Mistplay User Privacy Notice

LAST UPDATED: September 25, 2023

This Privacy Policy has been updated to reflect developments in our Services, which may affect our Users, and to provide general updates to the structure and overview of this Policy so as to make it more accessible to you. Please review the Policy below for further details.


Please read the terms of this Mistplay User Privacy Notice (this “Policy”) carefully. The Policy describes to users (“User,” or “Users,” or “you”) how Mistplay Inc. (“Mistplay”, “we,” “us” or “our”) collects, uses, discloses or otherwise processes your personal data collected in connection with websites, mobile applications, progressive web applications, content, features, digital events or products we create or operate (the “Services”). This Policy is incorporated into and forms a part of Mistplay’s Global Terms of Use (the “Terms”). As used below, capitalized terms not defined in this Policy have the meaning given to them in the Terms. “Personal data” and “personal information” generally mean any information that directly or indirectly identifies you, which might vary slightly depending on applicable laws. Examples of personal data include your name, email address, gender, age, and other information about you such as data about your device or how you use the Services. This Policy does not govern your use of a third-party developer’s game that you discover and access through the Services. The processing of your data by the game developer (“Game Partners”) is governed by the game developer’s privacy policy which you should review prior to using their game and when exercising any rights subject to Game Partners privacy policy.

Please note, if you are younger than 18, you are prohibited from registering for a Mistplay user account.

Be sure to return to this page periodically to review the most current version of the Policy. We may change or otherwise modify the Policy, such as in order to reflect changes in the Services. If we modify it, we will update the "Last Updated" date and will alert users that a change has occurred within the affected Services. Please do not use the Services if you do not accept the current Policy including any addendums that apply to you in Annex A: Region-Specific Notices.


Mistplay is the controller, within the meaning of applicable laws, with regard to the collection, processing and use of personal data in the context of the Services and as described in this Policy. This means Mistplay is responsible for deciding the purpose and the means of how your personal information will be used and processed. We collect information that you direct us to collect, such as your name and email when you set up a Mistplay account; indirectly, such as your IP address or device location when you download our app; and from other sources, such as public record sources; social media platforms; or information from our partners or clients, depending on our relationship with them for the purposes listed in this Policy and in accordance with applicable laws. We have specified the personal data we collect in Annex B Table for Legal Processing Activities to this Policy.


Mistplay may link or combine the personal data we collect through several methods, including but not limited to artificial intelligence (“AI”), so that we may provide you with a personalized experience. We generally use personal data to:

  • provide, deliver, monitor and improve our Services, which requires us to track third party app installations (conversions) to award points, offer rewards to Users based on their active usage of Game Partner applications and enable in-app gift card redemption.
  • personalize the Services for you with tailored suggestions of games, features and events through the Services
  • market Mistplay’s Services on third-party platforms, including mobile applications and websites
  • offer participation in activities such as contests, sweepstakes and other digital events and determine winners
  • meet operational and business transaction requirements such as billing, attribution of game installs, accounting, calculating Units earned in the Rewards Program and delivering prizes for contests, sweepstakes and other promotions
  • verify your digital identity to prevent fraud and secure our platform and Services
  • develop new products and update features in our Services
  • create operational reports and develop insights about our business with aggregate data or in a format that is anonymized and cannot be used to re-identify Users
  • communicate with you according to your preferences
  • help train our machine learning and AI models to provide you with personalized content and user experience as well as for the purposes outlined in this Policy 
  • troubleshoot software bugs and operational problems
  • provide technical and customer support and respond to requests, complaints and feedback.

The legal basis for Mistplay processing your personal data as described in this Policy will typically include one or more of the following:

  • performance of our agreement with Users
  • meeting our legal and compliance obligations
  • our legitimate interest in, for example, monitoring, promoting and improving services we provide, providing customer support, securing the Services, assuring use of our Services in accordance with our Terms, analyzing personal data and developing new products and services
  • consent, when required by applicable laws, as further explained in the regional notices in Annex A.  

For more information on the legal basis for specific processing activities, see Annex B.


We share data with the following third parties that support us in delivering and analyzing the Services.

