🔒 Privacy & Data

Privacy Policy

Effective: September 18, 2025  ·  Last Updated: May 2026
Section 01
Introduction

BoostBase.gg ("we," "us," "Platform") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding it.

Section 02
Data We Collect

Information you provide: Full name, username, email address, passwords (securely hashed using industry-standard algorithms and never stored in plain text), order details, and support messages.

Automatically collected: IP address, browser type, device information, pages visited, session duration, and cookie data.

Payment data: Handled entirely by our payment providers. We do not receive or store full card numbers, CVVs, or banking details.

Wallet data: We store your Wallet Credit balance and transaction history (refunds, cashback, spend activity) as part of your account profile.

Section 03
How We Use Your Data

We use your data to: operate and improve the Platform; process and manage your orders; maintain your Wallet balance and transaction history; authenticate your identity and prevent fraud; send transactional emails (order confirmations, refund notifications, cashback alerts); provide customer support; and comply with legal obligations.

We may also use your data to: verify identity and ownership for KYC purposes; investigate suspicious activity, recover compromised accounts, and resolve payment disputes; and fulfill law enforcement requests where legally required.

We may access and review communications for fraud prevention, security, customer support, and platform integrity purposes only, and strictly where necessary to operate the service. Any such access is conducted in accordance with applicable privacy law.

Account activity and service logs may be used as official records for dispute resolution, including refunds and chargeback investigations, in accordance with our Terms of Service and Refund Policy.

Section 04
Third-Party Service Providers

We share data only with trusted third parties necessary to operate the Platform, including:

  • Supabase — database, authentication, and secure data storage
  • PayPal — payment processing (governed by PayPal's own Privacy Policy)
  • Crisp — Live Chat and customer support communications
  • Email delivery providers — transactional notifications
  • Analytics providers — aggregated, anonymized usage data only

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

Section 05
Cookies

We use essential cookies for authentication and session management, and analytics cookies to understand how users interact with the Platform. You can manage cookie preferences via your browser settings.

Section 06
Legal Basis for Processing

GDPR (EEA users): Performance of a contract; compliance with legal obligations; legitimate interests (fraud prevention, security); and your consent where explicitly requested.

CCPA (California users): We do not sell personal information. California residents have the right to know what data we collect, request deletion, and opt out of any sale of data (we do not sell data).

Section 07
Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Certain records — including transaction history, security logs, dispute records, and identity verification information — may be retained for a longer period where required for legal, regulatory, fraud prevention, accounting, or contractual purposes. Retention periods for such records may extend up to 7 years depending on applicable law.

Section 08
International Data Transfers

Your data may be processed and stored outside your country of residence, including in the United States and European Union, where our service providers (Supabase, PayPal, Crisp) operate. We ensure all international transfers comply with applicable data protection laws.

Section 09
Data Breach Notification

In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware, in accordance with applicable data protection laws. Notifications will be sent to the email address associated with your account.

Section 10
Data Security

We implement industry-standard security measures including encrypted data storage, HTTPS, access controls, and regular security reviews to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

While we implement strong security measures, no system or method of transmission over the internet can be guaranteed to be completely secure. If we detect or suspect a security breach, we will take immediate steps to investigate and mitigate the impact.

Section 11
Your Rights

You have the right to: access a copy of your personal data; correct inaccurate data; request deletion; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. Contact us at info@boostbasegg.com.

Section 12
Children's Privacy

The Platform is intended exclusively for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has provided personal data, we will delete it promptly.

Section 13
Changes to This Policy

We may update this Privacy Policy at any time. We will notify users of significant changes via email or platform notice at least 7 days before they take effect where reasonably possible.

Section 15
Identity Verification (KYC)

We may request identity verification documents, proof of payment ownership, or other supporting documentation to verify accounts, prevent fraud, investigate disputes, or comply with legal obligations. Such information is processed with strict confidentiality and retained only for as long as necessary for fraud prevention, dispute resolution, and legal compliance, unless longer retention is required by law.

Section 16
Security Investigations

We may use account information and verification documents to investigate suspicious activity, recover compromised accounts, and resolve payment disputes. This processing is carried out under our legitimate interests in maintaining platform security, preventing fraud, and ensuring safe service delivery.

Section 17
Law Enforcement & Legal Disclosure

We may disclose personal information where required by applicable law, court order, legal process, or regulatory authority. We may also disclose information where necessary to protect the rights, property, safety, or security of BoostBase.gg, its users, or third parties, or to prevent, detect, or investigate fraud, security breaches, or illegal activity, only to the extent required or permitted by applicable law.

Section 18
Data Portability

In addition to your existing rights, where technically feasible and required by applicable law, you may request a machine-readable copy of your personal data. We will provide such data in a commonly used, structured format within 30 days of your verified request.

Section 19
Contact & Data Requests

For any privacy-related questions or to exercise your data rights: info@boostbasegg.com or via Live Chat on our website. We aim to respond to all data requests within 30 days.