Midasbuystore Singapore Privacy Policy

Midasbuystore Singapore

Privacy Policy

Last modified : 19 May 2022

This privacy policy applies only to the processing of personal data by Centauri Dynamic Pte. Ltd. (“Midasbuystore Singapore”). Midasbuystore Singapore is the reseller of certain third party virtual content and items on www.midasbuy.com (the “Midasbuy Website”). Midasbuystore Singapore does not operate the Midasbuy Website – if you otherwise set up an account or participate in transactions on the Midasbuy Website then the privacy policy located here applies to you, not this policy. This policy only applies if you purchase particular virtual content or items offered by Midasbuystore Singapore.

Thank you for using our products and services! We respect your concerns about privacy and appreciate your trust and confidence in us.

Here is a summary of the information contained in this privacy policy (“Privacy Policy”). This summary is to help you navigate the Privacy Policy and it is not a substitute for reading everything. You can use the hyperlinks below to jump directly to particular sections.

What information do we need to provide the Service?

If you make a purchase then we will process certain transaction information and game registration information to facilitate delivery to you. If you need to get in touch with us, we will retain some information so that we can get back in touch with you and address any concerns. More Information .

How will we use your information?

We use this information to facilitate your purchase of virtual items and content. We do not share your information with any third parties, except where we need to in order to provide the Service (e.g., facilitate the transaction and procure delivery of the relevant items or content; use our affiliates around the world to help us to deliver the Service) , or where we are instructed to by a court, authority or compelled by law. More Information .

Who do we share your information with?

We use some third parties to help us deliver the best possible experience (e.g., to ensure the integrity of transactions and content delivery). When we use a third party, we only do this to process or store your information for the purposes described in this Privacy Policy. We also have affiliates around the world who help us deliver the Service and we may be required by a court or legal obligation to disclose certain information in some circumstances. More Information .

Where do we process your information?

Our servers are located in Singapore. Your information can be accessed from outside of where you live by our support, engineering and other teams around the world, including Hong Kong and Singapore. More Information .

How long do we keep hold of your information?

We generally retain your information for the period during which you use the Service (or have credits which may be used to purchase virtual goods and items) after which time your data is deleted (as further described in this Privacy Policy), unless otherwise required by applicable laws. More Information .

How can I exercise any rights over my information?

Depending on where you are, you may have certain rights with respect to your information, such as rights of access, to receive a copy of your data, or to delete your data or restrict or object to our processing of your data. More Information .

How to get in touch with us

If you have any questions about anything in this Privacy Policy, or want to exercise any rights you may have, please contact us here .

How will we notify you of changes?

Changes to this Privacy Policy will be posted here. Please check this page frequently to see if there are any updates or changes to this Privacy Policy. More Information .

Contact Information

Data Controller : Centauri Dynamic Pte Ltd | Email: Privacy@midas-go.com

EU Representative : Tencent International Service Europe B.V. | Email: eudataprotection@tencent.com

Turkey Data Controller Representative : Özdağıstanli Ekici Avukatlık Ortaklığı | Email: tencent@iptech-legal.com (Özdağıstanli Ekici Avukatlık Ortaklığı is our data controller representative and its authority is limited to the authorities stipulated under the Law on Protection of Personal Data w. no 6698. Özdağıstanli Ekici Avukatlık Ortaklığı is not authorised for any other matters such as Service conduct, bans, investigations, civil or criminal complaints).

Welcome to Midasbuystore Singapore!

This Privacy Policy explains the when, how and why when it comes to the processing of your personal information in connection with purchases of third party virtual items and content offered by Midasbuystore Singapore on the Midasbuy Website (the “Service”), and sets out your choices and rights in relation to that information.

Please read it carefully – it is important for you to understand how we collect and use your information, and how you can control it.

If you do not agree to the processing of your personal information in the way this Privacy Policy describes, please do not provide your information when requested and stop using the Service. By using the Service you are acknowledging our rules regarding your personal information as described in this Privacy Policy.

For the purpose of data protection laws, the data controller of your personal information in relation to the Service is Centauri Dynamic Pte Ltd ("we", "our" and "us"). The registered address of Centauri Dynamic Pte Ltd is 10 Anson Road, #21-07, Singapore 079903.

Our representative in the EU for the purpose of EU data protection laws is Tencent International Service Europe B.V. The registered address of Tencent International Service Europe B.V. is 26.04, Gustav Mahlerplein 2, 1082 MA, Amsterdam, the Netherlands. Our representative in the EU can be contacted at eudataprotection@tencent.com .

Our data protection officer can be contacted at Privacy@midas-go.com.

