Privacy Policy | gameloom

gameloom ("we", "us", or "our") is operated by Gameloom FZ-LLC, a company registered in the United Arab Emirates. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations, as well as Federal Decree-Law No. 26 of 2025 on Child Digital Safety where applicable.

By accessing or using the gameloom platform, you acknowledge that you have read and understood this policy.

1. Data Controller

The data controller responsible for processing your personal data is:

Gameloom FZ-LLC
United Arab Emirates
Contact: contact@gameloom.ai

2. Personal Data We Collect

We may collect the following categories of personal data:

Account data: Email address, full name, password (hashed), and organisation type when you register
Whitelist application data: Email, name, organisation type, and any message you provide when applying for early access
Usage data: Pages visited, features used, session duration, browser type, device type, and IP address
Communication data: Any messages or correspondence you send to us
Payment data: Processed by our third-party payment provider; we do not store full payment card details

3. Legal Basis for Processing

Under the PDPL, we process your personal data on the following grounds:

Consent (Article 5): Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications
Contractual necessity (Article 5): Processing necessary for the performance of a contract to which you are a party, including providing and maintaining our platform services
Legitimate interest (Article 5): Processing necessary for our legitimate interests, such as improving our platform, preventing fraud, and ensuring security, provided such interests do not override your fundamental rights
Legal obligation (Article 5): Processing required to comply with applicable UAE laws and regulations

4. How We Use Your Data

We use your personal data to:

Provide, maintain, and improve the gameloom platform
Create and manage your account
Process whitelist applications and manage early access
Communicate with you about your account, updates, and support
Analyse platform usage to improve our services
Comply with legal obligations under UAE law
Detect, prevent, and address fraud and security issues

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

Service providers: Third-party processors who assist us in operating the platform (hosting, analytics, email), bound by data processing agreements compliant with the PDPL
Legal authorities: Where required by UAE law, regulation, or valid legal process
Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate data protection safeguards

6. Cross-Border Data Transfers

In accordance with Article 22 of the PDPL, personal data may be transferred outside the UAE only to jurisdictions that provide an adequate level of data protection as determined by the UAE Data Office, or where appropriate safeguards are in place (such as standard contractual clauses or binding corporate rules). We ensure that any cross-border transfer complies with the PDPL and its implementing regulations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law. When data is no longer needed, we securely delete or anonymise it in accordance with Article 17 of the PDPL.

Account data: Retained for the duration of your account and for up to 12 months after deletion
Usage data: Retained for up to 24 months for analytics purposes
Whitelist applications: Retained for up to 12 months after the application decision

8. Your Rights

Under the PDPL, you have the following rights:

Right of access (Article 13): Request a copy of your personal data
Right to rectification (Article 14): Request correction of inaccurate data
Right to erasure (Article 15): Request deletion of your personal data, subject to legal retention requirements
Right to restrict processing (Article 16): Request limitation of processing in certain circumstances
Right to data portability (Article 17): Receive your data in a structured, commonly used format
Right to object (Article 18): Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise your rights, contact us at contact@gameloom.ai. We will respond within 14 days as required by the PDPL.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 20 of the PDPL. These measures include encryption in transit and at rest, access controls, and regular security reviews.

10. Children's Data

In compliance with Federal Decree-Law No. 26 of 2025 on Child Digital Safety, gameloom is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyse platform usage. You may manage cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the UAE Data Office and affected individuals without undue delay, in accordance with Article 21 of the PDPL.

13. Supervisory Authority

The competent supervisory authority for data protection matters in the UAE is the UAE Data Office, established under the PDPL. You have the right to lodge a complaint with the UAE Data Office if you believe your data protection rights have been violated.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

15. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

Gameloom FZ-LLC
Email: contact@gameloom.ai