Privacy Policy

Data Protection Notice for Customers

This Data Protection Notice sets out the basis which Gacha Galaxy Labs Inc may collect, use, disclose or otherwise process personal data of customers in accordance with applicable data protection laws. This Notice applies to personal data in Gacha Galaxy's possession or under its control.

Personal Data

Customer Definition

An individual who has contacted Gacha Galaxy through any means to find out more about goods or services provided, or who may enter, or has entered, into a contract with Gacha Galaxy for the supply of goods or services.

Personal Data Definition

Data about a customer who can be identified from that data or from that data and/or other information to which Gacha Galaxy has or is likely to have access.

Types of Personal Data Collected

Gacha Galaxy may collect the following types of personal data depending on the nature of interaction:

• Name
• Email address
• Telephone number
• Date of birth
• Financial information (crypto holdings across different chains, NFT)
• Facial biometric including liveness data
• IP address
• GPS location
• MAC ID
• IMEI
• SIM card information (IMSI)
• Advertiser ID
• Crypto public keys across multiple onboarded crypto chains
• Crypto transactions on the public blockchain
• Crypto private keys (encrypted with AES 256 on device before transmission)
• In-app customization, usage and transactions

Collection, Use and Disclosure of Personal Data

Gacha Galaxy generally does not collect personal data unless it is provided voluntarily by the customer or their authorized representative after notification of collection purposes and written consent, or where collection and use is permitted or required by law.

Primary Purposes for Collection and Use

Personal data may be collected and used for:

• Performing obligations in connection with provision of goods and/or services
• Verifying customer identity
• Responding to queries, requests, applications, complaints, and feedback
• Managing customer relationships
• Complying with applicable laws, regulations, and assisting in law enforcement
• Transmitting to third parties, service providers, agents, and regulatory authorities
• Other incidental business purposes

Disclosure of Personal Data

Personal data may be disclosed:

• Where required for performing obligations in provision of goods and services
• To third party service providers and organizations engaged to perform functions
• Where disclosure is mandated by government or enforcement/regulatory agencies

Deemed Consent by Notification

Gacha Galaxy may collect, use and/or disclose personal data for secondary purposes including application diagnostics, usage analytics, website usage, and business intelligence. Before relying on deemed consent by notification, Gacha Galaxy will assess that collection, use or disclosure will not likely have an adverse effect on the customer.

Reliance on the Legitimate Interests Exception

Gacha Galaxy may collect, use and/or disclose personal data without consent for legitimate interests including:

• Fraud detection and prevention
• Detection and prevention of misuse of services
• Network analysis to prevent fraud and financial crime, and to perform credit analysis

Withdrawing Your Consent

Customers may withdraw consent and request Gacha Galaxy to stop collecting, using and/or disclosing personal data by submitting a written request to the Data Protection Officer. Gacha Galaxy generally seeks to process withdrawal requests within ten (10) business days of receiving them.

Access to and Correction of Personal Data

Customers have the right to request access to and correction of their personal data held by Gacha Galaxy, subject to exceptions under applicable data protection laws.

Protection of Personal Data

Gacha Galaxy is committed to maintaining the protection of personal data in its possession or under its control against unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks.

Accuracy of Personal Data

Gacha Galaxy will make a reasonable effort to ensure that personal data collected is accurate and complete. Customers are responsible for updating personal data to ensure its accuracy.

Retention of Personal Data

Gacha Galaxy will retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

Transfers of Personal Data Outside of Panama

Personal data may be transferred to countries or territories outside of Panama for any of the purposes stated in this Notice. Such countries or territories may not have data protection laws that are as stringent as those in Panama.

Data Protection Officer

Email: support@gachagalaxy.io

Mailing Address: Torre Advanced Building, Ricardo Arias Street of the City of Panama, Republic of Panama, 0823-01310