隐私政策
Last updated: October 9, 2024
We care about your privacy. This Privacy Policy explains how your personal data is collected, used, and shared when you’re using CS.MONEY services.
The processing of Personal Data is regulated by the European Union General Data Protection Regulation EU 2016/679 (hereinafter referred to as the “GDPR”) and applicable privacy laws.
Please read this Privacy Policy carefully to understand how we handle
your personal data. By using the Services, you acknowledge you have read
and understood the Privacy Policy and that we will collect, use and
share your information as set forth below.
Data Controller Details
CS VIRTUAL TRADE LTD, a company duly registered under the laws of Cyprus; Registration number: HE 389299 Registered address and the principal place of business: Spyrou Araouzou & Koumantarias, 705, Fayza House, 1st floor, 3036, Limassol, Cyprus.
G2G Marketplace Limited, a company duly registered under the laws of Hong Kong; Registration number: 3064044, Registered address: 8F, 30 Hollywood Road, Central, Hong Kong,
(“CS.MONEY” or “we”).
Data Protection Officer
Contact our Data Protection Officer for any inquiries regarding your
Personal Data and exercise your rights via [email protected].
Scope of Privacy Policy
Privacy Policy covers the following CS.MONEY services (“Services”):
CS.MONEY Trading Platform https://cs.money/, https://old.cs.money/, and mobile application.
CS:GO Skins Wiki https://wiki.cs.money/
3D Skin Viewer https://3d.cs.money/
CS.MONEY Blog https://blog.cs.money/
CS.MONEY Antiscam browser extension
CS.MONEY Market browser extension
other CS.MONEY services that have reference to this Privacy Policy
(the “Websites” and “Apps”).
How We Collect Your Data
By personal data or data, we mean any information capable of being associated with you as an individual, such as your name, e-mail address, or that can be connected to you indirectly, such as your language or currency choice.
We collect data directly from you or our partners.
When you visit our Websites and Apps we collect technical data and information about how you use the Websites and Apps. We do it using cookies set by our partners or us. We need this data to provide you with the Websites and Apps, analyze their use, remember your settings, and personalize content and ads.
Please visit our Cookie Policy
for more details on how we use or disable cookies.
Data We Collect
Device and Location Data
When you visit our Websites and Apps, we collect the following data:
- IP address and location info (country, city, etc.)
- Device and OS information (screen size, OS, browser information)
We use these data to recognize you and provide you with the Websites or Apps that are capable of your device, your location, etc.
Account Data
When you log in to the Websites through your Steam or social network account, we collect specific data from a corresponding third party.
This data may include your account ID (like Steam ID), avatar, username, the list of your virtual items, and other public information.
Besides these, account data also includes your registration data, the number of your trades, your trade link, and the seller link.
You may provide additional information in your profile, such as your avatar.
Usage Data
We collect information about your use of the Websites and Apps.
These data include your activity on the Websites, such information as:
- your Websites’ or App’s personal settings;
- your trade, cart, payments, refunds, withdrawals, search history;
- your visits, views, comments, likes;
- your activity logs;
- information you provide when you request information or support from us;
- your recommendations on how to improve our Services.
Contact Data
- E-mail address
- Telegram
Know-Your-Customer Data
We do our best to prevent fraud and other illegal activities. If your activity, transaction, or payment instrument seems suspicious to us or to activate withdrawals, we will ask you to provide additional information:
- First and last name
- ID document (i.e. passport) number
- Copy of your ID document
- Picture of you holding an ID document
- Photo of your bank card partly covered
- Video of your face
- Utility bill or bank statement
The Know-Your-Customer procedure is carried out by a third-party service provider or us to identify and detect fraud.
Payment and Purchase Data
When you make a purchase or request a refund, you disclose your payment credentials directly to a respective payment service provider, i.e., PayPal. They process your payment data under their privacy policies.
We may receive from our payment partners and process a part of your credit card number information about your credit card issuer.
For billing purposes, we may collect your full address.
Survey Data
From time to time, we organize surveys primarily for research purposes.
For this purpose, we collect answers to the questionnaire and the responder’s profile (gender, age, education, occupation, place of residence).
We may publish our research results in articles on public domains.
Research results contain aggregated depersonalized information unless
otherwise agreed upon in writing with the responder.
