PRIVACY POLICY LIGAS GAMING

Introduction

Welcome to our Privacy policy relating to your use of the website https://www.ligas.com/ (the “Website”) and other products and services (our “Services”). We are committed to protecting your privacy and handling your personal information in a transparent, secure and lawful manner. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our Website, submit an enquiry or use our products and services.

Please read this Privacy Policy carefully. It is a transparency notice explaining how we handle your personal information; where we rely on your consent for any processing (for example, certain marketing), we will obtain that consent separately and you are free to withhold or withdraw it at any time.

Who We Are

For the purposes of applicable data protection laws, including the European Union General Data Protection Regulation (“GDPR”), the Brazilian General Data Protection Law (LGPD) and the South African Protection of Personal Information Act, 2013 (“POPIA”), Ligas Entertainment (t/a Ligas Gaming) is the organisation responsible for determining the purposes and means of processing your personal information (the “Data Controller” under GDPR and the “Responsible Party” under POPIA).

If you have any questions about this Privacy Policy or our privacy practices, please contact us using the details provided below.

Personal Information We Collect

As part of providing our Services, we may collect a variety of personal information from or about you or your devices from various sources, as described below. You agree that you will only provide information to us that is accurate, complete and up-to-date, and that you will notify us of any changes to your information.

  • Personal information that we collect as follows:
  • Name and Surname
  • Email address
  • Company name
  • Contact phone number
  • IP address, browser type, device information and website usage information
  • Any other information you voluntarily provide to us

(collectively “Personal Data”).

We operate a business-to-business (B2B) licensing service. We do not intentionally collect or process any special categories of personal data under the GDPR (Article 9), sensitive personal data under the LGPD (Article 11), or special personal information under POPIA (section 26) - such as data revealing health, biometric or genetic data, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning sex life or sexual orientation. Please do not submit such information to us. Our Services are directed at businesses and are not intended for or directed at children.

Where we do not collect Personal Data directly from you, we may obtain business contact information from publicly available sources, third-party lead-generation or data-enrichment providers, our affiliates, and industry events. Where required, we will inform you of the source and categories of the Personal Data obtained.

Purpose of Processing

We process Personal Data to satisfy legal and regulatory compliance requirements and for providing products and services in a B2B licensing environment that may include

  • Responding to enquiries and provide requested information
  • Managing leads and customer relationships
  • Delivering our products and services
  • Improving our Website and user experience
  • Communicating with you regarding our Services
  • Sending marketing communications where permitted by law or where you have provided consent
  • Complying with legal and regulatory obligations
  • Detecting, prevent and investigate fraud or security incidents

From time to time we may also use your Personal Data to contact you by email, telephone or mobile phone to introduce you to our products or any events and undertakings, events undertaken by or supported by Ligas Gaming, where we are permitted to do so under applicable law, including on the basis of your consent where consent is required for direct marketing by telephone.

The data supplied by you shall be kept by us and will solely be used in relation to the processing activities described herein.

Providing certain information, such as your name, business email address and company name, is generally necessary for us to respond to your enquiry or to enter into and perform a contract with your organisation. If you do not provide this information, we may be unable to respond to your enquiry or provide our Services to you.

Legal Basis for Processing (GDPR)

Where GDPR applies, we process your Personal Data on one or more of the following legal bases:

  • Your consent
  • Performance of a contract
  • Compliance with a legal obligation
  • Our legitimate business interests, provided those interests are not overridden by your rights and freedoms
  • Protection of vital interests where applicable

In practice, we rely on: performance of a contract (or steps prior to entering a contract) to deliver our products and services and respond to enquiries; our legitimate business interests to manage leads and customer relationships, improve our Website and communicate with existing business contacts, having balanced those interests against your rights and freedoms; consent for marketing communications where consent is required by applicable law; and compliance with a legal obligation for regulatory and record-keeping purposes. You may ask us for further information about our legitimate interests balancing assessment at any time.

Processing Under POPIA

Where POPIA applies, we process Personal Data in accordance with the conditions for lawful processing, including accountability, purpose specification, processing limitation, information quality, openness, security safeguards, and data subject participation and we remain responsible for ensuring your Personal Data is processed lawfully and securely by our affiliates in South Africa.

Processing Under LGPD

Where LGPD applies, we process Personal Data on one or more of the legal bases permitted under the LGPD, including your consent, the performance of a contract, compliance with a legal obligation, and our legitimate interests. You have the rights set out in Article 18 of the LGPD.

Disclosure of Personal Data

We do not sell your Personal Data. As a policy, we will not disclose your Personal Data to anyone other than those employees, service providers, advisors and affiliated entities that may require your data to provide a particular service. We may also be required by law or legal process to disclose your Personal Data to regulators or relevant authorities, where necessary and lawful. All recipients are required to protect your Personal Data and process it only for authorised purposes.

International Transfers

Because we operate internationally, your Personal Data may be transferred to and processed in countries outside of your country of residence, including South Africa and other jurisdictions where our service providers or we operate.

Where personal information is transferred internationally, we implement appropriate safeguards to protect your information, including contractual protections such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum for transfers subject to UK data protection law, the international transfer mechanisms recognised under the LGPD and any applicable requirements of the Brazilian National Data Protection Authority (ANPD), and the conditions for lawful cross-border transfer under section 72 of POPIA, or other lawful transfer mechanisms required by applicable data protection laws. You may request further information about these safeguards using the contact details below.

Retention and Security

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy. As a general rule, we retain business-relationship data for the duration of our relationship with you or your organisation and for a period of up to seven (7) years afterwards to meet legal, regulatory, tax and record-keeping obligations, unless a longer period is required by law. We implement technical and organisational safeguards including encryption, access controls, and secure systems. We safeguard the security of the data you provide us with physical, electronic and managerial procedures. While no method of electronic transmission or storage is completely secure, we continually review and improve our security practices.

Where you contact us as a prospective business contact but no business relationship is established (for example, where an enquiry does not result in a contract), we will generally retain that information for up to twenty-four (24) months from our last interaction with you, after which it will be deleted or anonymised, unless a longer retention period is required for legal, regulatory or legitimate business purposes.

Your Rights

Depending on your location and applicable law, you may have the right to:

  • Access your Personal Data
  • Correct inaccurate or incomplete information
  • Request deletion of your Personal Data
  • Restrict or object to processing
  • Withdraw consent where processing is based on consent
  • Request portability of your Personal Data where applicable
  • Lodge a complaint with the relevant supervisory authority or information regulator

To exercise your rights, please contact us using the details below.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing, including profiling. Where any such processing does take place, you may request a review in accordance with your rights under applicable law.

Direct Marketing

Where required by applicable law - including section 69 of POPIA for electronic communications to data subjects in South Africa - we will only send you electronic direct marketing where you have opted in or where we are otherwise permitted to do so. You may opt out of, or withdraw your consent to, marketing communications at any time using the unsubscribe facility in our messages or by contacting us.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Email: privacy@ligas.com

If you are located in the European Economic Area, Brazil or South Africa, you may also have the right to contact the relevant supervisory authority or information regulator regarding our processing of your Personal Data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or privacy practices. Any updated version will be published on this page together with the revised effective date.

Version 1.0 Last Updated: 4 August 2026