Privacy Policy

1.1 Data controller

Your personal data on gameex.co (the “Platform”) is processed by MCUBES, a business registered in India with its registered address at MGP 22/954, Midhunam, Mannancherry P.O, 688538, Alappuzha, India. We act as data controller for the purposes described in this Privacy Policy and in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws.

1.2 Scope

This Policy applies whether you browse the Platform, create an account, check out as a guest, or contact support. It does not apply to third-party platforms (for example Steam or a payment provider) whose own privacy policies govern the data you provide to them directly.

2.1 Account data

When you create an account or sign in we process the information necessary to operate that account: your email address, display name, authentication credentials managed by our identity provider, and profile settings.

2.2 Order data

To fulfil a purchase we process the order number, the products ordered, prices and taxes, the email address used at checkout, delivery and refund status, plus Buyer Protection correspondence (for example screenshots of activation errors you choose to send us).

2.3 Digital inventory

Purchased keys are stored in your Digital Inventory until you reveal them. Revealed keys are displayed for you and are not shared with other Users. Keys are stored for delivery and Buyer Protection purposes only.

2.4 Technical data

Like most online services, our infrastructure and hosting handle technical data required to serve and secure the Platform: IP address, browser and device type, session identifiers, and basic server logs. This data is used for security, fraud prevention and network integrity.

3.1 Purposes

We process your data to: operate your account and authenticate you; process and deliver your orders, including key delivery and guarantee timelines within 24 hours of payment confirmation; provide Buyer Protection, replacements, refunds and store credit; keep your Digital Inventory available; respond to your requests via support; secure the Platform and prevent fraud; and comply with legal obligations, including tax and accounting record-keeping.

3.2 No marketing mailings

We do not use your personal information for promotional email campaigns or direct marketing purposes. Emails you receive from us are transactional: order confirmations, delivery notices, support replies, or service updates. You may opt out of non-essential notifications at any time.

4.1 No selling of personal data

We do not sell, trade or rent your personal information to third parties for marketing or any other commercial purposes.

4.2 Service providers

We share data only with service providers that help us operate the Platform: our identity/authentication provider (account credentials), payment gateways (payment processing), hosting and content-delivery infrastructure (serving media and inventory), and email delivery used for transactional communication. Each provider processes data only as needed to perform its service.

4.3 Legal requests

We may disclose your details and transaction data when legally required, for example at the request of a court, law-enforcement authority or regulator, or where strictly necessary to establish, exercise or defend legal claims.

5.1 Card and payment data

Payments are processed by third-party payment gateways. We never store your card number, CVV or other full card details on our systems; the gateway transmits your payment credentials directly over an encrypted connection. You also agree to the payment provider's own terms and privacy policy when you make a purchase.

5.2 Refunds

Approved refunds are returned to the original payment method, and the required payment references are shared with the gateway to execute them. Refund timelines and eligibility are set out in the Refund & Cancellation Policy.

6.1 Consent

Transactional communications related to your orders and account do not require separate consent. If we ever introduce optional marketing communication, we will only send it after obtaining your explicit consent, and every such email will include an unsubscribe option that lets you withdraw consent at any time.

7.1 What we store

The Platform uses strictly necessary cookies and browser local storage to keep you signed in, hold your cart, remember your theme preference, and secure your session against cross-site abuse. We do not use third-party advertising or cross-site tracking cookies.

7.2 Managing cookies

You can control or delete cookies and site data through your browser settings. Restricting strictly necessary cookies may prevent the Platform from functioning correctly, for example you may be unable to stay signed in or complete checkout.

8.1 Security

We implement industry-standard security measures, including encrypted transport, access controls and separation of sensitive data, to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or of electronic storage is 100% secure.

8.2 Retention

We keep account data for as long as your account is active. Order, payment and tax records are retained for the period required by applicable accounting law. Support correspondence is retained for as long as needed to resolve your case and for a reasonable period afterwards. Keys remain in your Digital Inventory until you choose otherwise or your account is closed.

8.3 Account closure

You may request deletion of your account, in which case personal data that is no longer subject to legal retention is erased within a reasonable period. Some records, such as order history required for accounting, may be retained in anonymised or minimised form.

9.1 Under the DPDP Act

If you are located in India, under the DPDP Act, 2023 you have the right to access your personal data, request its correction, completion or updating, request its erasure where retention is no longer necessary, nominate a representative, and raise a grievance with our data protection contact at howdy@gameex.co. We will acknowledge your request and act within the timelines prescribed by law.

9.2 EU / UK users

If you are located in the European Union or the United Kingdom, you may additionally have rights to data portability and to lodge a complaint with your local supervisory authority. Where these Terms and this Policy are silent on a matter covered by your mandatory local law, that law prevails.

9.3 Exercising rights

To exercise any right, email howdy@gameex.co from the address associated with your order or account and state what you are requesting. We may verify your identity where needed. Requests are handled free of charge.

10.1 Amendments

We may update this Privacy Policy from time to time. The current version, its version number and the last-updated date are published on this page. Material changes are announced on the Platform.

11.1 Data protection contact

MCUBES

MGP 22/954, Midhunam, Mannancherry P.O, 688538, Alappuzha, India

Email: howdy@gameex.co

Direct all privacy questions, deletion requests and grievances to the address above. We aim to respond within 72 hours.