Our representatives for data protection purposes in certain regions are as follows:

Region	Representative	Address	Contact details
EU	Tencent International Service Europe B.V.	Gustav Mahlerplein 2, 1082 MA, Amsterdam, the Netherlands	eudataprotection@tencent.com
Turkey	Özdağıstanli Ekici Avukatlık Ortaklığı.	Nidakule Ataşehir Kuzey Begonya Sok. No:3 Kat. 17 D: 162 34746 Ataşehir / İstanbul, Turkey	tencent@iptech-legal.com

Please reach out to us if you have any questions or concerns regarding the processing of your personal information. You can contact us anytime atPrivacy@midas-go.com.

1. Scope of Privacy Policy

This Privacy Policy covers the treatment of personal data gathered when you use the Service facilitated by Midasbuystore Singapore.

Midasbuystore Singapore does not operate the Midasbuy Website – if you otherwise set up an account or participate in transactions on the Midasbuy Website then the privacy policy located here applies to you, not this Privacy Policy.

This Privacy Policy does not apply to the activities of game operators or other third parties that we do not own or control, including but not limited to any third party websites, services and applications (“ Third Party Websites”) that you elect to access in connection with the Service or the Midasbuy Website.

2. The Types of Personal Information We Use

This section describes the different types of personal information we collect from you and how we collect it. If you would like toknow more about specific types of data andhow we use that data, please see the section entitled “How We Use Your Personal Information” below.

The following is a high-level summary of the types of personal information we use:

transaction data : cost, time and date, item purchased, currency, order ID, payment amount, country, payment channel, merchant name, applicable game, country of sale, card number, and card type (to facilitate the transaction); and
game-related data : player ID, EA open ID, and registration country (to facilitate delivery to the game account).

3. Children

Children must not use the Service for any purpose.

By children, we mean users under the age of 18 years old; or in the case of a country where the minimum age for processing personal information differs, such different age.

We do not knowingly collect personal information from children under these ages for any purpose. If you believe that we have personal information of a child under these ages without parental/guardian consent, or if you are the parent or guardian of the user and wish to withdraw consent, please contact us at [Privacy@midas-go.com] and we will delete such information.

4. How We Use Your Personal Information

This section provides more detail on the types of personal information we collect from you, and why. For users who live in the United Kingdom, the European Economic Area, Switzerland or Turkey (each a “ Relevant Jurisdiction”), it also identifies the legal basis under which we process your data.

Personal Information	Use	Legal Basis (only relevant if you are located in a Relevant Jurisdiction)
Transaction data : cost, time and date, item purchased, currency, order ID, payment amount, country, payment channel, merchant name, applicable game, country of sale, card number, and card type	We use this information to facilitate purchase and delivery of virtual items and content.	It is necessary for us to use this information to perform our contract with you to provide the Service.
Game-related data : player ID, EA open ID/EA identifier, and registration country	We use this information to facilitate purchase and delivery of virtual items and content.	It is necessary for us to use this information to perform our contract with you to provide the Service.

5. Ho w We Store and Share Your Personal Information

Our corporate group operates around the world. Pursuant to our contract with you to provide you with the Service, your personal information will be processed on servers that may not be located where you live. No matter where our servers are located, we take appropriate measures to safeguard your rights in accordance with this Privacy Policy. Our servers for the Service are located in Singapore.

In addition, your information can be accessed from outside of where you live by our support, engineering and other teams around the world, including Hong Kong and Singapore.

Only where necessary will we share your personal information with third parties . Situations where this occur are:

Third parties in connection with the operation of the Midasbuy Website and the Service, including to process payments and deliver purchases to game account(s). All companies providing services for us are prohibited from retaining, using, or disclosing your personal information for any purpose other than providing us with their services and/or to comply with their legal obligations under applicable laws.
Companies within our corporate group who process your personal information in order to operate the Service. All related group companies may only use your personal information in accordance with this Privacy Policy.

Regulators, judicial authorities and law enforcement agencies, and other third parties for safety, security or compliance with the law . There are circumstances in which we are legally required to disclose information about you to authorities, such as to comply with a legal obligation or processes, enforce our terms, address issues relating to security or fraud, or protect our users. These disclosures may be made with or without your consent, and with or without notice, in compliance with the terms of valid legal process such as a subpoena, court order, or search warrant. We are usually prohibited from notifying you of any such disclosures by the terms of the legal process. We may seek your consent to disclose information in response to a governmental entity’s request when that governmental entity has not provided the required subpoena, court order, or search warrant. We may also disclose your information to:

enforce our terms and conditions and other agreements, including investigation of any potential violation thereof;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

A third party that acquires all or substantially all of us or our business. We may also disclose your information to third parties if we either: (a) sell, transfer, merge, consolidate or re-organise any part(s) of our business, or merge with, acquire or form a joint venture with, any other business, in which case we may disclose your data to any prospective buyer, new owner, or other third party involved in such change to our business; or (b) sell or transfer any of our assets, in which case the information we hold about you may be sold as part of those assets and may be transferred to any prospective buyer, new owner, or other third party involved in such sale or transfer.

