Privacy Policy Notice

Last updated: Jun 18, 2025

This Privacy Policy explains how Wasabi Games DMCC, operating as Mahjong Stars ("we", "us", or "our"), collects, uses, and protects your personal data when you visit our website, use our services, or interact with us. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Please read this Privacy Policy carefully. By using our services, you agree to the collection and use of your information as described herein.

1. Who We Are (Data Controller Details)

Wasabi Games DMCC is the data controller responsible for processing your personal data.

Legal Name: Wasabi Games DMCC
Business Address: Jumeirah Lake Towers, Dubai, UAE
Contact Email: hello@mahjongstars.com

2. Personal Data We Collect

We collect various types of personal data from you, depending on how you interact with our website and services. This may include:

Contact and Identity Data: Names, email addresses, phone numbers, and physical addresses.
Financial and Transaction Data: Blockchain wallet addresses (for Web3 interactions).
Technical Data: IP addresses, browser type and version, operating system, and other technology on the devices you use to access our website.
Usage Data: Information about how you use our website, products, and services, including pages visited, time spent on pages, and clickstream data.
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
Cookies and Tracking Data: Information collected through cookies and similar tracking technologies (e.g., analytics, advertising, session cookies).

We do not intentionally collect any sensitive personal data (also known as 'special categories of personal data') about you, such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, or genetic and biometric data.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

Direct Interactions: You may give us your identity and contact data by filling in forms on our website (e.g., contact forms, newsletter sign-up forms) or by corresponding with us by email or otherwise.
Automated Technologies or Interactions: As you interact with our website, we automatically collect Technical Data and Usage Data using cookies and other similar technologies (e.g., tracking pixels).
Third-Party Integrations: We may receive personal data about you from various third parties and public sources, such as analytics providers, advertising networks, and Web3 service providers.

4. Purposes of Processing Your Data

We use your personal data for the following purposes:

To Provide Services and Products: To register you as a new customer, manage your account, process transactions, and deliver the services and products you have requested.
For Marketing Communications: To send you updates, newsletters, promotional offers, and other marketing communications that may be of interest to you, where you have consented to receive them or where we have a legitimate interest to do so.
For Analytics and Site Improvement: To analyse how our website is used, improve our services, products, marketing, customer relationships, and experiences.
For Account Management: To manage your account, provide customer support, and communicate with you about your use of our services.
To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.

We will only process your personal data when we have a valid legal basis to do so. The legal bases we rely on include:

Consent: Where you have given us clear consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You have the right to withdraw your consent at any time.
Performance of a Contract: Where the processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., to provide our services).
Legal Obligation: Where the processing is necessary for us to comply with a legal or regulatory obligation (e.g., for tax purposes or to prevent fraud).
Legitimate Interests: Where the processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights and interests do not override those interests (e.g., for improving our services, for fraud prevention, or for direct marketing where permitted by law). We ensure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.

We may share your personal data with the following categories of third parties for the purposes outlined in this Privacy Policy:

Service Providers: We work with third-party service providers who perform services on our behalf, such as:
- Email Marketing: Emailoctopus
- Analytics: Posthog, Vercel
- Hosting: Vercel
- Web3 Services: Thirdweb These service providers are only permitted to use your data as necessary to provide the services to us and are contractually bound to keep your information confidential and secure.
Legal and Regulatory Authorities: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.

7. International Data Transfers

As Wasabi Games DMCC is based in Dubai, UAE, and we use global service providers, your personal data may be transferred to, stored, and processed in countries outside the European Economic Area (EEA) or the UK, which may not have the same level of data protection laws as your home country.

Whenever we transfer your personal data out of the EEA or UK, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:

Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or the UK government (adequacy decisions).
Using specific contracts approved by the European Commission or the UK government which give personal data the same protection it has in Europe (Standard Contractual Clauses - SCCs).

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA or UK.

8. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We store your data with reputable third-party providers who adhere to high security standards.

Despite our efforts, no security system is impenetrable. We cannot guarantee the absolute security of your data transmitted to our site; any transmission is at your own risk.

9. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

This generally means we will keep your data for the duration of your relationship with us (e.g., as long as you have an active account or subscription), and for a reasonable period thereafter to allow us to resolve disputes, enforce our agreements, or comply with our legal obligations. If you unsubscribe from our marketing communications or request deletion of your data, we will delete or anonymise your data, unless we are legally required or permitted to retain certain data for a longer period.

10. Your Rights as a Data Subject

Under GDPR, you have the following rights regarding your personal data:

The Right to Access: You have the right to request a copy of the personal data we hold about you.
The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
The Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data, under certain conditions.
The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
The Right to Object: You have the right to object to our processing of your personal data, under certain conditions, particularly where we are relying on legitimate interests as the legal basis for processing.
The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

11. How to Exercise Your Rights and Contact Us

If you wish to exercise any of the rights set out above, or if you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@mahjongstars.com

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

12. Cookies

Our website uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files placed on your device to collect standard Internet log information and visitor behaviour information. We use cookies for:

Analytics: To understand how visitors interact with our website, which helps us improve its functionality and content (e.g., posthog analytics, vercel analytics).
Advertising: To deliver relevant advertisements to you.
Session Management: To keep you logged in and remember your preferences.

You can set your browser not to accept cookies, and the above websites tell you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any new version of this Privacy Policy on this page and update the "Last updated" date at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.