Who we are
Staack Games ("Staack", "we", "us") is a casino and iGaming development studio operated by Staack Games Studio, based in India. We design and build casino platforms, slot games, sportsbook and payment integrations for licensed operators, aggregators and platform providers.
We are the data controller for the personal data described in this policy. Questions and requests can be sent to staackgames@gmail.com.
What this policy covers
This policy applies to staackgames.com, to the email, Telegram and video calls we have with prospective and existing clients, and to the business records we keep while delivering a project.
It does not cover the players of casinos we build. When a client launches a product we developed, that client is the operator and the data controller for its players. Our access to any player data in that context is governed by our contract with the client and by a data processing agreement where one is required.
What we collect
- Contact details you give us through the contact form, by email or on a call: name, work email, company, role, Telegram or WhatsApp handle and the content of your message.
- Business information shared while scoping or delivering a project: target markets, licence status, platform stack, brand assets, documents and credentials to staging systems. We treat all of it as confidential whether or not an NDA is in place.
- Commercial records: proposals, agreements, invoices and payment references.
- Usage data when you browse the site, collected through Google Analytics once you accept analytics cookies: pages viewed, time on page, approximate location derived from a truncated IP address, browser and device type and the referring site. Your day/night theme choice is stored in your browser only and is never sent to us.
- Correspondence, including support requests after launch.
How we use it
- To answer enquiries, prepare proposals and agree a scope.
- To deliver, test, certify and support the work we have agreed with you.
- To invoice, collect payment and keep the accounting records the law requires.
- To keep the site and our systems secure, to detect abuse and to understand which pages are useful.
- To meet legal obligations, including requests from regulators and testing laboratories that relate to work we certified.
We do not sell personal data and we do not use it for third-party advertising. We may send occasional updates about our services to existing clients and people who asked for them; every such email includes an unsubscribe link.
Legal bases
Where the GDPR, the UK GDPR or a similar law applies we rely on: contract, for enquiries, proposals and delivery; legitimate interests, for running and securing the site, developing our business and keeping internal records, balanced against your rights; legal obligation, for accounting, tax and regulatory requests; and consent, where we ask for it, which you can withdraw at any time.
International transfers
Our team and our providers may process data outside the country you live in. Where a transfer leaves a jurisdiction with data protection law, we use recognised safeguards such as the European Commission's standard contractual clauses or an adequacy decision, and we keep a record of which safeguard applies.
How long we keep it
- Enquiries that do not become projects
- Up to 24 months after our last contact.
- Project records and agreements
- For the life of the agreement and 6 years afterwards, for legal and accounting purposes.
- Staging credentials and client assets
- Deleted or returned at hand-over, unless a support agreement requires us to keep them.
- Server and security logs
- Up to 12 months.
- Marketing preferences
- Until you unsubscribe or ask us to stop.
Security
Client assets and credentials are held in access-controlled systems with two-factor authentication, shared on a need-to-know basis and never sent in plain email once a project starts. Repositories, staging servers and documents are encrypted in transit and at rest by the providers we use. If a breach affects your personal data we will tell you and, where required, the supervisory authority without undue delay.
Your rights
Depending on where you live you may have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights write to staackgames@gmail.com. We answer within one month, and we may ask for proof of identity first.
If you are in the EU or UK you can also complain to your local data protection authority. We would appreciate the chance to resolve the matter first.
Children
This website and our services are for businesses. We do not knowingly collect personal data from anyone under 18. The products we build for clients carry age verification appropriate to the client's licence.
Changes to this policy
We will post changes on this page and update the date at the top. For material changes that affect existing clients we will also tell you by email.
Contact
Staack Games Studio, India
staackgames@gmail.com