This section applies to the personal information of residents of California and supplements the other sections of Mistplay’s Global Privacy Policy, which continue to apply
Collection and Use of Personal Information: We have collected the following categories of personal information about you in the past 12 months:
Category
Examples
Source
Business purpose
Identifiers
Name, email, unique personal identifier, online identifier, IP address, account name, and phone number
User provided on registration and upon redeeming points using online catalog; customer service inquiries and claim forms; related and third-party sources to verify user supplied information; selfie in video format
Operational purposes including customer service; fraud & security incident detection; website improvement; award prize winners; and deliver our Services to you, including personalized recommendations and advertisements
Protected classification characteristics under California or federal law
Age and gender
Directly from you
Recommend suitable Games To recommend suitable games and rewards
Internet or other similar network activity
Browsing and search history, or information about your interaction with a website, application, or advertisement
System-collected activity logs and cookies
To determine performance of media content and analytics purposes and to secure our Services
Approximate geolocation data
Country
Identified using IP address
To recommend games based on your country and to secure ou rServices
Inferences drawn from other personal information
Profile reflecting your preferences
Other personal information
To recommend games based on preference
Sensitive personal information
The processing of video selfies to ensure the uniqueness of your user registration
Video selfies
To ensure that rewards are not earned through bots, automated processes, or fraudulent use of software
Please note that we use and disclose sensitive personal information only for purposes expressly permitted under California law. For your information, personal data does not include publicly available information from government records and de-identified or aggregated consumer information.
Disclosure of Personal Information: We may disclose your personal information to third parties for the business purposes outlined in the chart above. In the past 12 months, we may have disclosed your personal information for a business purpose or at your direction. For more details on third parties we share data with see the How We Share Personal Information About You section of this Policy. Although we do not “sell” personal information in exchange for money, some of our sharing of personal information as part of our Services may be classified as a “sale” under applicable California laws. We do not knowingly sell or share the personal information of anyone under the age of 16.
Retention of Your Data: Mistplay will only retain personal data for as long as you use the Services, as required by law or for as long as it is required to meet the purposes for which it was collected. For example, Mistplay account balances or rewards earned as of termination must be preserved for some period to allow for such matters as billing and tax reporting. Note, under the Terms, if a user does not use the Service for at least one hundred eighty days, the user’s inactive account may be terminated, units earned may automatically expire, subject to the Terms of Use and the user’s personal data may be destroyed.
Notice of Financial Incentive: Under California law, the Rewards Program enables you to earn Units and may be considered a financial incentive provided in exchange for the collection and retention of personal information. While Mistplay does not assign a monetary value to the data that we collect, based on our reasonable estimate, the value received from the insights and the Rewards Program is reasonably equal to or greater than the value Mistplay receives from the use of this information. Mistplay uses the information to better understand how you use our Services, to improve our products and Services and to further enhance our user analytics. Note that participation in the Rewards Program is completely voluntary and you can withdraw at any time. For further details of the Rewards Programs and its terms, including how to withdraw or terminate your participation, please refer to Terms.
Your CCPA Rights: The California Consumer Privacy Act (CCPA) grants California consumers the following rights with respect to their personal information:
Exercising Your Rights:
You may opt out of sales and/or sharing or exercise your right to limit the use/disclosure of your sensitive personal information by sending a request to Privacy@Mistplay.Com. We also honor requests to opt-out submitted via privacy preference signals, such as the Global Privacy Control (GPC). (For more information on the GPC and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/)
You may submit requests to know, delete, or correct by contacting us as directed in the Policy. To make such a request, please include the phrase “Personal Information Privacy Request” in the subject line, the Service you are inquiring about, along with your name, address, and email address. If we receive a request to delete your data, we will ask you if you want your personal information to be removed entirely or if you want to be kept on a list of individuals who do not want to be contacted in the future (for a specified period or otherwise). We cannot keep a record of individuals whose personal information we have deleted so you may be contacted again by us, should we come into possession of your personal information at a later date. Requests to know and requests to delete will be honored within 45 days; if more time is needed to respond, Mistplay will notify you.
The CCPA enables California users to appoint an authorized agent to act on their behalf to submit disclosure requests and or deletion requests under the CCPA. We will honor a request from an authorized agent provided that: i) you provide written authorization to the authorized agent to act on your behalf and we can verify your identity, and ii) the agent submits proof of authorization.
Browser “Do Not Track” Signals. Most browsers contain a “do-not-track” setting. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their personal information and online behavior to be tracked and used, for example, for interest-based advertising. As required by California law, we are required to inform you that, as is the case with most websites, we do not honor or alter our behavior when a user to one of our Websites has activated the “do-not-track” setting on her/his browser.
This section applies to the personal data of residents of Colorado, Connecticut and Virginia and supplements the other sections of this Policy.
For information on the categories of personal data that we collect, the purposes for which we process that personal data, and how we disclose that personal data, please refer to the Information We Collect About You, Use of Personal Data and Legal Basis for Processing, and How We Share Personal Information About You sections above, as well as Annex B: Table for Legal Processing Activities below. For an explanation of the types of information we share with third parties, please refer to the Disclosures of Personal Information section in the Additional Disclosures for Residents of California notice above.
In some cases we may share your information with third parties who may use your information for their own purposes, including for purposes of marketing and advertising. These disclosures may be considered “sales” or “targeted advertising” under applicable privacy laws. For more information about the categories of personal data that we may sell to or share with third parties, and the categories of such third parties, see the Disclosure of Personal Information subsection in the Additional Disclosures for Residents of California, USA section above.
Depending on where you reside, and subject to certain exceptions, you may have the following rights with respect to your personal data:
You may opt out of sales and/or targeted advertising using information as directed in the Policy. Where required, we also honor requests to opt-out submitted via privacy preference signals recognized under applicable local law, such as the GPC.
You may submit requests to exercise your other rights as directed in the Policy. Please include the phrase “Personal Information Privacy Request” in the subject line, the Service you are inquiring about, along with your name, address, and email address. If we receive a request to delete your personal data, we will ask you if you want your personal data to be removed entirely or if you want to be kept on a list of individuals who do not want to be contacted in the future (for a specified period or otherwise). We cannot keep a record of individuals whose personal data we have deleted, so you may be contacted again by us, should we come into possession of your personal data at a later date.
You may also have the right to appeal a refusal to take action on your request as directed in the Policy.
Depending on where you reside, you may also use an authorized agent to act on your behalf to submit requests to exercise your rights. We will honor a request from an authorized agent provided that: i) you provide written authorization to the authorized agent to act on your behalf and we can verify your identity, and ii) the agent submits proof of authorization.