Home›Privacy Policy
Privacy Policy
Last updated: March 2026
Arcadious Pte. Ltd. (UEN: 202418068R), a company incorporated in Singapore (Arcadious, we, us, or our), is committed to protecting your privacy and handling your personal data responsibly, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and other applicable data protection laws.
This policy explains what personal data we collect, why we collect it, how it is used and protected, and the rights available to you. Please read it carefully. By using our website, platform, or services, you acknowledge that you have read and understood this policy.
1. About This Policy
In short: this policy covers all personal data we collect across our website, platform, and app.
This Privacy Policy applies to all personal data collected by Arcadious through our website, our gaming platform, our mobile application, and any other services we provide (collectively, the Services). It applies to all users, visitors, and individuals whose data we process, regardless of location.
This policy is reviewed at least annually, or sooner in response to regulatory, operational, or technological changes. We will notify you of material changes by posting a notice on the Site.
2. Who We Are
In short: Arcadious is a Singapore-based digital gaming company and the controller of your personal data.
Arcadious is an international digital company providing platforms and services related to video games, including an application available across multiple devices. As the data controller, Arcadious is responsible for determining how and why your personal data is processed, and for ensuring your rights as an individual are respected.
We are based in Singapore. If you have any questions or concerns about how your data is handled, please do not hesitate to contact us via email.
3. What Data We Collect
In short: we collect the data you give us directly, plus some data generated by your use of the platform.
Arcadious processes the minimum amount of personal data required to deliver our Services efficiently. The data we collect falls into the following categories:
Identity & contact data, including:
- Full name
- Email address
- Telephone number(s)
- Physical or billing address
- Date of birth
Account & profile data, including:
- Username and login credentials
- Profile settings and communication preferences
- URLs to social media profiles (e.g. LinkedIn, X / Twitter)
Financial data, including:
- Payment method details (processed securely via our payment provider)
- Transaction history and subscription status
Technical & usage data, including:
- IP address and device identifiers
- Browser type, operating system, and language settings
- Pages visited, features used, and time spent on the platform
- Cookies and similar tracking technologies (see Section 9)
4. How We Collect Your Data
In short: we collect data you give us directly, data generated automatically, and occasionally data from public sources.
We collect personal data through the following means:
- Directly from you - when you register an account, subscribe to a plan, make a purchase, complete a form, or contact us
- Automatically - when you use the Site or platform, via cookies, log files, and analytics tools
- From publicly available sources - such as public social media profiles, where relevant to our services
- Through third-party integrations - such as payment processors, where you have authorised the transfer of relevant data
5. How We Use Your Data
In short: we use your data to run the platform, process payments, and communicate with you; not to sell it.
We use your personal data for the following purposes:
- Creating and managing your account
- Providing access to the platform, games, and other Services
- Processing payments, subscriptions, and Credits transactions
- Communicating with you regarding your account, including service updates, billing notices, and support responses
- Sending promotional communications where you have opted in, or where we have a legitimate interest in doing so
- Analysing usage patterns to improve the performance and features of the platform
- Detecting and preventing fraud, abuse, or security incidents
- Complying with applicable legal and regulatory obligations
6. Legal Basis for Processing
In short: we only process your data where we have a lawful reason to do so.
We process your personal data only where we have a lawful basis to do so. Depending on the purpose, we rely on one or more of the following:
- Contractual necessity - processing required to fulfil our agreement with you, such as providing access to the platform and processing payments
- Legitimate interests - processing that serves our reasonable business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and freedoms
- Consent - where you have freely given consent, such as for marketing communications or optional features
- Legal obligation - where processing is necessary to comply with applicable law or regulation
Where we rely on legitimate interests, we have carried out an assessment to confirm that our interests do not override your rights and freedoms. You may contact us via email to request further details of any such assessment.
7. Sharing Your Data
In short: we do not sell your data. We only share it with trusted service providers who help us run the platform.
