Arcadia processes only data reasonably needed to provide, secure, improve and administer the Service, handle payments/support and enforce published rules.

Data practices may differ for optional third-party payment, analytics, social or embedded services; their own notices may also apply.

• Username/account identifiers, email and security/recovery settings.
• Support communications and information voluntarily provided for ownership verification.
• Language, preferences and consent choices.

• Characters, inventory, levels, trades, market, events, rankings, chat and gameplay records.
• IP address, login/session time, launcher/client version, device/installation identifiers and connection metadata.
• Anticheat/process/integrity signals reasonably necessary to detect unauthorized modification, automation, cheating, exploits or evasion.

Arcadia may receive transaction reference, payer/account identifiers, amount, currency, status, risk signals and provider confirmations. Arcadia should not require full card numbers or payment passwords in Support.

Payment providers independently process information under their own privacy terms.

• Create, authenticate, recover and secure Accounts.
• Operate gameplay, rankings, events, economy and customer support.
• Detect cheats, fraud, exploits, Account-limit/sanction evasion and infrastructure abuse.
• Process/deliver purchases, investigate disputes and maintain accounting/security records.
• Measure reliability, errors, performance and service improvements.

Arcadia may share only what is reasonably necessary with hosting/security/payment/support providers, professional advisers or lawful authorities, subject to appropriate obligations.

Advertisers do not receive private game conversations merely because advertising exists. Arcadia does not sell player personal data as a data-broker product.

Data is retained for as long as reasonably necessary for Account operation, security, fraud/exploit investigation, payment records, backups, disputes and legal obligations. Different records may have different retention periods.

Security backups/logs may persist temporarily after deletion requests where immediate deletion would undermine integrity, fraud prevention or legal duties.

Users may request reasonable access/correction/deletion or other rights available under applicable law through official Support/privacy contact. Arcadia may verify identity before acting.

Some data cannot be deleted immediately where retention is necessary for fraud/security, transactions, sanctions, dispute defense, backups or mandatory law.

Arcadia uses reasonable technical/organizational safeguards but no online service can promise absolute security. Users should use a unique password and protect their email and devices.

Never send your password to staff. Report suspected compromise through official Support.