Corporate Affiliates and Transaction Parties. We may share your personal data with our subsidiaries or affiliates under common corporate control and with counterparties as part of corporate transactions such as merger, sale of company assets, financing or acquisitions.   

Law Enforcement, Regulators and Other Parties for Legal and Security Reasons. We may disclose personal data when necessary to protect the legal rights of Mistplay, Users or third parties, in order to avoid fraud, manage our risks or comply with applicable laws, legal orders or processes. This includes exchanging information with other companies for these purposes. In these cases, we disclose personal data to comply with legal obligations or to protect the legitimate interests of Mistplay or affected third parties.

Service Providers. We have agreements with various service providers to facilitate delivery of our Services, which include those we engage to give customer support, operate the technical infrastructure needed to provide the Services, assist in providing you rewards and protecting and securing our systems and Services and to help market Mistplay Services. 

Service providers that we use are required by contract to have the same level of privacy protection as we have and will follow the standards of this Policy. Other providers enable us to tailor the Services we provide to you and may also combine the personal data we share with them with other data they collect about you, e.g. your use of their services.

  • Advertising Platforms and Networks. We partner with certain providers to either display advertising on their sites, conduct analytics in relation to advertisements or to manage our advertising on other sites. Personal information we disclose to these vendors include device IDs and IP addresses to keep or exclude as part of advertising campaigns for Mistplay in order to limit the number of times Users view a specific campaign and to assure we enforce user preferences about receiving messages. 
  • Marketing Vendors. Our marketing vendors offer general campaign support, administer testing, deliver events to engage with Users and surveys, contests and sweepstakes, subject to applicable law. If you choose to participate in one of these offers, your personal data may be disclosed to these marketing vendors for record keeping purposes, as required by law (e.g to names of sweepstakes winners).
  • Analytics. We work with several providers that help us analyze and understand the personal data about you and develop trends, patterns and insights to optimize sales, improve our Services and create new products. These analytics providers also support billing and attribution by providing and analyzing Gameplay Data.

Game Partners. We may share personal information with our Game Partners, including in some cases, their mobile measurement partners, to provide you, among other things, with personalized content, for marketing purposes, to grow our business and for attribution of game installs and for reporting purposes. If you choose to access a game recommended through our Services, you will share your personal data with the Game Partner that develops the game, subject to the Game Partners’s privacy policies.

Mistplay may also disclose aggregated information about Users along with information that does not and cannot identify any individual or device, except where limited by applicable laws. For example, we may use anonymized user ratings, review of apps and aggregated information for statistical and machine learning purposes, to provide insights into developing or enhancing Services, for marketing and advertising and for other legally permissible purposes such as testing our IT systems and features. For more information regarding the sharing of data with third parties please review the applicable sections below and notices within Annex A or contact us as instructed below.


We are based in Canada and we store information that we collect from your device on our Amazon Web Services servers in the United States. The information that we collect may be transferred, stored, or used in other jurisdictions, where some of our providers may be located. While we protect your information by choosing appropriate providers and having contractual safeguards in place with those vendors, the privacy laws in such jurisdictions may not be as protective as in, for example, Canada or the EU.

We maintain administrative, organizational procedures, technical and physical safeguards, consistent with legal requirements where the personal data was obtained, designed to ensure the security and confidentiality against unlawful or unauthorized destruction, loss, alteration, use or disclosure of, or access to, the personal data we collect and process. 

If you are resident of a country in Europe, please see Annex A below for more information on international data transfers that are applicable to you.


You can always update preferences and exercise rights you may have under applicable data protection laws by contacting us as directed below. However, if you do choose to change preferences, opt-out or withdraw consent where it has been given, your experience with our Services may change, be diminished or your ability to use some of the features and options in our Services may be limited (such as access to Units and the Rewards Program described in our Terms). Please keep us informed if your personal data changes or should be corrected.