6. The Security of Your Personal Information

We are committed to maintaining the privacy and integrity of your personal information no matter where it is stored. We have information security and access policies that limit access to our systems and technology, and we protect data through the use of technological protection measures such as encryption.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will implement and maintain reasonable measures to protect your personal information, we cannot guarantee the security of the information transmitted through the Service or otherwise via the Internet; any transmission is at your own risk.

7. Data Retention

We do not keep your data for longer than is necessary unless we are required to do so under law. For further details on how long we keep your data, please refer to the time periods set out below.

Personal Information	Retention Policy
Transaction data	160 days from the date of the last transaction involving the credit card or after any statutory retention periods have expired. If you request deletion of such data prior to this date please note that we may still be legally obligated to retain certain transaction information.
Game-related data	We store this data for the lifetime of your use of the Service (i.e. until account deletion in accordance with your request) and then delete it within 30 days and/or for the duration for which the relevant game is available on the Service and then for a period of 12 months (or after any statutory retention periods have expired).

If we are required to retain your information beyond the retention periods set out above, for example to comply with applicable laws, we will store it separately from other types of personal information.

8. Yo ur Rights

This section entitled “Your Rights” applies to users that are located in the Relevant Jurisdictions. If you are located in a territory outside a Relevant Jurisdiction, please refer to the Supplemental Jurisdiction-Specific Terms for an overview of your rights and how these can be exercised.

You have certain rights in relation to the personal information we hold about you, depending on where you are located. To exercise any of your rights, please contact us atPrivacy@midas-go.com.

Access

You have the right to access personal information we hold about you, how we use it, and who we share it with.

Portability

You have the right to receive a copy of certain personal information we process about you. This comprises any personal information we process on the basis of your consent or pursuant to our contract with you, as described above in the section “ How We Use Your Personal Information”. You have the right to receive this information in a structured, commonly used and machine-readable format. You also have the right to request that we transfer that personal information to another party, with certain exceptions. We will provide further information to you about this if you make such a request.

Correction

You have the right to correct any of your personal information we hold that is inaccurate.

Erasure

You have the right to seek deletion of certain personal information.

We may need to retain personal information if there are valid grounds under data protection laws for us to do so (for example, for the defence of legal claims or freedom of expression) but we will let you know if that is the case.

Restriction of Processing to Storage Only

You have a right to require us to stop processing the personal information we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the personal information, we may use it again if there are valid grounds under data protection laws for us to do so (for example, for the defence of legal claims or for another’s protection).

Objection

You have the right to object to our processing of your personal information. We will consider your request in other circumstances as detailed below; you may submit your request by contacting us at Privacy@midas-go.com.

To the extent provided by applicable laws and regulations, you may withdraw any consent you previously provided to us for certain processing activities by contacting us atPrivacy@midas-go.com . Where consent is required to process your personal information, if you do not consent to the processing or if you withdraw your consent we may not be able to deliver the expected service.

Announcements

We may from time to time send you announcements when we consider it necessary to do so (for example, when we temporarily suspend access to the Service for maintenance , or security, privacy or administrative-related communications ). You may not opt-out of these service-related announcements, which are not promotional in nature.

9. Conta ct & Complaints

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to: Privacy@midas-go.com.

In the event that you wish to make a complaint about how we process your personal information, please contact us in the first instance at Privacy@midas-go.com and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection authority in the country or region in which you live or work where you think we have infringed data protection laws.

10. Changes

If we make any changes to this Privacy Policy, we will post the updated Privacy Policy here. Please check this page frequently to see if there are any updates or changes to this Privacy Policy.

11. Language

Except as otherwise prescribed by law, in the event of any discrepancy or inconsistency between the English version and local language version of this privacy policy, the English version shall prevail.

SUPPLEMENTAL TERMS – JURISDICTION-SPECIFIC

Some jurisdictions’ laws contain additional terms for users of the Service, which are set out in this section. If you are a user located in one of the jurisdictions below, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy above.

Australia

We take reasonable steps to ensure that third party recipients of your personal information located outside Australia handle your personal information in a manner that is consistent with Australian privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third party recipients. You have the right to access personal information we hold about you, how we use it, and who we share it with. You have the right to correct any of your personal information we hold that is inaccurate.

