Privacy Policy

1.Data we collect

We collect the following categories of personal data, most of which you provide directly:

• Account data — name or display name, email address, password hash, country, preferred language and currency.
• Identity and verification data — for sellers and for buyers flagged by our fraud checks: government ID, proof of address and business registration details, collected through our verification provider.
• Transaction data — orders placed, listings purchased, prices paid, payment method type, partial card details (brand and last four digits), billing country, payout details for sellers, and refund and chargeback history.
• Delivery data — the game account identifier, player ID, server or region you supply so a seller can deliver a top up or in-game item.
• Support and dispute data — messages, screenshots, video evidence and order logs you submit to support.g2gamers.com or exchange with a counterparty.
• Technical data — IP address, device and browser identifiers, operating system, timestamps, referring pages and interactions with the Platform.
• Marketing data — newsletter subscription status and your responses to our emails.

2.How we use your data

• To create and administer your account and authenticate you across our subdomains.
• To process orders, hold funds in escrow, release payouts to sellers and issue refunds.
• To detect, investigate and prevent fraud, account takeover, stolen-key resale, money laundering and abuse of the Platform.
• To operate the dispute process, including sharing relevant evidence between buyer, seller and our support team.
• To provide customer support and respond to your requests.
• To comply with tax, accounting, anti-money-laundering and other legal obligations.
• To improve the Platform through aggregated analytics and, with your consent where required, to send marketing communications.

3.Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (processing your orders and providing the Platform); legal obligation (tax, accounting and anti-money-laundering rules); legitimate interests (fraud prevention, platform security, service improvement and direct marketing to existing customers); and consent (marketing emails where consent is required, and non-essential cookies). You may withdraw consent at any time without affecting processing carried out before withdrawal.

4.Cookies and similar technologies

We use strictly necessary cookies for login sessions, cart state and security. With your consent we also use analytics cookies to understand how the Platform is used and marketing cookies to measure campaign performance. You can manage non-essential cookies at any time through the cookie settings link in the footer, or through your browser settings.

Our session cookie is scoped to .g2gamers.com so that a single login works across the marketplace, seller portal and support portal.

5.Who we share data with

We do not sell your personal data.

• Sellers — limited order and delivery data required to fulfil your purchase. Sellers never receive your payment details.
• Payment processors and acquirers — to take payment, run 3-D Secure, handle chargebacks and pay out sellers.
• Identity verification and fraud-prevention providers — to run KYC and risk scoring.
• Cloud hosting, email, analytics and customer-support providers acting as our processors under written contracts.
• Authorities, regulators and legal advisers where we are legally required to disclose data or need to establish or defend legal claims.
• An acquirer or successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy.

6.International transfers

Our providers may process data outside your country, including outside the EEA and the UK. Where that happens we rely on an adequacy decision or on Standard Contractual Clauses together with supplementary technical measures such as encryption in transit and at rest. You can request a copy of the relevant safeguards using the contact details below.

7.How long we keep data

• Account data — for as long as your account is open, then up to 24 months after closure.
• Transaction, invoice and tax records — for the retention period required by applicable tax law, typically 7 to 10 years.
• Dispute and evidence records — 3 years from resolution, or longer where a claim remains open.
• Fraud and abuse records, including blocked accounts and devices — up to 6 years, to prevent repeat abuse.
• Technical logs — 12 months.

8.Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, withdraw consent, and opt out of marketing at any time. California residents may additionally request disclosure of the categories of data collected and may opt out of any sharing treated as a sale under the CCPA.

To exercise a right, email us using the address below. We respond within one month, and will tell you if we need longer for a complex request. If you are unhappy with our response you may complain to your local data protection authority.

9.Security

We protect the Platform with encryption in transit and at rest, hashed passwords, role-based access control, network segmentation between the buyer, seller and support surfaces, audit logging and continuous monitoring. Delivered digital goods such as keys and account credentials are stored encrypted and revealed only to the buyer of the corresponding order.

No system is perfectly secure. Enable two-factor authentication on your account, never reuse passwords, and never share credentials with anyone claiming to be G2Gamers staff.

10.Children

The Platform is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11.Changes to this policy

We may update this Policy to reflect changes to the Platform or to the law. Material changes are announced by email or by a notice on the Platform at least 14 days before they take effect. The date at the top of this page always shows the current version.