Privacy Policy

1. Who We Are

Phantom Rush Arcade ("we," "us," "our," or "the Platform") is a Canadian free social arcade entertainment service operating at phantomrusharcade.com. We provide interactive digital entertainment experiences, including our flagship title Legacy of the Dead — Pharaoh's Tomb, exclusively to adults aged 19 and older residing in Canada. We do not conduct financial transactions, process payments, or offer any form of monetary reward or exchange through our platform.

As a Canadian-based operator, we are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5), along with substantially similar provincial legislation including British Columbia's Personal Information Protection Act (PIPA), Alberta's Personal Information Protection Act (PIPA), and Québec's Act respecting the protection of personal information in the private sector (Law 25). We are committed to meeting the highest standards of privacy protection across all Canadian jurisdictions.

2. Scope of This Policy

This Privacy Policy applies to all personal information collected through:

• The phantomrusharcade.com website and all subdomains
• Our interactive arcade experiences, including Legacy of the Dead — Pharaoh's Tomb
• Electronic communications you initiate with us (email, contact forms)
• Any other service or feature we offer that links to this Privacy Policy

This Policy does not apply to third-party websites, services, or platforms that may be linked from our website. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of those external parties.

This Policy is incorporated by reference into our Terms of Service and Cookie Policy. Together, these three documents form the complete framework governing your use of Phantom Rush Arcade and our handling of your information.

3. Information We Collect

We collect only the information necessary to provide, maintain, and improve our services. The following table describes the categories of information we may collect:

We do not collect sensitive personal information such as financial data, government identification numbers, health information, or biometric data. We have no mechanism for collecting such data and no purpose for which we would require it.

4. How We Use Your Information

We use the personal information we collect for these specific purposes:

• Age verification and access control: To confirm users meet the 19+ age requirement.
• Platform delivery: To serve content, load arcade experiences, and maintain session continuity.
• Analytics and improvement: To understand navigation patterns and optimize user experience.
• Communications and support: To respond to inquiries submitted through our contact form.
• Security and fraud prevention: To detect and prevent activities threatening platform integrity.
• Legal compliance: To comply with applicable Canadian laws and regulations.
• Cookie preference management: To remember consent decisions and display preferences.

We will not use your information for any purpose other than those listed above without first obtaining your explicit consent. We do not sell, rent, or trade personal information to any third party for commercial purposes.

5. Legal Bases for Processing

Under PIPEDA, our collection, use, and disclosure of personal information is governed by the principle of meaningful consent:

• Express consent: Where we ask you to actively agree (cookie consent, contact form submission).
• Implied consent: When you voluntarily provide information in obvious contexts.
• Legitimate business purposes: For technical data collected automatically for platform operation.
• Legal obligation: Where required by law to collect, retain, or disclose information.

You may withdraw consent at any time by contacting our Privacy Officer using the details in Section 11. Withdrawal may affect your ability to use certain features.

6. Disclosure of Your Information

Phantom Rush Arcade does not sell, rent, or trade your personal information. We may share information only in these limited circumstances:

• Service providers: Trusted third parties for hosting, analytics, email delivery, and security monitoring, bound by data processing agreements.
• Analytics platforms: Aggregated and anonymized data for performance analysis.
• Legal requirements: When required by law, court order, or lawful regulatory request.
• Protection of rights: Where necessary to protect rights, property, or safety.
• Business transitions: In the event of merger, acquisition, or asset sale, subject to equivalent privacy obligations.

We do not transfer personal information outside Canada without ensuring an equivalent level of privacy protection.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform. For full details, please review our Cookie Policy. We use these categories:

• Strictly necessary cookies: Required for basic platform functionality.
• Performance cookies: Collect anonymized usage data.
• Functional cookies: Remember preferences and settings.
• Analytics cookies: Help understand traffic patterns.

You have the right to refuse non-essential cookies via our cookie banner.

8. Data Retention

We retain personal information only as long as necessary:

• Contact data: Up to 24 months from last communication.
• Technical data: Identifiable data retained up to 12 months, then anonymized.
• Age verification: Duration of engagement plus 12 months.
• Consent records: Up to 36 months per regulatory guidance.

When information is no longer required, we destroy, erase, or anonymize it securely.

9. Security Safeguards

We implement technical, organizational, and physical safeguards including:

• TLS encryption for data in transit
• Access controls limiting data to authorized personnel
• Regular security assessments and vulnerability reviews
• Secure deletion procedures for expired data
• Employee training on privacy obligations
• Contractual security requirements for service providers

In the event of a data breach posing real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals per PIPEDA's mandatory breach reporting requirements.

10. Your Privacy Rights

As a Canadian resident, your rights under PIPEDA include:

• Right of access: Request access to personal information we hold about you.
• Right to correction: Request correction of inaccurate or incomplete information.
• Right to withdraw consent: Withdraw consent to collection, use, or disclosure at any time.
• Right to complain: File a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.
• Right to information: Request details about third-party disclosures.

We will respond to all access requests within 30 days. We may require identity verification before processing requests.

11. Contact Our Privacy Officer

If you have questions, concerns, or wish to exercise your privacy rights, contact our Privacy Officer:

Privacy Officer
Phantom Rush Arcade
Email: privacy@phantomrusharcade.com
Contact Form: phantomrusharcade.com/contact
Response Time: Within 30 days of receipt

If unsatisfied with our response, you may escalate to the Office of the Privacy Commissioner of Canada at 30 Victoria Street, Gatineau, Quebec K1A 1H3 or online at www.priv.gc.ca.

This Privacy Policy may be updated to reflect changes in practices or legal requirements. Material changes will be communicated via a notice on our homepage.