If you are dissatisfied with our response to your request for access to, or correction of, your personal information or your privacy complaint in respect of your personal information, you may contact the Office of the Australian Information Commissioner (Telephone: +61 1300 363 992 or email: enquiries@oaic.gov.au).

Egypt

By clicking “accept” or by proceeding with the Service, you acknowledge that you have read, understood, and consented to this Privacy Policy. You are acknowledging your consent to the processing, storage, and cross-border transfer of your personal data. The cross border transfer may be to any country in which we have databases or affiliates, in particular to the jurisdictions specified in Section 4 (How We Store and Share Your Personal Information) .

If you are a new user, you have seven days to inform us of any objection you may have to this Privacy Policy.

As an Egyptian data subject, you have certain rights under the Egyptian Personal Data Protection Law.

Indonesia

By accepting and consenting to this Privacy Policy, you agree that we may collect, use and share your personal information in accordance with this Privacy Policy, as revised from time to time. If you do not agree to this Privacy Policy, you must not access or use our services and we have the right to not provide you with access to our services.

In the event we fail to maintain the confidentiality of your personal information in the Service, we will notify you through the contact information provided by you or via the Service, to the extent required by local laws and regulations.

If you fail to explicitly express your objection to any amended version of this Privacy Policy within fourteen (14) days of the date the relevant amended version of this Privacy Policy is made available, you will be considered as having accepted the changes and agreed to the new Privacy Policy. However, you may stop using or accessing our Service by unsubscribing or ceasing your use of the Service at any time, if you cease to agree with the amended Privacy Policy.

You are responsible for making sure that any personal details which you provide to us are accurate and current. In order to confirm the accuracy of the information, we may also verify the information provided to us, at any time. You hereby represent that you have secured all necessary consent(s) before providing us with any other person’s personal information (for example, for referral promotions), in which case we will always assume that you have already obtained prior consent, and as such, you will be responsible for any claims whatsoever from any party arising as a result of the absence of such consent(s).

Japan

By clicking “accept”, you consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, to the jurisdictions specified in Section 4 (How We Store and Share Your Personal Information) .

The categories of personal information specified in to the jurisdictions specified in Section 4 (How We Store and Share Your Personal Information) may include "special care-required personal information" (i.e., sensitive information as detailed under applicable law), and you consent to the collection of such information.

You may request us to notify you about the purposes of use of, to disclose, to make any correction to, to discontinue the use or provision of, and/or to delete any and all of your personal information which is stored by us, to the extent provided by the Act on the Protection of Personal Information of Japan. When you wish to make such requests, please contact us as set out in Section 8 (Contact).

Kingdom of Saudi Arabia

You consent to the collection, use, disclosure, transfer, export (to the extent permitted by applicable laws) and storage of your personal information as described in this Privacy Policy.

Malaysia

In the event you are agreeing to this Privacy Policy in order for a minor to access and use the Service, you hereby consent to the provision of personal information of the minor to be processed in accordance with this Privacy Policy and you personally accept and agree to be bound by the terms in this Privacy Policy. Further, you hereby agree to take responsibility for the actions of such minor, and that minor’s compliance with this Privacy Policy.

Right of access : You have the right to request access to and obtain a copy of your personal information that we have collected and is being processed by or on behalf of us. We reserve the right to impose a fee for providing access to your personal information in the amounts as permitted under law. When handling a data access request, we are permitted to request for certain information to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data access request.

Right of correction : You may request for the correction of your personal information. When handling a data correction request, we are permitted to request for certain information to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data correction request.

Right to limit processing of your personal information : You may request to limit the processing of your personal information by using the contact details provided above. However, this may affect our provision of the Service to you.

To protect your personal information and handle complaints relating to your personal information, we have appointed the following department responsible for managing and protecting your personal information.

Our data protection officer, responsible for the management and safety of your personal information

Telephone: +603-22872388
Email: as set out in Section 8 (Contact)

Mexico

In general, we do not require your consent to carry out the transfers detailed in Section 4 (How We Store and Share Your Personal Information) . In any case, by using the Service and providing us with your personal data, you agree to the data transfers detailed therein that require your consent.

To understand more about and exercise your rights, as well as the applicable means, procedures and requirements to exercise any of your rights as specified in Section 8 (Contact).

New Zealand

We take reasonable steps to ensure that third party recipients of your personal information located outside New Zealand handle your personal information in a manner that is consistent with New Zealand privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third party recipients.

