Privacy policy

1. Data collected

We only collect the data strictly necessary for the proper functioning of our service. Depending on your usage, this may include the following categories:

• Identification data: first name, last name or nickname, email address, phone number.
• Game data: in-game nickname, Dofus server, quantity of kamas sold or exchanged.
• Payment data: bank details (IBAN), PayPal or electronic wallet information needed to pay you. We never store the full details of your bank cards.
• Connection data: IP address, browser type, timestamp and pages viewed.
• Exchanges: the content of the messages you send us via chat, email or our contact form.

2. Purposes of processing

Your data is processed for specified, explicit and legitimate purposes:

• Process and validate your sales, buybacks and exchanges of kamas;
• Make the instant payment that is owed to you;
• Prevent fraud, verify the legitimacy of transactions and ensure the security of our platform;
• Respond to your requests and provide customer support;
• Comply with our legal and accounting obligations (invoicing, anti-money laundering);
• Improve our service and produce anonymized usage statistics.

3. Legal basis

Each processing operation relies on a legal basis within the meaning of Article 6 of the GDPR:

• Performance of the contract: to process your transaction and proceed with the payment.
• Compliance with a legal obligation: for the retention of accounting records and the fight against fraud.
• Our legitimate interest: to secure the platform and improve our services.
• Your consent: for non-essential cookies and optional communications.

4. Data sharing

We do not sell or rent your personal data. It may nevertheless be shared with trusted third parties, only when this is necessary:

• Our payment providers (banks, PayPal, transfer services) to carry out the payment;
• Our technical providers (hosting, messaging, support) acting as processors bound by contract;
• Administrative or judicial authorities, when the law requires us to.

All our partners are required to guarantee a level of protection compliant with the GDPR.

5. Cookies

Our site uses cookies to ensure its proper functioning, remember your preferences and measure its audience. We distinguish:

• Essential cookies: essential to navigation and security, they do not require consent.
• Audience measurement cookies: to understand how the site is used and improve it.

You can at any time configure or refuse non-essential cookies from your browser settings.

6. Retention period

We keep your data for the period strictly necessary for the purposes described above:

• Data linked to a transaction: for the duration of the business relationship, then archived for the time required by accounting and tax obligations (generally 10 years).
• Prospecting and contact data: up to 3 years after the last exchange.
• Connection data: up to 12 months, in accordance with the regulations.

7. Your rights

In accordance with the GDPR, you have the following rights over your personal data at any time:

To exercise these rights, contact us via the details indicated below. You also have the right to lodge a complaint with the CNIL (the French data protection authority) if you believe that your rights are not being respected.

8. Security

We implement appropriate technical and organizational measures to protect your data against any unauthorized access, loss, alteration or disclosure. This includes the encryption of communications (HTTPS), restricting access to our authorized teams and regular backups. Despite all the care taken, since no system is infallible, we invite you to report any suspicious behavior to us without delay.

9. Contact

For any question relating to this policy or to exercise your rights, you can write to us at [email protected] or use our contact page. We are committed to responding to your request within one month.