Privacy and Data Protection

1. Controller

GTLIKE is operated by the GTLIKE operator, UEN 202441448H, 105 Cecil Street, The Octagon, Singapore 069534. Privacy contact: info@gtlike.com.

2. Data we process

We process data needed to sell and operate the game: email address, selected language, order and payment status, amount, currency, payment reference, order/payment timestamps and technical email-delivery records.

After sign-in we may store player ID, access-code hash, session records and timestamps, hashed IP address, browser user-agent, security/audit records, cloud game saves, statistics and settings. Multiplayer stores the public player name you choose, server, game position/state, chat messages and multiplayer events.

GTLIKE does not store your online-banking login credentials.

3. Purposes and legal bases

• Contract: creating the order, verifying payment, issuing/verifying access, authentication, cloud saves and multiplayer.
• Legitimate interests: service security, fraud/abuse prevention, debugging, account protection and basic operational auditing where your rights do not override those interests.
• Legal obligations: accounting, tax, payment and other records that applicable law requires us to keep.
• Consent where required: for example marketing newsletters or other optional processing. Consent can be withdrawn at any time.

4. Payments

Payments are matched using the amount and a unique reference. We may keep a transaction identifier, reference text and information necessary to prove payment. Banks and other financial providers process their own records under their own notices.

5. Multiplayer and public content

Your chosen multiplayer name and messages sent to multiplayer chat may be visible to other players on the same server. Do not place information in a public name or chat that you do not want other players to see.

6. Cookies and local storage

We use a strictly necessary session cookie for secure sign-in. The game uses localStorage for local saves, last-position recovery, audio settings and remembering dismissal of the cookie notice. See the Cookies page for details.

7. Recipients and service providers

Data may be made available to hosting, email, banking/payment and technical providers only as needed to deliver, secure or legally support the service. We do not sell personal data. The current site is not configured to use advertising or cross-context behavioural-advertising cookies.

8. International transfers

GTLIKE is operated from Singapore and data may be processed outside your country of residence. Where law requires safeguards for international transfers, we will use an appropriate legal mechanism together with reasonable technical and contractual safeguards.

9. Retention

We keep data only as long as needed for the account and game access, security, disputes and mandatory accounting or tax obligations. Active-account and cloud-save data may be retained while access is provided. Security/session data is generally kept for shorter operational periods. When no longer needed, data is deleted, anonymised or retained only to the extent required by law.

10. Your rights by region

This notice is intended to operate globally. If the mandatory law of your location gives you stronger rights, those rights prevail.

• EU/EEA: GDPR rights may include information, access, rectification, erasure, restriction, portability, objection, withdrawal of consent and protections relating to automated decisions; you may complain to your competent supervisory authority.
• United Kingdom: corresponding rights apply under UK GDPR and the Data Protection Act; complaints may be made to the ICO.
• Switzerland: rights apply under the Swiss Federal Act on Data Protection, including access and correction where provided by law.
• United States: depending on your state, you may have rights to know/access, correct, delete, obtain a copy and in some cases opt out of sale/sharing or targeted advertising. California consumers may have CCPA/CPRA rights including know, delete, correct, limit certain sensitive-data uses, opt out of sale/sharing, and non-discrimination.
• Canada: PIPEDA and applicable provincial laws may provide transparency, access, correction and complaint rights.
• Brazil: LGPD rights may include confirmation of processing, access, correction, lawful anonymisation/blocking/deletion, portability, information about sharing and withdrawal of consent.
• Australia and New Zealand: applicable privacy laws may provide access, correction and complaint rights.
• Singapore: PDPA rights include access and correction and other protections provided by law.
• Other countries: every mandatory local privacy right remains available even if that country is not specifically listed here.

11. Marketing

We send marketing email only with valid consent or another legal basis permitted by local law. Newsletters provide an unsubscribe mechanism. Unsubscribing from marketing does not stop transactional or security messages needed for your purchase or account.

12. Security and breaches

We use reasonable technical and organisational measures, including hashing access/session tokens, session controls and security logs. No system can be guaranteed completely secure. Where a law requires breach notification to an authority or affected individuals, we will make the required notification.

13. Requests and complaints

Send access, correction, deletion, restriction, objection, portability, consent-withdrawal or other local-law requests to info@gtlike.com. We may reasonably verify identity before acting. You may also contact the privacy/data-protection authority responsible for your location.

14. Changes

We may update this notice when the service or legal requirements change. Material changes will be posted on this page with a new updated date.