Privacy Policy

1. Introduction & Data Controller

This Privacy Policy explains how trofi.gg (“we”, “us”, or “our”) collects, stores, protects, and discloses personal data when you visit trofi.gg or interact with our gaming bounty platform.

We act as a Data Controller in accordance with the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Categories of Data We Collect

• Account & OAuth Identifiers: Twitch User ID, YouTube/Google ID, public display name, email address, and avatar image obtained through authorized OAuth 2.0 logins.
• Game Telemetry & Identifiers: PUBG Account ID, Steam ID64, in-game nicknames, match IDs, kill counts, damage dealt, match placement, and timestamps used solely for challenge verification.
• Technical & Log Data: IP address, browser type, device specifications, operating system, and session cookies.
• Payment Data (Processed by Stripe): We DO NOT store or retain credit card numbers, expiration dates, or CVV codes on our servers. All transactions, payment authorizations, and refunds are handled directly by Stripe, Inc., a certified PCI-DSS Level 1 payment processor.

3. How We Use Your Data

We use collected information to:

• Facilitate, monitor, and settle skill-based creator bounties and challenges;
• Connect via official game publisher APIs (PUBG Developer Portal, Valve Steam API) to query match outcomes;
• Communicate automated transaction receipts, challenge notifications, and dispute resolutions;
• Detect and prevent fraudulent activities, cheating, and suspicious payment behavior.

4. Third-Party Service Providers

We share data only with trusted service providers essential for platform operations:

• Stripe, Inc. — Payment gateway, payouts, and PCI-DSS card verification.
• Twitch Interactive / Google — Authentication and streamer channel linking.
• PUBG Corporation / Valve Corporation — Game telemetry logs and match verification.

5. Your Rights (GDPR / CCPA)

Under applicable international data privacy laws, you possess the right to: (a) access the personal information we hold about you; (b) request correction or complete deletion of your data (“Right to be Forgotten”); (c) withdraw consent at any time; and (d) export your data in a machine-readable format.

6. Privacy Inquiries & Data Protection Officer

To exercise your rights or submit a data inquiry, contact our team at privacy@trofi.gg.