Purposes and Legal Basis of Use of Personal Data
Description of why CS.MONEY processes our personal data (‘processing purpose’) | Legal Basis for the processing purpose | Categories of personal data used by CS.MONEY for the processing purpose |
---|---|---|
To provide the Websites and Apps | Performance of a contract | Device and Location Data |
To personalize the Websites and Apps | Performance of a contract | Device and Location Data Usage Data Account Data |
To provide the Services | Performance of a contract | Device and Location Data Usage Data Account Data Contact Data KYC Data |
For processing payments and billing | Performance of a contract | Device and Location Data Account data Payment and Purchase Data KYC data Contact Data |
To conduct researches | Consent | Contact Data Device and Location Data Account Data Survey Data |
To diagnose and fix issues with Websites and Apps | Performance of a contract | Device and Location Data Usage Data User Activity Data |
To evaluate and develop new features, technologies, and improvements to the Service | Legitimate interest | Device and Location Data Usage Data User Activity Data |
To directly advertise our Services | Consent | Device and Location Data Usage Data Account data Contact data |
To analyze the Services and target ads | Consent | Device and Location Data Usage Data Account data |
To comply with legal requirements and law enforcement requests | Compliance with legal obligations | Device and Location Data Usage Data Account data Contact data KYC data Payment and Purchase Data |
To establish, exercise, or defend legal claims | Legitimate interest | Device and Location Data Usage Data Account data Contact data KYC data Payment and Purchase Data |
To conduct business planning, reporting, and forecasting | Legitimate interest | Device and Location Data Usage Data |
To detect fraud, to develop and exercise anti-fraud measures, to secure user accounts | Legitimate interest | Device and Location Data Usage Data Account data Contact data KYC data Payment and Purchase Data |
If the processing of Personal Data is carried out based on your consent, you have the right to withdraw it at any time by sending us a request to [email protected] or following the instruction given in our Cookie Policy.
Our legitimate interests are:
- to develop, improve and deliver our Services;
- to make our Services known and popular in the gaming industry;
- to make the use of our Services secure for the Users;
- to appeal chargebacks and resolve disputes;
- to prevent fraud and other illegal use of our Services.
We may combine all the information we collect from or receive about
you for the outlined purposes. We may aggregate or de-identify your
information and may use or share aggregated or de-identified information
for any purpose. Such information is not subject to this Privacy Policy.
Sharing Your Personal Data
We may share your data with the following categories of third parties:
Payment service providers | To fulfill your payment requests; |
Providers of marketing | To analyze, develop and improve our Services. To perform marketing research, understand our Users better, and provide personalized content and advertisements; |
Government authorities, au | ditors, and consultants To fulfill official requests, our tax, and other obligations; |
Other service providers | We may outsource some functions to third-party service providers for any purpose outlined in this Privacy Policy; |
CS.MONEY affiliates | To provide you the Services. |
Data Retention
We store your Personal Data as necessary for providing you the Service, compliance with our legal obligations, fulfillment of our legitimate interests, or during the validity of your consent as stated in this Privacy Policy. As soon as information stops serving these purposes, we delete it. After you close your account and/or upon your request, we will delete and/or anonymize your Personal Data without undue delay but no later than 30 days. We will keep some Personal Data that we are allowed or required to maintain in such cases as:
- If there were monetary transactions under your account, we would keep the data necessary for defending legal claims for 180 days from the last transaction;
- If there is an unresolved issue relating to your account, such as an outstanding credit on your account and/or an unresolved claim and/or dispute - we will retain the necessary Personal Data until the said issue is resolved;
- Where required to comply with legal, tax, audit, and accounting obligations and/or any other legal obligation, we will retain the necessary Personal Data for the period required by the applicable law;
- Where necessary to fulfill our legitimate interests such as fraud prevention and/or maintenance of our Users’ security.
KYC data: ID document (i.e., passport) number, copy of your ID
document, picture of you holding ID document, photo of your bank card
partly covered, video of your face, utility bill, or bank statement are
stored for three months for appealing chargebacks and resolving
disputes.
Your Rights
Right to access your Personal Data - You may request a copy of your Personal Data and/or how we store your Personal Data.
Right to rectification - you may request to change some of your Personal Data and/or correct your Personal Data if this is inaccurate.
Right to erasure - you may request to delete all or some of your Personal Data. For example, if:
- they are no longer needed for any processing purposes;
- consent has been used as a legal basis for their processing;
- there is no legitimate interest in the further processing of Personal Data.
