Privacy Policy.

1. Who we are

StarsBanking is operated by Fail Faster Games ("we", "us", "our"), registered in Denmark (CVR 40938737). We are the controller of personal data collected via starsbanking.gamearea.io and the Telegram bot @starsarea.

Contact: support@gamearea.io or via @starsarea (Support).

2. What data we collect

2.1 Telegram account data

• Telegram User ID — unique numeric identifier provided by Telegram.
• Telegram username — your @-handle, if set.
• Display name — first and/or last name set in Telegram.

2.2 KYC data

• ID document (photo/scan) if KYC is required.
• Date of birth and full legal name provided at verification.

2.3 Transaction data

• Stars amount and fiat amount for each exchange.
• Card digits (last 4 only) or SBP phone numbers.
• Timestamps, statuses, and exchange identifiers.
• Blockchain transaction hashes or payment-provider IDs.

2.4 Technical and device data

• IP address during bot and website interactions.
• Browser fingerprint and user-agent (for website visitors).
• Device type and OS (approximate, from Telegram API).

2.5 Communications

• Messages sent to support via the bot.
• Emails to support@gamearea.io.

3. Why we collect it

• Service delivery: to process purchases, confirm payments, and automatically deliver Stars.
• Anti-fraud and security: to detect and prevent fraudulent transactions, money laundering, and other illegal activity.
• KYC/AML compliance: to satisfy Danish and EU AML obligations.
• Customer support: to answer queries, resolve exchange issues, and handle disputes.
• Service improvement: to analyze aggregated usage patterns and improve platform performance.
• Legal obligations: to comply with applicable laws, regulations, court orders, and lawful requests.

4. Legal bases (GDPR)

• Contract performance: processing is necessary to deliver the service you requested.
• Legal obligation: KYC/AML processing is required by law.
• Legitimate interest: anti-fraud, security monitoring, and service improvement — balanced against your rights.
• Consent: for any optional communications or analytics outside the above.

5. Retention

• Exchange records: 5 years from the exchange date, as required by AML rules.
• KYC/ID documents: 5 years after the last exchange or account activity.
• Support communications: 2 years from resolution.
• Technical logs (IP, fingerprint): 12 months.

After retention expires, data is securely deleted or anonymized.

6. Third parties

We do not sell your data. We may share data with:

• Payment processors and banking partners — to process card and SBP payments. Bound by their own policies and applicable regulations.
• Blockchain networks — crypto payments inherently broadcast addresses and transactions to public chains.
• KYC/AML verification providers — when needed, documents may be processed by a third-party verifier under a data-processing agreement.
• Law enforcement and regulators — on lawful request or court order.
• Cloud infrastructure providers — servers and databases may be hosted by third parties under appropriate safeguards.

7. Cookies and analytics

StarsBanking uses minimal cookies necessary for operation (session state, security). We may use privacy-respecting analytics for aggregated traffic patterns. No ad or tracking cookies. You can disable optional cookies in your browser.

8. Security

• Data encrypted in transit (HTTPS/TLS).
• Sensitive data encrypted at rest.
• Role-based access control — only authorized staff access data.
• Regular security audits and penetration testing.

No system is 100% secure. If a breach poses high risk to your rights, we'll notify you and the authorities per applicable law.

9. Your rights

Under GDPR you have the right to:

• Access: request a copy of personal data we hold on you.
• Rectification: correct inaccurate data.
• Erasure: request deletion, subject to retention obligations.
• Restriction: limit processing under certain conditions.
• Portability: receive data in a structured, common format.
• Object: oppose processing based on legitimate interest.
• Withdraw consent: where processing is based on consent.

Exercise any right via support@gamearea.io or via @starsarea. We reply within 30 days. You may also file a complaint with the Danish Data Protection Agency (Datatilsynet): datatilsynet.dk.

10. International transfers

Your data may be processed outside the European Economic Area by our service providers. When it is, we apply appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) in line with GDPR.

11. Changes

We may update this Policy from time to time. The updated version is posted here with a new effective date. Material changes are notified to active users via the bot.

12. Contact us

For any privacy question or to exercise your rights:

Fail Faster Games
CVR 40938737
Strandlodsvej 27C, 2300 Copenhagen S, Denmark
Email: support@gamearea.io
Telegram: @starsarea → Support