You have the right to access personal information we hold about you, how we use it, and who we share it with. You have the right to request the correction of any of your personal information we hold that is inaccurate.

If you are dissatisfied with our response to your request for access to, or correction of, your personal information or your privacy complaint in respect of your personal information, you may contact the Office of the New Zealand Privacy Commissioner (www.privacy.org.nz).

While we take reasonable steps to ensure that third party recipients of your personal information comply with privacy laws that are similar to those of your jurisdiction, you acknowledge and agree that we cannot control the actions of third party recipients and so cannot guarantee that they will comply with those privacy laws.

Peru

You may exercise rights related to the protection of personal information by requesting access to your personal information or the correction, deletion or suspension of processing of your personal information, pursuant to the Personal Data Protection Law (the “Law”). You may also exercise these rights through your legal guardian or someone who has been authorised by you to exercise the right. However, in this case, you must submit a power of attorney to us in accordance with the Law.

You can also withdraw your consent or demand a suspension of the personal information processing at any time.

If you consider that your request has not been met you may file a claim with the Peruvian National Authority of Personal Data Protection.

Data Protection Team, responsible for the management and safety of your personal information
Contact: as set out in Section 8 (Contact)

Philippines

You are entitled to the following rights:

Right to be informed. You may in certain circumstances have the right to be informed whether personal data pertaining to you is being, or has been processed, including the existence of automated decision-making and profiling.
Right to object. You may in certain circumstances have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling.
Right to access. You may in certain circumstances have the right to seek reasonable access to, upon request, your personal information.
Right to rectification. You may in certain circumstances have the right to dispute an inaccuracy or error in your personal information and have us correct it, unless the request is vexatious or otherwise unreasonable.
Right to erasure or blocking. You may in certain circumstances have the right to suspend, withdraw or seek the blocking, removal or destruction of your personal information.

By consenting to this Privacy Policy, you consent to us:

collecting and processing your personal information as described in Section 3 (How We Process Your Personal Information) ;
sharing your personal information with third parties, companies within our corporate group, and a third party that acquires substantially all or substantially all of us or our business, as described in this Privacy Policy and for the purposes stated herein; and
transferring or storing your personal information in destinations outside the Philippines as described in Section 4 (How We Store and Share Your Personal Information)

Qatar

If you are using the Service in Qatar, you consent (for the purposes of Law No. 13 of 2016 on the Protection of Personal Data, as may amended from time to time) to the processing of your information in accordance with this Privacy Policy.

Singapore

By clicking “accept”, you consent to the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, the locations specified in Section 4 (How We Store and Share Your Personal Information) .

You have the right to access your personal information, how we use it, and who we share it with. You have the right to correct any of your personal information that is inaccurate.

Our designated data protection officer for the purposes of compliance with the Personal Data Protection Act 2012 can be contacted as set out in Section 8 (Contact).

Thailand

You may request us to discontinue, to restrict the use or provision of, and/or to request for data portability of any and all of your personal information which is stored by us, to the extent provided by the Act on the applicable data privacy laws and regulations in Thailand, including the Thai Personal Data Protection Act. When you wish to make such requests, please contact us as set out in Section 8 (Contact).

Turkey

You have legal rights, which are set forth in Article 11 of the DPL, in relation to the personal information data we hold about you. As a Turkish data subject, you may have the right to apply to the data controller and (to the extent permitted under applicable laws and regulations):

learn whether or not your personal data has been processed;
request information about processing if your personal data has been processed;
learn the purpose of processing of your personal data and whether they have been used accordingly;
know the third parties in the country or abroad to whom personal data has been transferred;
request rectification in the event personal data is incomplete or inaccurate and to demand the operations in this regard be reported to third parties your personal data has been transferred to;
request deletion or destruction of personal data within the framework of the conditions set forth under Article 7 of the DPL and to demand the operations in this regard be reported to third parties your personal data has been transferred to;
object the occurrence of any consequence that is to your detriment by means of analysis of personal data solely through automated systems, and
demand compensation for the damages that you have suffered as a result of unlawful processing of your personal data.

United Arab Emirates

You consent to the collection, use, disclosure, transfer, export (to the extent permitted by applicable laws), sharing and storage of your personal information, as described in the Privacy Policy.

We may voluntarily report a cyber-security incident where it constitutes a crime under UAE law (e.g. under the UAE Cybercrime Law). The incident can be reported to the relevant authorities for the purpose of investigations. Please note that voluntary reporting of a cyber-security incident can also be made to the UAE Computer Emergency Response Team (“CERT ”). CERT is a security awareness organisation that provides a process for logging incidents and advising on known cyber security threats in the UAE.