Right to object - you may object to processing your Personal Data on grounds relating to your particular situation and/or to object processing your Personal Data for direct marketing purposes.
Right to object to automated processing - you may object to a decision based on automated processing. It means that you may request to review your Personal Data manually if you believe that automated processing of your Personal Data may not consider your unique situation.
Right for data portability - you may request to provide you a copy of your Personal Data in a structured, commonly used, and machine-readable format (e.g, XML, CSV). Furthermore, you have the right to request to transmit the said Personal Data directly to another controller.
Right to lodge a complaint - you have the right to lodge a complaint with a supervisory authority, particularly to the European Union member state of your habitual residence, place of work, or place of the alleged infringement.
If you are a California resident, you additionally may request from us the following information:
- The categories of Personal Data we have collected about you;
- The categories of sources from which the Personal Data was collected;
- The categories of Personal Data about you we disclosed for a business purpose or sold;
- The categories of third parties to whom the Personal Data was disclosed for a business purpose or sold;
- The business or commercial purpose for collecting or selling the Personal Data; and
- The specific pieces of your Personal Data we have collected.
If you are a California resident under 18 years old, you may request to remove any content or information you have posted on the Services.
To exercise any of these rights, please contact us via online chat or email at [email protected].
For security purposes, before exercising any of your rights, we may
ask you to prove your identity.
Notice of Collection
In the past 12 months, we have collected the following categories of Personal Data listed in the CCPA:
- Identifiers, including name, email address, and online identifiers (such as IP address).
- Customer records, including credit or debit card information.
- Commercial or transaction information, including records of products or services purchased, traded, and sold products or services.
- Internet activity, including interactions with Websites, Apps, or advertisements.
- Inferences drawn from the above information about your predicted
characteristics and preferences.
Sale of Personal Data
We do not sell Personal Data as the term “sell” is traditionally
understood. Although to the extent the word “sale” is interpreted under
the CCPA, the fact that we use third-party cookies may be understood as
a sale. We disclose the following categories of personal information:
identifiers, commercial or transaction information, internet activity,
and inferences drawn from Google Analytics, Yandex.Metrica, Amplitude,
Facebook, TikTok, VKontakte (Third-party services). We only share
Personal Data with Third-party services upon service contracts
(Third-party services’ terms of use) to improve the service website
functionality and provide personalized content and ads. If you do not
want your Personal Data to be used for these purposes, please contact
our Customer Support.
Personal Data Breach
A Personal Data breach may result in a physical, material, or
non-material risk to your rights and freedoms if not addressed
appropriately and promptly. Therefore, as soon as we become aware that a
Personal Data breach has occurred, we will notify the Personal Data
Breach to the Commissioner for Personal Data Protection without undue
delay and, where feasible, not later than 72 hours after having become
aware of it, unless we can demonstrate, following the accountability
principle, that the Personal Data breach is unlikely to result in a risk
to your rights and freedoms. Where such notification cannot be achieved
within 72 hours, the reasons for the delay should accompany the notice
without undue further delay.
Children’s Privacy
We do not knowingly collect Personal Data from children or process
such information without parental consent. For the purpose of this
Privacy Policy, a child means any individual under 13 in the United
States or under 16 in the European Union (or the minimum legal age to
consent to the collection and processing of Personal Data where this is
different under applicable law). If you are a parent or guardian and
believe your child has provided us with personal information without
consent, please contact us at [email protected].
Cross-Border Data Transfer
CS.MONEY may transfer Personal Data to data controllers and processors established outside the European Union (the “EU”) or European Economic Area (“the EEA”) for the purposes stipulated in this Privacy Policy. The countries where the data may be transferred may not provide adequate protection.
To ensure that Personal Data is safeguarded, stored, and processed
securely, we use Standard contractual clauses (SCC) adopted by the
European Commission as a mechanism to transfer data from the EU
countries. Our partners established in countries with an inadequate
level of personal data protection have adopted SCC, as appropriate, to
ensure confidentiality, security, and legality of the processing of your
personal data.
Changes to Privacy Policy
We may amend this Privacy Policy from time to time. We will post any changes to the Privacy Policy. By continuing to use our Services, you acknowledge that you are familiar with the updated Privacy Policy. We encourage you to review our Privacy Policy before using the Services and/or accessing the Websites and/or the Application and promptly read the updates.