For a description of the specific rights with respect to accessing and deleting personal information that are provided to residents of certain European countries, Korea and the states of California, Colorado, Connecticut and Virginia, please see Annex A for Region-Specific Notices. We will handle your request in accordance with applicable laws, such as in relation to response time, verification of identity and content. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Depending on your jurisdiction, your rights may include:

  • The Right to Opt Out of Marketing Communications sent by Mistplay. This can be done also by clicking on the unsubscribe link in the marketing  or promotion email you receive. Please note that if you opt out of receiving marketing or promotion messages from us, we may still send you important Service-related messages, from which you cannot opt out. You can opt out of receiving push notifications through your device settings. Please note that opting out of receiving push notifications may impact your use of the Services.
  • The Right to Withdraw Consent. Where you provided us with your consent, you may withdraw your consent to the collection and processing of personal data at any time by sending a written request to Privacy@Mistplay.Com. Upon receiving notice that you have revoked your consent, we will stop processing your personal data without undue delay. Withdrawing consent may impact your use of the Services, such as access to certain events and eligibility for earning rewards.
  • The Right to Erase Your Personal Data or Delete Your account. By deleting your account, any Units that you have earned and not redeemed will be deleted. Please note that we will send you an email requesting your confirmation before we delete your account, and we may not be able to delete all data you requested, for instance to comply with applicable tax laws.
  • The Right to Object to the Processing of Personal Data. If we receive such a request, we will review your objection and delete personal data that we processed for the purpose to which you objected without undue delay, unless another legal basis for processing and retaining this data exists or applicable law requires us to retain the data.



In accordance with the Terms, you may not use the Service if you are under 18 years old. Mistplay is committed to complying with laws protecting children, within the meaning of applicable law. If you believe we might have any information from or about a child, please contact us.


Mistplay will only retain personal data for as long as is required by law, as long as you use the Services, or as long as is necessary to meet the purposes for which it was collected.  For example, Mistplay account balances or rewards earned as of termination must be preserved for some period to allow for such matters as billing and tax reporting. Specifically, we destroy your personal information or store it separately if you do not interact with our services for 5 years. 

Note, under the Terms, if a User does not use the Service for at least one hundred eighty days, the User’s inactive account may be terminated, Units earned may automatically expire and personal data may be deleted.

You may also ask us to delete your account. By deleting your account, however, any Units that you have earned and not redeemed will be deleted. Otherwise, if we choose to maintain or use de-identified information, we continue to do so in a de-identified manner and will not attempt to re-identify you. To delete personal data held by Game Partners, you must contact them as directed under the terms of the Game Partners privacy policy.


Like most online services and mobile applications, we may use technologies, such as cookies, web beacons (also known as pixel, tags or clear gifs) or software development kits (SDKs) as part of Services we deliver to you. We use these technologies to secure and improve our Services, to understand your preferences, collect information about your activity, browser and device and tailor our Services to your interests. We may also use these technologies to collect information when you interact with Services we offer through one of our service providers, including advertisers and marketing vendors. A cookie is a small text file that allows us to remember your actions and preferences on the website (such as your login details, your language settings and your font size preference) over a period of time so you don't have to re-enter them whenever you come back to the website or browse from one page to another.  

Some web browsers provide settings that allow you to control or reject cookies or to alert you when a cookie is placed on your computer. The procedure for managing cookies is slightly different for each internet browser. You can check the specific steps in your particular browser help menu. You also may be able to reset device identifiers or opt-out from having identifiers collected or processed by using the appropriate setting on your mobile device. Depending on your jurisdiction, we get your permission before we set certain cookies and other tracking technologies. For more information on how we use cookies and other tracking technologies, please review our Cookie Notice.


If you have questions that do not relate to this Policy or data privacy, please write to our customer support team and Submit a Request. To exercise applicable data protection rights or comment about this Policy and our privacy practices to the extent you may enjoy any data subject rights as per privacy laws applicable to you, you may reach out to our data protection office at: 

Data Privacy Officer

Mistplay Inc.

481 Viger St, Suite 300, Montreal

Quebec, Canada, H2Z1G6 or via email at Privacy@Mistplay.Com


We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states.






For additional disclosures specific to Users in South Korea, please see the PERSONAL INFORMATION PROCESSING POLICY and made available at https://www.mistplay.com/legal/privacy-centre.