Privacy Policy

If you are a Customer (brand/agency/business) running a promotion, you decide which participant fields are collected, why they are collected, and how long they are retained. In many cases, you act as the Data Controller. MyPromoPlay typically acts as a Data Processor / Platform Provider, processing data on the Customer’s behalf to operate the promotion. Participants: privacy requests (access/correction/deletion) should generally be directed first to the organizing brand. MyPromoPlay will assist where applicable.

We may collect: A) Customer account data Name, email, company, country, credentials, account settings, admin activity. B) Campaign data Game configuration, rules, prizes, inventory/stock, reporting, and uploaded assets (logos, images, copy). C) Participant data (as configured by the Customer and with participant consent) Depending on the Customer’s requirements and the consent presented within the promotion, participant fields may include: Full name, Email, Phone number, Government ID / national ID (e.g., “cédula” or equivalent). We also generate participation logs (timestamp, outcome, redemptions). Important: fields vary by campaign. The Customer is responsible for defining and justifying the data collected under applicable law. D) Technical data Approximate IP, device/browser, language, logs, performance and error metrics. E) Analytics (Google Analytics) We use Google Analytics to understand how our site is used and improve performance (e.g., pages viewed, events, session duration, device/browser type). Google Analytics may use cookies and similar technologies.

We use information to: - Operate and maintain the Services (campaigns, games, reporting). - Maintain security and prevent fraud/abuse. - Provide support and service communications. - Improve performance, stability, and user experience. - Run website analytics (Google Analytics), as applicable and based on preferences/consent. - Comply with legal obligations.

Depending on jurisdiction and context: - Contract (delivering Services to Customers). - Legitimate interests (security, fraud prevention, technical improvements). - Consent (especially for non-essential cookies and, where applicable, participant data collection within a promotion). - Legal obligation (compliance).

We may share information with: - The organizing Customer (their campaign data and reports). - Vendors (hosting, storage, analytics, messaging, support) under confidentiality and security terms. - Authorities when required by law or to protect rights and safety. We do not sell personal data.

Data may be processed outside a user’s country (e.g., global hosting/vendor infrastructure). Where required (EU/EEA/UK), we apply reasonable safeguards such as Standard Contractual Clauses or other valid mechanisms.

We keep data only as long as necessary to deliver the Services, meet legal requirements, maintain security/auditability, and resolve disputes. Retention can vary by campaign and Customer contract.

We use reasonable measures (access controls, encryption in transit, monitoring, secure development practices). No system is 100% secure, but we actively reduce risk.

EU/EEA/UK: rights to access, rectify, delete, restrict, object, and portability; and the right to lodge a complaint with a supervisory authority. U.S. (state laws may apply): rights to access, delete, correct; and where applicable, opt out of “selling/sharing” for targeted advertising. MyPromoPlay does not sell personal data. How to exercise rights: - Participants: contact the organizing Customer first. - Customers: email info@mypromoplay.com.

Services are not intended for children. Customers are responsible for configuring campaigns in line with applicable age laws.

We may update this Policy and will post the current version with its date.