Privacy Policy
Effective Date: 03.04.2026 · Last Updated: 03.05.2026
1. Introduction
OTANER GRP LTD ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website game2zone.com (the "Site") and use our gaming services (the "Services").
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site.
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Data You Provide to Us
We may collect personal data that you voluntarily provide when you:
- Register an account (e.g., username, email address, date of birth)
- Make a purchase of Energy (e.g., billing address, payment information*)
- Contact customer support (e.g., name, email, message content)
- Participate in surveys, promotions, or contests
- Communicate with us via email or social media
*Note: Payment information is processed directly by our PCI-DSS compliant third-party payment processors. We do not store full credit/debit card details on our servers.
2.2 Information Automatically Collected
When you access the Site, we may automatically collect certain information about your device and usage, including:
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform
- Usage Data: Pages viewed, time spent on pages, game sessions, Energy consumption, clickstream data, and other diagnostic data
- Location Data: General geographic location derived from IP address (not precise GPS location)
This information is collected using cookies, server logs, and similar technologies. See our Cookies Policy for details.
2.3 Data from Third Parties
We may receive personal data about you from third parties, such as:
- Analytics providers (e.g., Google Analytics)
- Advertising networks
- Payment and fraud prevention services
- Publicly available sources
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
| Purpose / Activity | Type of Data | Lawful Basis for Processing |
|---|---|---|
| To register you as a new user and manage your account | Identity, Contact | Performance of a contract with you |
| To process and deliver your Energy purchases, including managing payments and fraud prevention | Identity, Contact, Financial, Transaction | Performance of a contract; Legitimate interests (to recover debts) |
| To provide, maintain, and improve the Site and Services, including game functionality | Usage, Technical, Profile | Legitimate interests (to study how customers use our products/services, to develop them, and to grow our business) |
| To administer and protect our business and the Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting) | Technical, Usage | Legitimate interests (for running our business, provision of administration and IT services, network security, and fraud prevention) |
| To deliver relevant website content and advertisements to you and measure advertising effectiveness | Identity, Contact, Profile, Usage, Marketing and Communications | Legitimate interests (to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy) |
| To send you marketing communications about our games, features, and promotions (with your consent where required) | Identity, Contact, Marketing and Communications | Consent (for direct marketing); Legitimate interests (to grow our business) |
| To comply with legal and regulatory obligations (e.g., tax, accounting, fraud reporting) | Identity, Contact, Financial, Transaction | Compliance with a legal obligation |
| To respond to your inquiries and provide customer support | Identity, Contact, Content of communications | Legitimate interests (to provide customer service) |
4. Marketing Communications
4.1. You will receive marketing communications from us if you have requested information, purchased Services, or registered for a promotion and, in each case, you have not opted out.
4.2. You can ask us to stop sending marketing messages at any time by:
- Following the opt-out links on any marketing message sent to you
- Logging into your account and adjusting your communication preferences
- Contacting us at info@game2zone.com
4.3. Where you opt out of receiving marketing messages, this will not apply to personal data provided as a result of a Service purchase, warranty registration, or other transactions.
5. Disclosure of Your Personal Data
We may share your personal data with the parties set out below:
- Service Providers: Third parties who provide IT, system administration, payment processing, fraud prevention, customer support, and analytics services.
- Professional Advisers: Lawyers, bankers, auditors, and insurers based in the UK who provide consultancy, banking, legal, insurance, and accounting services.
- Regulatory Authorities: HM Revenue & Customs, regulators, and other authorities acting as processors or joint controllers based in the UK who require reporting of processing activities in certain circumstances.
- Third Parties to Whom We May Transfer Assets: If OTANER GRP LTD or substantially all of its assets are acquired by a third party, personal data held by it about its customers will be one of the transferred assets.
- Business Transfers: We may disclose or transfer your personal data to a third party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
6. International Transfers
6.1. We are based in the United Kingdom. Some of our service providers may be located outside the UK, including in countries that may not have data protection laws equivalent to those in the UK.
6.2. Where we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by implementing one or more of the following safeguards:
- Transferring data only to countries deemed to provide an adequate level of protection by the UK Government.
- Using specific contracts approved by the UK Government which give personal data the same protection it has in the UK (UK International Data Transfer Agreement or Addendum to the EU SCCs).
- Where we use US-based providers, ensuring they are part of the UK-US Data Bridge (successor to the EU-US Privacy Shield).
6.3. Please contact us at info@game2zone.com if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
8. Data Retention
8.1. We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
8.2. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your data, and applicable legal requirements.
8.3. Typical retention periods:
- Account Data: Retained for the duration of your account plus 6 years after account closure for legal and tax purposes.
- Transaction Data: Retained for 6 years from the end of the financial year in which the transaction occurred, as required by UK tax law.
- Marketing Data: Retained until you withdraw consent or opt-out, plus a short period to ensure your request is actioned across our systems.
- Technical/Usage Data: Anonymised or deleted after 26 months.
9. Your Legal Rights
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data in certain circumstances.
- Right to restrict processing: Request we suspend processing of your data in certain circumstances.
- Right to data portability: Request transfer of your data to you or a third party in a structured, commonly used, machine-readable format.
- Right to object: Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Where we rely on consent, you may withdraw it at any time.
How to exercise your rights: To exercise any of these rights, please contact us at info@game2zone.com. We will respond within one month, as required by law.
No fee usually required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
What we may need from you: We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
10. Cookies and Similar Technologies
We use cookies and similar tracking technologies to operate and improve the Site. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookies Policy.
11. Children's Privacy
Our Services are not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to delete that information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.
You can see when this Privacy Policy was last updated by checking the "Last Updated" date displayed at the top of this policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
OTANER GRP LTD
39/5 Granton Crescent
Edinburgh
United Kingdom EH5 1BN
Email: info@game2zone.com
Phone: +44 7537 129725
14. Your Right to Complain
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
