Introduction
BoostBase.gg ("we," "us," "Platform") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding it
Data We Collect
Information you provide: Full name, username, email address, passwords (securely hashed using industry-standard algorithms and never stored in plain text), order details, and support messages
Automatically collected: IP address, browser type, device information, pages visited, the website that referred you, session duration, and cookie data
Payment data: Handled entirely by our payment providers. We do not receive or store full card numbers, CVVs, or banking details
Wallet data: We store your Wallet Credit balance and transaction history (refunds, cashback, spend activity) as part of your account profile
How We Use Your Data
We use your data to: operate and improve the Platform; process and manage your orders; maintain your Wallet balance and transaction history; authenticate your identity and prevent fraud; send transactional emails (order confirmations, refund notifications, cashback alerts); provide customer support; and comply with legal obligations
We may also use your data to: verify identity and ownership for KYC purposes; investigate suspicious activity, recover compromised accounts, and resolve payment disputes; and fulfill law enforcement requests where legally required
We may access and review communications for fraud prevention, security, customer support, and platform integrity purposes only, and strictly where necessary to operate the service. Any such access is conducted in accordance with applicable privacy law
Account activity and service logs may be used as official records for dispute resolution, including refunds and chargeback investigations, in accordance with our Terms of Service and Refund Policy
Third-Party Service Providers
We share data only with trusted third parties necessary to operate the Platform, including:
- Supabase — database, authentication, and secure data storage
- PayPal — payment processing (governed by PayPal's own Privacy Policy)
- Email delivery providers — transactional notifications
- Analytics providers — aggregated, anonymized usage data only
We do not sell, rent, or trade your personal data to any third party for marketing purposes
Cookies
We use essential cookies for authentication and session management, and analytics cookies to understand how users interact with the Platform. You can manage cookie preferences via your browser settings. For full details, see our Cookie Policy.
Legal Basis for Processing
GDPR (EEA users): Performance of a contract; compliance with legal obligations; legitimate interests (fraud prevention, security); and your consent where explicitly requested
CCPA (California users): We do not sell personal information. California residents have the right to know what data we collect, request deletion, and opt out of any sale of data (we do not sell data)
Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law
Certain records — including transaction history, security logs, dispute records, and identity verification information — may be retained for a longer period where required for legal, regulatory, fraud prevention, accounting, or contractual purposes. Retention periods for such records may extend up to 7 years depending on applicable law
International Data Transfers
Your data may be processed and stored outside your country of residence, including in the United States and European Union, where our service providers (Supabase, PayPal) operate. We ensure all international transfers comply with applicable data protection laws
Data Breach Notification
In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware, in accordance with applicable data protection laws. Notifications will be sent to the email address associated with your account
Data Security
We implement industry-standard security measures including encrypted data storage, HTTPS, access controls, and regular security reviews to protect your personal data against unauthorized access, alteration, disclosure, or destruction
While we implement strong security measures, no system or method of transmission over the internet can be guaranteed to be completely secure. If we detect or suspect a security breach, we will take immediate steps to investigate and mitigate the impact
Your Rights
You have the right to: access a copy of your personal data; correct inaccurate data; request deletion; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. Contact us at boostbase.gg@gmail.com.
Children's Privacy
The Platform is intended exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has provided personal data, we will delete it promptly
Changes to This Policy
We may update this Privacy Policy at any time. We will notify users of significant changes via email or platform notice at least 7 days before they take effect where reasonably possible
Identity Verification (KYC)
We may request identity verification documents, proof of payment ownership, or other supporting documentation to verify accounts, prevent fraud, investigate disputes, or comply with legal obligations. Such information is processed with strict confidentiality and retained only for as long as necessary for fraud prevention, dispute resolution, and legal compliance, unless longer retention is required by law
Security Investigations
We may use account information and verification documents to investigate suspicious activity, recover compromised accounts, and resolve payment disputes. This processing is carried out under our legitimate interests in maintaining platform security, preventing fraud, and ensuring safe service delivery
Law Enforcement & Legal Disclosure
We may disclose personal information where required by applicable law, court order, legal process, or regulatory authority. We may also disclose information where necessary to protect the rights, property, safety, or security of BoostBase.gg, its users, or third parties, or to prevent, detect, or investigate fraud, security breaches, or illegal activity, only to the extent required or permitted by applicable law
Data Portability
In addition to your existing rights, where technically feasible and required by applicable law, you may request a machine-readable copy of your personal data. We will provide such data in a commonly used, structured format within 30 days of your verified request
Contact & Data Requests
For any privacy-related questions or to exercise your data rights: boostbase.gg@gmail.com or via Live Chat on our website. We aim to respond to all data requests within 30 days