1. Introduction & Regulatory Framework

Cosmo Fame Limited ("we", "us", "our") operates Game of World as an entertainment and multi-sport tactical fantasy platform tailored for users in Spain, the European Union, and internationally. We are resolutely committed to safeguarding your personal data in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR).
• Spanish Organic Law 3/2018 (Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales — LOPDGDD).
• Directive 2002/58/EC (ePrivacy Directive on Privacy and Electronic Communications).

2. Data Categories Collected

Depending on your interactions with our website, we collect and process the following categories of data:

• User Identification Data: Manager alias, nickname, preferred formation style, country code, and optional profile preferences.
• Direct Communications: Full name, email address, message subject, and descriptive inquiries submitted through our customer support channels.
• Fantasy Gameplay Telemetry: Tactical starting 11 formations, captaincy designations, transfer market transactions, chip activations, points history, and private league participation logs.
• Technical & Connection Data: Anonymized Internet Protocol (IP) address, browser family and version, operating system, device screen resolution, referral URLs, and session timestamps.
• Local Storage State: Essential tokens stored within your browser to preserve active team drafts, selected formation (4-3-3, 3-5-2, etc.), language preference (EN/ES), and cookie consent status.

3. Purposes and Legal Bases for Processing

4. Third-Party Service Providers & Telemetry Processors

We do not sell, rent, or lease your personal information to advertisers. We share data solely with trusted infrastructure subprocessors bound by strict Data Processing Agreements (DPAs):

5. Data Retention Schedule

We preserve your data only for the timeframe necessary to achieve the declared operational purposes:

6. Your Statutory Rights Under the GDPR & LOPDGDD

As an individual in Spain, the European Union, or any jurisdiction granting data protection rights, you hold the following unconditional rights:

• Right of Access (Art. 15 GDPR): You have the right to request full confirmation and a clear copy of any personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): You may demand immediate correction of inaccurate or incomplete personal details.
• Right to Erasure / "Right to Be Forgotten" (Art. 17 GDPR): You may request the total deletion of your personal records where data is no longer necessary or consent has been withdrawn.
• Right to Restriction of Processing (Art. 18 GDPR): You may request the temporary suspension of processing during contested accuracy or dispute investigations.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format (e.g. JSON or CSV).
• Right to Object (Art. 21 GDPR): You may object at any moment to data processing founded upon legitimate interests.
• Right to Withdraw Consent: Where processing relies on consent (e.g. non-essential cookies), you can withdraw it at any time without retroactive detriment.

To exercise any of these statutory rights, please send an email request to our Data Protection Officer at: support@gameofworld.my. We respond to all verified requests within thirty (30) calendar days free of charge.

7. International Data Transfers

Because Cosmo Fame Limited is headquartered in Hong Kong and technical hosting nodes operate globally, personal data may be accessed from outside the European Economic Area (EEA). Whenever cross-border transfers occur, we implement European Commission approved Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, supplemented by technical encryption and access restrictions.

8. Technical and Organizational Security Measures

Cosmo Fame Limited employs multi-layered industry-standard security safeguards:

• Encryption in Transit: Mandatory Transport Layer Security (TLS 1.3) protocols for all network communications.
• Encryption at Rest: AES-256 bit encryption applied to internal system stores and backup volumes.
• Access Governance: Strict role-based least-privilege administrative access protocols with mandatory two-factor authentication (2FA).
• Regular Security Audits: Continuous vulnerability scanning, DDoS mitigation defenses, and code reviews.

9. Protection of Minors (18+ Age Policy)

Game of World is strictly intended for individuals aged eighteen (18) years or older. We do not knowingly solicit, collect, or process personal data from children under 18. If we discover that personal data of a minor has been mistakenly collected, we will take immediate measures to permanently eradicate the records from our servers.

10. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data has been handled in violation of European or Spanish data protection laws, you retain the legal right to lodge a formal complaint with the competent supervisory authority:

• In Spain: Agencia Española de Protección de Datos (AEPD) — www.aepd.es • C/ Jorge Juan, 6, 28001 Madrid.
• In the European Union: You may contact the local Data Protection Authority in the EU Member State of your habitual residence or workplace.

11. Amendments to this Privacy Policy

We may update this Privacy Policy from time to time to reflect evolving regulatory requirements or platform features. The date at the top of this document indicates the latest revision. Continued use of Game of World following the publication of revised terms constitutes your acknowledgment of the changes.

12. Contact & Corporate Inquiries