure you that the protection and security of your personal data are an important element in our business and are taken into account when designing the procedures and solutions we use. Thus, we have applied technical and organizational measures to ensure the protection of processed data in accordance with the requirements set out in the provisions on the protection of personal data, which measures are adequate to the risk of violation of your rights and freedoms. The aforementioned provisions include Regulation of the European Parliament and the Council of the EU 2016/679 of 27th of April 2016 r. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – „GDPR”) as well as applicable United Arab Emirates regulations, in particular the Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (“UAE PDP”)

We respect your rights in the field of personal data protection, and our technical solutions are in line with the current state of the art.

  1. The basis and the purpose of processing your data

We process your personal data in order to properly perform agreement with you, render the services you ordered and provide you the Unbound platform, in particular we collect and process data that are necessary for you to utilize all the basic functions of Unbound, allow you to use its social features and enjoy our metaverse platform to the extend you want and that is allowed by the Terms of Use ( Article 6 sec. 1 letter b) of GDPR / Article 4 point 10 of UAE PDP  ).

We may process your personal data to comply with legal obligations to which GAME LOUNGE STUDIOS is subject to. This includes fulfilment of obligations related to bookkeeping.  ( Article 6 sec. 1 letter c) of GDPR / eg. Article 4 point 9, 11 of UAE PDP  ).

We process your personal data when it is necessary for purposes of our legitimate interest, which includes 1) management, exercise and defense in case of reciprocal claims (Article 4 point 3 of UAE PDP); 2) ensuring information security (Article 4 point 8 of UAE PDP), 3) identifying any infringement of the Terms of Use and taking appropriate security measures, 4) marketing the Service and other GAME LOUNGE STUDIOS’s products, passing news about Unbound, 5) getting knowledge about the way you use our Website and Unbound in order to review their functioning and further work on improving them (all: Article 6 sec. 1 letter f) of GDPR).

Regardless of the above, some of your personal data may be processed within the scope and in accordance with your consent ( Article 6 sec. 1 letter a) of GDPR).

  1. Information about the categories of recipients of personal data

The recipients of your personal data are entities cooperating with us as part of our business. Those entities can obtain your data based on entrusting them with the processing, on our behalf, of the data we have at our disposal, including: suppliers of software supporting internal business processes, hosting service providers, e-mail service providers, IT company, accounting company, online and offline marketing service providers.

For your comfort we listed links to privacy polices of certain third party service providers below: (i) Epic Games, (ii) AWS, (ii) Ready Player Me, (iii) MongoDB. Please note that those service providers not necessarily get your personal data due to the sole fact of cooperation with us – only in cases when the nature of the service rendered requires sharing the data in order to fulfil our partners obligations towards us and you.

The recipients of your data are also entities cooperating with us as part of our business activity as independent administrators of personal data, having their own grounds for processing them, including: post office and courier companies, law firm, companies operating social portals, external providers of payment systems, banks.

CCertain data needed for using social features of our services and products may be visible to other Users via the Website or Unbound.

  1. Criteria for determining the period for which personal data will be stored

We may keep your data as long as it is justified by the purpose for which the data were collected. This includes the period of providing you our service and giving you access to our products – as long as you want to use them. In case the data were collected in order to enter an agreement with us and perform obligations arising from such agreement – such data will be erased after such agreement is terminated.

Regarding data processed based on our legitimate interest - for the period of fulfillment of objectives covered by this basis, unless due to your objection, we will be obliged  to stop processing the data earlier.

In the event of establishing and pursuing claims and defending against claims, the data will be stored until the end of the limitation period for these claims.

If we processed the date based on your consent, we shall delate the data without due delay after you withdraw the consent and notify us about it.

In some cases, the applicable law requires us to keep your data for longer period, e.g. due to tax and accounting regulations.

  1. Information on the rights of the data subject

You have the right to:

  1. access your personal data,
  1. demand rectification, deletion or limitation of the processing of your personal data,
  1. object to the processing of your personal data,
  1. data transfer (the right to receive them from us and send them directly to another administrator),
  1. withdrawal of consent to the processing of personal data - however, it does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal, i.e. withdrawal of consent is not retroactive,

  1. Right to object

To the extent that GAME LOUNGE STUDIOS is entitled to process your data on the basis of our legitimate interest and we exercise that right, you can object to such processing at any time - for reasons related to your particular situation. We are then no longer allowed to process your data, unless we can demonstrate that there are valid, legally justified grounds for such processing, overriding your interests, rights and freedoms, or that there are grounds for establishing, pursuing or defending claims.

To the extent that, as part of our legitimate interest, personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Then we are no longer allowed to process your data for such purposes.

  1. Information about the right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority, in particular in a Member State of the European Union of your habitual residence, place of work or place of alleged infringement, if you believe that the processing of your data violates the GDPR.

  1. Log files

While using our services based on software, in particular in a case of an error in an app, certain data and information (through third party products) in the form of a log file may be collected automatically and stored on your device (“Log file”).

Log files may include your IP address, device name, operating system version, the configuration of the app when using our services, the time and date of your use of the app and other statistics.

  1. Cookies

When using the Website so-called cookies (“Cookies”) are stored on your device. By Cookies we mean small pieces of IT data, in particular text files, which are stored on end user’s device and intended to for using websites. Cookies usually contain the name of the website from which they originate, their storage time on the end device and a unique number.

The Cookies we use have the following functions:

The main types of Cookies can be distinguished according to their storage time:

The maximum storage time for Cookies is up to 2 years.

Regardless of other options for managing Cookies available on the Website, you can change cookie settings by specifying the conditions for storing or accessing Cookies using web browser software settings, including disabling the option of accepting Cookies in such a way as to block the automatic handling of Cookies, or inform about each time they are sent to the end device and change their storage time. You can also delete Cookies stored on your device after visiting the Website.

Remember, however, that some Cookies are necessary for the operation of the Website. Disabling cookies may disable some of the functionalities available on the Website.

  1. Links to other sites and services

Our services and products may contain links to external sites and services. If you click on a third-party link, you will be redirected accordingly. Note that these external sites and services are not operated by us. Therefore, we strongly advise you to review the privacy policy of such sites and services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any such third-party sites or services.

  1. Unwanted personal data

Due to the nature of our services and products we do not intend and want to collect personal data of minors or personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership and we do not process genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

  1. International transfer

As the nature and aim of our services and products are international your personal data may be involved in transfer to countries outside of EEA and outside of UAE. We shall take all reasonable steps to ensure that such personal data are treated securely, in accordance with this Privacy Policy and restrictions imposed by the applicable regulations. You can get details on the security measures that we take with reference to such transfers by contacting us via email.

  1. Changes to the Privacy Policy

We want to constantly improve our service out of concern for the security of the data entrusted to us.

We may change the Privacy Policy if it is required by applicable law and/or our data/data of other entities listed in the Policy/ the type of services provided/ the technological conditions of the Website change. The change may also take place to improve the standard of information or protection. We will inform you about the change when you first visit the Website or access Unbound after changing the Privacy Policy.