1. General Provisions
This policy applies to the website m2dv.ru, to the personal account, the store, and the game server Duskveil. The operator of personal data is the Contractor specified on the page "Details and contacts".
This Policy is drawn up in accordance with Federal Law No. 152-FZ "On Personal Data." Simply visiting the website only implies familiarization with the Policy. Where processing is based on consent, it is requested separately and can be withdrawn.
2. What data is processed
- login, email address, and game account ID;
- information about game characters, actions, and acquired digital services;
- IP address, browser and device data, security log information;
- amount, status, identifier, and time of payment required to fulfill the order and issue a receipt;
- messages and contact details that the user provides to the support service.
Duskveil does not receive or store full bank card details. Their processing is carried out by the payment service on its secure page.
3. Purposes, data, grounds, and terms
- Registration and account operation: login, e-mail, account identifier, game data; consent and execution of the user agreement; until the account is deleted, then no more than 3 years to resolve claims.
- Security and prevention of violations: IP address, browser information, login events, and game logs; legitimate interest of the Operator and fulfillment of the agreement; up to 1 year, and during incident investigation — until its completion and the expiration of the statute of limitations.
- Orders, payments, receipts, and returns: account and payment identifiers, amount, time, status, e-mail for the receipt; contract execution and compliance with accounting and tax legislation; for the mandatory document retention period, but not less than the period established by law.
- Support: e-mail and the content of the appeal; consent, contract performance and protection of rights; up to 3 years after the closure of the appeal.
- Confirmation of consents: account identifier, document versions, date, time, and source of acceptance; the Operator's obligation to prove consent; during processing and for 3 years after its termination.
Backups are decommissioned according to the backup cycle. If immediate selective deletion from the backup is technically impossible, the data is blocked from regular use and deleted when the copy is overwritten.
4. Recipients, localization, and cross-border transfer
For the service to operate, data in the necessary volume may be processed by the Russian hosting provider, the email service, and the connected payment operator, including Robokassa. Only information necessary to process the payment, send an electronic receipt, prevent fraud, and handle refunds is transmitted to the payment operator. Data is provided to government authorities only when there is a legal basis. The operator does not sell personal data and does not transfer it for third-party advertising.
When collecting personal data of citizens of the Russian Federation, recording, systematization, accumulation, storage, clarification, and retrieval are carried out using databases located in the territory of the Russian Federation. Automatic loading of widgets from foreign social networks is disabled. Transition to an external community occurs only at the user's click.
The Operator does not carry out planned cross-border transfers of personal data. Before such a transfer begins, the Operator will complete the procedures provided by law and, if necessary, request separate consent.
5. Cookies and technical data
The website uses technically necessary cookies for authorization, session preservation, security, and proper interface operation. The user can limit cookies in the browser; however, some site functions may then work incorrectly.
6. User rights and withdrawal of consent
The user has the right to obtain information about the processing, request clarification, blocking, or destruction of data, object to processing, and withdraw consent. The request is sent to belov-home2@yandex.ru on the topic 'Personal Data.' To protect the account, the Operator has the right to request reasonable proof of identity.
Withdrawal of consent does not affect the legality of processing prior to withdrawal. The operator has the right to continue processing without consent only if there is a basis explicitly provided by law. The response is provided within the time limits established by law.
7. Destruction and security
After the purpose is achieved or the legal basis is lost, the data is either destroyed or anonymized within the period established by law. The operator limits access, applies access rights differentiation, backup, secure connection, security event logging, and regularly checks the availability of service files from the Internet.
In the event of an incident, the Operator records the circumstances, limits the consequences, conducts an internal investigation, and, when required by law, notifies Roskomnadzor and the affected individuals.
8. Policy Changes
The current version is always available at the address of this page. Significant changes affecting previously given consent are not applied retroactively: if necessary, new consent will be requested.