Privacy & Cookies Policy

1. Introduction
At Mediación Técnica — the registered company in the Republic of Sudan and the owner of the CardPlusPlay.com platform — we are committed to protecting your privacy and ensuring the security of your personal information when using our platform.
This policy outlines how your personal data is collected, used, and stored when you interact with the CardPlusPlay.com marketplace.
It also explains your rights regarding your data under Sudanese law, as well as regional and international data protection regulations.

2. Data We Collect
We may collect the following types of personal data:
• Identity information (full name, date of birth)
• Contact details (email address, phone number)
• Account information (username, encrypted password)
• Payment and transaction details
• IP address, device and browser type, usage data
• Documents required for identity verification and compliance (e.g., anti-money laundering regulations)

3. How We Use Your Information
We use your information for the following purposes:
• To create and manage your account
• To process transactions and payments
• To comply with legal obligations such as anti-money laundering and anti-terrorism financing laws
• To communicate with you regarding orders and technical support
• To improve our services and user experience
• To send promotional offers, with your prior consent

4. Legal Basis for Processing
We process your data based on one or more of the following legal grounds:
• The performance of a contract between you and us
• A legal obligation under Sudanese, regional, or international law
• Your explicit consent
• Our legitimate interests in enhancing our services and protecting our platform

5. Data Disclosure
We may share your data with:
• Service providers (e.g., payment gateways)
• Government or regulatory authorities as required by law
• Third-party tools used on the platform such as Google Analytics or Facebook Pixel
• Our business partners, when necessary and with your consent
• Cybercrime or anti-money laundering authorities when legally required

6. Data Retention
We retain your personal data as long as a legal basis exists. Retention periods include:
• Service-related data: for the duration of service provision and for a period required by law (e.g., tax and accounting regulations)
• Anti-money laundering data: retained for at least 5 years after the relationship ends
• Data based on consent: retained until you withdraw your consent
• Data processed for legitimate interests: retained until you effectively object

7. Your Rights as a User
In accordance with Sudanese law and international data protection principles such as the General Data Protection Regulation (GDPR), you have the following rights:
• The right to know whether we hold your personal data
• The right to access your data and request a copy
• The right to correct inaccurate data
• The right to withdraw your consent at any time
• The right to object to processing based on legitimate grounds
• The right to request deletion of your data if no legal reason for retention exists
• The right to restrict processing in certain circumstances
• The right to data portability, where technically feasible
• The right to file a complaint with the relevant data protection authority

8. Cookies
Cookies are small files stored on your device when you visit the site.
We use cookies to enhance your experience by:
• Remembering your preferences
• Tracking usage and analyzing performance
• Providing personalized content and ads (with your consent)
You can manage cookie settings through your browser preferences.

9. Data Security
We implement technical and organizational security measures to protect your data from unauthorized access, alteration, loss, or destruction, in line with international best practices.

10. Protection of Minors (Children)
At CardPlusPlay.com, we place special emphasis on protecting the privacy of minors, especially children under the age of 13.
• Children under 13 are not allowed to use the platform’s services without direct supervision and explicit consent from a parent or legal guardian.
• We do not knowingly collect or request personal data from anyone under 13 without parental consent.
• If we discover that we have unintentionally collected data from a child without parental consent, we will delete it immediately.
• We recommend that parents monitor their children’s internet usage and help them understand how to protect their personal information online.
If you believe your child has provided us with information without your consent, please contact us immediately via the "Support" section, and we will take the necessary action promptly.

11. Changes to This Policy
We may update this policy from time to time. You will be notified via email or through the platform in case of significant changes.
This policy complements our platform’s Terms and Conditions. Please refer to them for more information on service use.

12. Contact Us
If you have any inquiries or wish to exercise any of your rights, please contact us at:
Email: [email protected]
Mailing Address: Khartoum, Sudan – Mediación Técnica
Support Page: https://cardplusplay.com/support