Ryvalto Privacy Policy
Contents
- 1. Controller and contact details
- 2. Data we may collect
- 3. Why we use personal data and legal bases
- 4. Where data comes from
- 5. Who we share data with
- 6. International transfers
- 7. Automated controls and profiling
- 8. Retention
- 9. Your rights
- 10. Complaints to a supervisory authority
- 11. Security
- 12. Users under 18
- 13. Cookies and similar technologies
- 14. Changes to this Privacy Policy
1. Controller and contact details
| Controller / operator | Playstar Finland Oy |
| Business ID | 3326920-9 |
| Registered office | Tuomaankatu 20, 48710 Kotka, Finland |
| Customer support | support@ryvalto.com |
| Legal / privacy contact | business@ryvalto.com |
| Website | https://ryvalto.com |
Playstar Finland Oy is the controller for personal data processed for Ryvalto purposes where it determines why and how the data is used. A third-party provider may be a separate controller where it independently determines processing required for payment, KYC/AML, crypto-asset, wallet, banking or other regulated services.
2. Data we may collect
| Category | Examples |
|---|---|
| Account and profile data | Name, username, email, country, date of birth/age status, language, profile data and account settings. |
| Identity and eligibility data | Verification status and, where required, identity, age, residence, current-location, sanctions, source-of-funds or wallet-ownership information. Some underlying KYC documents may be held only by the Gaming Provider. |
| Jurisdiction and device data | IP-derived location, device and network identifiers, country signals, VPN/proxy risk signals, login history and security events. |
| Tournament and gameplay data | Registrations, team data, match IDs, server logs, official API data, statistics, demos/replays, anti-cheat data, evidence, disputes, results, sanctions and settlement status. |
| Payment and transaction data | Subscription/coaching payment status, invoices, refunds, chargebacks, provider identifiers and settlement metadata. Ryvalto generally does not store full card credentials or private crypto-wallet keys. |
| Gaming Balance / Rials data | Mirrored balance status, Rials display values, entry reservations, settlement instructions and Gaming Provider references. Underlying funds or supported crypto-assets are administered by the Gaming Provider. |
| Referral data | Referral code, referrer/referred relationship, qualifying activity, Eligible Net Platform Revenue, rewards, reversals and payout status. |
| Coaching data | Bookings, Coach profile, messages, session status, reviews, cancellations and payment status where coaching is offered. |
| Communications and community data | Support tickets, complaints, messages, reports, reviews, User Content and moderation records. |
| Usage and analytics data | Feature interactions, pages/screens viewed, diagnostic events and analytics information, subject to applicable consent rules. |
3. Why we use personal data and legal bases
| Purpose | Basis and explanation |
|---|---|
| Provide the Platform and account | To create accounts, provide features, subscriptions, tournaments and coaching. Legal basis: performance of a contract or steps requested before entering a contract. |
| Eligibility and jurisdiction controls | To enforce age, residence, current-location, game, tournament-model and payment-method restrictions. Legal basis: contract, legal obligations and legitimate interests in lawful operation. |
| Payments and settlements | To process Service Payments, gaming settlement instructions, refunds and payouts through providers. Legal basis: contract and legal obligations. |
| Safety, integrity and fraud prevention | To detect cheating, collusion, false results, account compromise, self-referral abuse, sanctions evasion, payment fraud and circumvention. Legal basis: legitimate interests, contract and legal obligations. |
| Legal and regulatory compliance | To comply with tax, accounting, sanctions, consumer, gaming, payment and other legal obligations. Legal basis: legal obligation. |
| Customer support and complaints | To respond to requests, disputes, appeals and legal claims. Legal basis: contract, legal obligation and legitimate interests. |
| Product improvement and analytics | To diagnose errors and improve Ryvalto. Legal basis: legitimate interests and, where required, consent. |
| Marketing | To send marketing where lawfully permitted. Legal basis: consent or another lawful basis available under applicable marketing law. You can opt out of direct marketing. |
4. Where data comes from
- directly from you;
- your use of Ryvalto, approved game servers, official publisher/game APIs and integrity tools;
- Stripe and other Service Payment providers;
- Gaming Providers, wallet/CASP/payment providers and verification vendors;
- Coaches, tournament administrators, referees or other users where relevant to a booking, team, report or dispute;
- public or lawful sanctions/fraud sources and competent authorities where permitted.
6. International transfers
Ryvalto is operated from Finland. Some providers may process data outside Finland or the EEA. Where the GDPR requires a transfer mechanism, Ryvalto uses an adequacy decision, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism. Provider-specific information may also appear in the provider’s own privacy notice.
7. Automated controls and profiling
Ryvalto may use automated signals to assess account security, fraud risk, geolocation, VPN/proxy risk, referral eligibility, tournament integrity and feature availability. These systems may flag or temporarily restrict an activity for review. Where applicable law gives you rights concerning a decision based solely on automated processing that produces legal or similarly significant effects, Ryvalto will provide the required information and review rights.
8. Retention
Ryvalto keeps personal data only for as long as necessary for the purposes described above and to meet legal, accounting, tax, security, fraud-prevention and dispute requirements. Retention depends on the data type and jurisdiction.
| Data | Retention approach |
|---|---|
| Account/profile data | Generally for the life of the account and a reasonable period after closure where needed for legal claims, fraud prevention or legal obligations. |
| Transaction/accounting records | For the period required by applicable accounting, tax and consumer law. |
| Tournament integrity evidence | For the dispute period and thereafter for a proportionate period where needed for anti-fraud, sanctions, legal claims or repeat-offender controls. |
| Support/complaint records | For as long as needed to resolve the matter and defend or establish legal rights. |
| KYC/AML records | According to the applicable legal obligations and the retention rules of the relevant regulated provider. Some records may not be held by Ryvalto. |
| Marketing consent/preferences | Until consent is withdrawn or the preference is superseded, with evidence of the preference retained where necessary to demonstrate compliance. |
9. Your rights
Subject to applicable law, you may have the right to access your personal data; correct inaccurate data; request deletion; restrict processing; object to processing based on legitimate interests; receive portable data; withdraw consent; and obtain safeguards information for certain international transfers. These rights can have legal exceptions, including records Ryvalto must retain.
Requests may be sent to business@ryvalto.com. Ryvalto may need to verify your identity before acting on a request.
11. Security
Ryvalto uses technical and organisational measures appropriate to the nature and risk of the processing, including access controls, authentication, logging, provider segregation and security monitoring. No online service can guarantee absolute security. Please notify us promptly if you suspect account compromise.
12. Users under 18
Ryvalto accounts are intended for users aged 18 or older unless Ryvalto later introduces a separately designed and lawfully approved minor-account flow. Paid gaming functions may have stricter age requirements.
14. Changes to this Privacy Policy
Ryvalto may update this Policy when its services, providers or legal obligations change. Material changes will be communicated where required by law. The current version and effective date will be shown on the Platform.