Privacy Policy

If you connect a third-party account to CSRAGE, we collect the information needed to authenticate you and operate linked features. Data is used for account management, fraud prevention, and service delivery — not sold to unrelated third parties.

• Steam: Account name, avatar, Steam ID64; voluntarily provided: trade URL; inventory metadata when you deposit skins — Steam Subscriber Agreement
• Google: Account name, email, profile picture when you sign in with Google.
• Discord: Account name and user ID when you sign in with Discord.

We collect technical and behavioral data when you use CSRAGE to secure accounts, detect abuse, and improve reliability. This may include IP address, device identifiers, browser data, session logs, and gameplay patterns.

• Server and application logs (legitimate interests / legal obligation);
• Security monitoring for suspicious login, payment, or wagering activity;
• Internal analytics to understand feature usage where not overridden by your rights.

Payment processors receive the data required to complete transactions. CSRAGE does not store full card numbers on our servers.

• Stripe, Inc. — card deposits — Personal Data: payment metadata, email, transaction references — Privacy Policy
• NowPayments — cryptocurrency deposits and withdrawals — Personal Data: wallet addresses, transaction hashes, amounts, status — refer to NowPayments published privacy documentation;

When you open Support, we load the Crisp chat service. For signed-in players, our server generates a private support-session token to keep their conversations associated with their account. We also provide their Account ID and display name, together with the support entry point and site language. We do not automatically send your balance, payment details, email address, or site sign-in credentials to the chat service.

Crisp processes the messages, attachments and contact information you choose to provide, together with technical session information such as IP address, browser information and page visits while the service is active. This enables support replies and conversation continuity. Live typing preview for support operators is disabled. See the Crisp Privacy Policy. You can contact [email protected] by email instead.

Infrastructure providers process data necessary to host the Website, databases, and backups.

• Cloud hosting and database services — Personal Data: IP address, request logs, Account data stored on our systems;
• Content delivery and DDoS protection — Personal Data: IP address, cookies, request metadata as specified by the provider.

• Direct registration — Personal Data: email address, username, password hash, User ID, cookies;
• Steam OpenID — Personal Data: Steam ID64 and public profile fields;
• Google / Discord OAuth — Personal Data: provider user ID, email where available, display name.

• Public profile — Personal Data: username, avatar, level, statistics visible to other users;
• Chat — Personal Data: messages, timestamps, moderation flags;
• Referrals — Personal Data: referral code usage and commission relationships.

• Contract (Art. 6(1)(b)): operating your Account, games, cashier, and support;
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, product improvement;
• Legal obligation (Art. 6(1)(c)): tax, accounting, AML, lawful requests;
• Consent (Art. 6(1)(a)): optional marketing where you opt in.

• Account data: for the life of the Account and up to three (3) years after closure unless longer retention is required;
• Financial records: up to five (5) years for compliance;
• KYC documents: minimum five (5) years after the end of the business relationship where AML rules apply;
• Support tickets: typically twelve (12) months unless you request erasure and no legal hold applies.

We do not sell personal data. We may share data with processors listed above, professional advisers, and authorities when required by law. We may share information to prevent fraud or protect users where permitted by law.

Some processors may process data outside the EEA. We use appropriate safeguards such as Standard Contractual Clauses where required. Contact [email protected] for more information.

We may use automated systems for fraud scoring, bonus eligibility, and risk limits. You may contact us to request human review of decisions that significantly affect you, where required by law.

Marketing is sent only with consent or where otherwise lawful. Opt out via unsubscribe links, Account settings, or [email protected].

You may request access, rectification, erasure, restriction, portability, or object to processing; withdraw consent; and lodge a complaint with a supervisory authority.

Contact [email protected]. We respond within one month where GDPR applies, subject to identity verification.

We use TLS encryption, access controls, and monitoring. If a breach likely affects your rights, we will notify you and authorities as required, typically within seventy-two (72) hours where feasible.

CSRAGE is 18+ only. We delete Accounts and data associated with minors when identified.

Request Account deletion via [email protected]. Some identifying information may be retained for AML and legal compliance. Deletion requests to evade bans or limits are not permitted.

We use essential, functional, and analytics cookies. See our Cookie Policy for details and controls.

We post updates on the Website with a revised date. Material changes may be notified in advance where practicable.