Your personal data is never sold, rented, or shared with third parties for marketing purposes. We may share your data with carefully selected third-party service providers solely to support the delivery of our Services, including:
- Payment processors, for handling subscription and transaction data
- Cloud infrastructure and hosting providers, for storing and serving the platform
- Analytics providers (such as Google Analytics), for understanding how the platform is used
- Email and communications services, for delivering account and marketing messages
All third-party processors are bound by contractual obligations consistent with applicable data protection law and may not use your data for any purpose beyond what is strictly necessary for the service they provide.
We may also disclose personal data where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Arcadious, our users, or the public.
8. Data Security
In short: your data is protected with industry-standard encryption and access controls.
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:
- AES-256 encryption for sensitive data, both at rest and in transit
- SSL/TLS for all data transmitted between your device and our servers
- Encrypted credentials and daily encrypted backups
- Role-based access controls, limiting data access to authorised team members only
- Regular server maintenance and patching against known security vulnerabilities
Whilst we take all reasonable steps to protect your data, no system is entirely immune to risk. In the event of a data breach that is likely to affect your rights or freedoms, we will notify you and any applicable regulatory authority as required by law.
9. Data Retention
In short: we keep your data for as long as your account is active, or as required by law.
We retain your personal data for as long as your account remains active, or for as long as necessary to fulfil the purposes described in this policy. We may also retain data beyond the closure of your account where required to comply with a legal obligation, resolve disputes, or enforce our agreements.
When data is no longer required, it is securely deleted or anonymised in accordance with our internal data retention schedule. If you wish to request early deletion of your data, please refer to Section 11 below.
10. International Transfers
In short: some of our service providers are based outside Singapore. We take steps to ensure your data remains protected.
As an international digital company, some of the third-party providers we use may process your data outside of Singapore; for example, analytics data may be transferred to Google servers. Where such transfers occur, we take steps to ensure that adequate protections are in place consistent with the PDPA and other applicable law, including through contractual safeguards. By using our Services, you acknowledge that your data may be transferred and processed internationally in this manner.
11. Right to Erasure
In short: you can ask us to delete your data and we will do so promptly.
You have the right to request that Arcadious erases your personal data, and we will action such requests within one working week of receipt. To request erasure, please contact us via email.
To reduce the risk of inadvertently re-adding your data in the future, we may retain your email address following erasure solely for suppression purposes. This minimal record will not be used for any other purpose. You may at any time request that your data is reinstated to our database.
12. Right to Rectification
In short: if we hold incorrect data about you, let us know and we will correct it.
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request rectification. We will consider your request promptly and, where an error is confirmed, correct it without undue delay. Where we have reason to believe no error has occurred, we will retain the existing information and inform you of our reasoning. You will be notified of the outcome by email, telephone, or post as appropriate.
13. Subject Access Requests
In short: you can ask to see the data we hold about you. We will respond within one month, free of charge.
You have the right to submit a Subject Access Request (SAR) at any time to obtain a copy of the personal data we hold about you, along with information about how it is processed. To submit a SAR, please contact us via email. We will respond within one month of receipt.
We will not charge a fee for any SAR unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or decline the request. We also reserve the right to withhold data where disclosure would adversely affect the rights and freedoms of others.
14. Cookies
In short: we use cookies for analytics and functionality. You can control them through your browser settings.
Our Site uses cookies and similar tracking technologies to enhance your experience, analyse usage patterns, and deliver relevant content. This includes Google Analytics, which may involve the transfer of data to Google servers outside Singapore. By using the Site, you consent to the use of cookies as described here. You may disable or manage cookies at any time through your browser settings, though doing so may affect the functionality of certain parts of the Site.
15. Changes to This Policy
In short: we may update this policy from time to time. We will let you know about significant changes.
We reserve the right to update or amend this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date. Where changes are material, we will notify you by email or by displaying a prominent notice on the Site. Your continued use of the Services following such notification constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed of how we protect your data.
Contact Us
If you have any questions about this Privacy Policy, or wish to exercise any of your rights in relation to your personal data, please contact us via email.
