Privacy Policy
GACOM is a gaming, community and learning platform at gamicom.net and in our Android and iOS apps. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what choices you have. We have tried to write it in plain language. If something is unclear, write to us at privacy@gamicom.net.
Who we areWhat we collectHow we use itWho we share it withVoice rooms and chatYoung people and schoolsHow long we keep itTransfers abroadSecurityYour rightsCookies and device storageChangesContact
1. Who we are
GACOM is operated under the name GACOM Brands, a product of Mobtech Synergies Ltd. The data controller is Mobtech Synergies Ltd, a company registered in Nigeria (RC-7477445), based in Lagos. We process personal data in line with the Nigeria Data Protection Act 2023 and, where it applies to you, other data protection laws.
2. What we collect
Data you give us
- Account: email address, password (stored only as a hash by our authentication provider), username, display name, gamer tag.
- Profile: photo, bio, location (free text, optional), favourite games, links to social handles, and anything else you choose to add.
- Content: posts, comments, reels, images and video you upload, community and house messages, direct messages, and support tickets and chats.
- Wallet and payments: top-ups, withdrawals, bank account details you add for withdrawals, order and delivery details when you buy from the store, and subscription status. Card details are entered on the payment provider's page and never reach our servers.
- Schools and institutions: if your school or institution uses GACOM Edu, your institution may create your account and enter your name, class and learning records.
Data created when you use GACOM
- Gameplay: scores, progress, mission and contract history, rewards, cosmetics owned and equipped, leaderboard entries, and match and duel results.
- Activity: follows, likes, competition entries, notifications, and daily play records.
- Device and technical data: device type, operating system, app version, language, approximate network information, and error reports that help us fix crashes.
What we do not collect
We do not use advertising trackers, we do not sell personal data, and we do not collect your precise location. We do not read your device contacts.
3. How we use your data
| Purpose | Examples | Basis |
|---|---|---|
| Run your account and the service | Signing you in, showing your profile, saving progress, delivering messages | Contract |
| Payments and orders | Wallet, purchases, withdrawals, receipts, refunds | Contract, legal obligation |
| Safety and fair play | Detecting cheating, fraud, spam and abuse; moderating reports; enforcing our rules | Legitimate interests, legal obligation |
| Support | Answering your questions, including through our automated assistant Ryan | Contract, legitimate interests |
| Service emails | Confirming your email, password resets, order and security notices | Contract, legitimate interests |
| Newsletter and announcements | Product news and offers you can unsubscribe from | Consent or legitimate interests, with an opt-out |
| Improve GACOM | Fixing errors, measuring which features work, tuning difficulty and rewards | Legitimate interests |
| Legal duties | Tax and accounting records, responding to lawful requests | Legal obligation |
Where we rely on your consent you can withdraw it at any time. Withdrawing does not affect what we did before.
We do not make decisions with legal or similarly significant effect about you by purely automated means. Our automated systems flag suspicious play and payments for review, and a person decides on any account action.
4. Who we share it with
We do not sell your data. We share it only with service providers who process it for us under contract, and with others when the law requires it.
| Provider | What they do |
|---|---|
| Supabase | Database, sign-in, file storage and server functions |
| Netlify | Hosts the website and web app |
| Paystack | Card and bank payments, payouts and verification |
| Apple and Google | App store purchases and subscriptions where you use them |
| LiveKit | Real-time voice rooms |
| Mailjet | Sign-up, sign-in and password reset emails |
| Resend | Order, subscription and newsletter emails |
| Google (Gemini) | Language-model service that powers the support assistant Ryan and the chess tutor. Only the text of your question and the context needed to answer it is sent. |
| Groq | Language-model service used to process curriculum material uploaded by institutions |
Other players see what you choose to make public: your username, display name, gamer tag, photo, posts, scores, rank and badges. Your email address, wallet and bank details are never shown to other players.
We may also disclose data to the police, courts or regulators when the law requires it, to protect people from harm, or as part of a sale or reorganisation of our business (in which case this policy continues to apply to your data).
5. Voice rooms and chat
Voice rooms are live audio relayed through LiveKit. We do not record voice rooms. Please do not share sensitive information in rooms or chats, because other people there can hear or read it and may be able to record it on their own devices. Text messages are stored so you can read them later and so we can review reports. You can block and report other players in the app.
6. Young people and schools
GACOM is for people aged 13 and over. If you are under 18 you should use GACOM only with the permission of a parent or guardian. If we learn that a child under 13 has created an account, we will delete it. A parent or guardian who believes this has happened can write to us at privacy@gamicom.net.
When a school or institution gives students access to GACOM Edu, the institution decides why and how student data is used and is responsible for having the right permissions from parents and guardians. We process that data on the institution's behalf and do not use it for advertising.
7. How long we keep it
- Account and profile data: for as long as your account is open.
- After you ask us to delete your account: we delete or anonymise your personal data within 30 days, except what we must keep by law.
- Financial and transaction records: for as long as Nigerian tax and accounting law requires us to keep them.
- Safety records (reports, bans, fraud checks): for as long as needed to protect other players, and no longer than necessary.
- Backups: removed on the normal backup cycle after deletion.
8. Transfers abroad
Our providers run servers in several countries, so your data may be processed outside Nigeria. When this happens we rely on contracts and safeguards that require the provider to protect your data to a standard comparable to Nigerian law.
9. Security
We protect data with encrypted connections (HTTPS), access controls on our database so that each account can reach only its own private records, limits on repeated requests, and restricted staff access. Passwords are never stored in readable form. No online service is completely secure, so please use a strong, unique password and tell us straight away at privacy@gamicom.net if you suspect someone has accessed your account. If a breach puts your rights at risk we will notify you and the Nigeria Data Protection Commission as the law requires.
10. Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy;
- correct data that is wrong or out of date (most of it you can edit yourself in Settings and Profile);
- delete your data and close your account;
- restrict or object to some of our uses, including marketing;
- move your data to another service in a common format;
- withdraw consent you gave us.
Write to privacy@gamicom.net from the email address on your account. We may need to confirm it is you first, and we will reply within 30 days. You also have the right to complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you think we have handled your data unlawfully.
11. Cookies and device storage
We use only what is needed to run GACOM: a sign-in session, your settings (such as game options and which tutorials you have seen), and a cached copy of the app so it loads quickly. We do not use advertising cookies or third-party tracking pixels. Emails we send for sign-in and password reset do not contain tracking images.
12. Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email before the change takes effect.
13. Contact
A product of Mobtech Synergies Ltd (RC-7477445)
Lagos, Nigeria
Email: privacy@gamicom.net
Website: gamicom.net