Privacy Policy

csmafia (“we”, “us”, the “Operator”) operates csmafia.com. This Privacy Policy explains what personal data we collect when you use the Service, why we collect it, how we use and share it, and the choices you have. By using the Service you agree to the practices described here.

We collect only what we need to run the Service:

• Steam account data — when you sign in with Steam we receive your Steam ID, public profile name, and avatar. We never receive your Steam password.
• Transaction data — deposits, balances, openings, upgrades, battles, withdrawals, and related records.
• Technical data — IP address, approximate location derived from it, browser/device information, and similar log data, collected automatically for security and fraud prevention.
• Verification data — where identity verification is required, documents and information you provide under our AML/KYC Policy (for example government ID, proof of payment, source of funds).
• Communications — messages you send to our support, and our replies.
• Cookies and similar technologies — see our Cookie Policy.

We use personal data to:

• provide, operate, and maintain the Service and your account;
• process deposits and withdrawals through our payment processor(s);
• prevent, detect, and investigate fraud, abuse, money laundering, and breaches of our Terms;
• comply with legal, regulatory, sanctions, and age-verification obligations;
• provide customer support and respond to your requests;
• improve, secure, and develop the Service.

Where applicable data-protection law requires a legal basis, we rely on: performance of our contract with you (providing the Service); our legitimate interests (security, fraud prevention, and improving the Service); compliance with legal obligations; and, where required, your consent (which you may withdraw at any time).

We do not sell your personal data. We share it only with:

• payment processors that handle deposits and withdrawals;
• infrastructure and security providers that host and protect the Service (for example, hosting, database, and content-delivery / DDoS-protection providers);
• Steam, as required to authenticate your sign-in;
• advisers, auditors, or authorities where we are legally required to disclose, or to establish, exercise, or defend legal claims and prevent fraud.

These providers process data on our instructions or under their own privacy terms.

Our providers may process data in countries other than yours. Where required, we take steps to ensure an appropriate level of protection for such transfers.

We keep personal data for as long as your account is active and as long as needed for the purposes described above, including to comply with legal, accounting, anti-fraud, and AML record-keeping obligations, after which it is deleted or anonymised.

We use technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact us using the details below. We may need to verify your identity first, and some data may be retained where we have a legal basis or obligation to keep it.

The Service is for adults only and is not directed at anyone under 18. We do not knowingly collect data from minors. If we learn that a minor has used the Service, we will close the account and delete the associated data.

We may update this Privacy Policy from time to time. The “last updated” date above reflects the latest version. Continued use of the Service after changes are posted constitutes acceptance of the updated Policy.