
DATA PROTECTION
POLICY
This Data Protection Policy explains how we collect, store, use, and protect personal data at Beast Games Register, particularly during the user registration and payment processes.
1. PURPOSE
We collect personal data exclusively for the following purposes:
- Identifying and authenticating participants
- Processing payments and validating event entries
- Sending confirmation emails and event-related updates
- Delivering marketing content to users who have provided consent
2. SCOPE
This policy applies to all users who interact with Beast Games Register in the following ways:
- Visiting our website
- Registering for events (e.g., Beast Games Register Season 3)
- Subscribing to newsletters or updates
3. DATA STORAGE
All personal data is stored securely using modern, industry-standard technologies:
- MongoDB Atlas: Encrypted cloud-based database for secure data storage
- Node.js / Express: API backend with strict access control and security measures
- Next.js / Vercel: Frontend platform used for secure delivery of user interfaces
4. DATA ACCESS AND RESPONSIBILITY
Access to user data is strictly limited to authorized Beast Games Register personnel. No data is shared with third-party vendors or platforms unless it is:
- Required for a specific service (e.g., email delivery)
- Legally compliant under applicable data protection laws
5. DATA TRANSFERS
If data is transferred internationally (e.g., from the EU to the US), we implement legal safeguards such as:
- Use of Standard Contractual Clauses (SCCs)
- End-to-end encryption during data transmission
- Storage in secure, privacy-compliant environments
6. BREACH POLICY
In the event of a data breach, we will:
- Immediately notify any users whose data may be affected
- Report the incident to regulatory authorities within 72 hours
- Maintain transparent communication and provide timely updates
7. YOUR RIGHTS
You are entitled to exercise your data protection rights at any time. For a detailed list, refer to our full Privacy Policy. These rights include:
- Right to access your personal data
- Right to correct or update your data
- Right to delete your data (right to be forgotten)
- Right to export your data in a portable format
