Privacy Policy
Last updated: 2026
1. Introduction
This Privacy Policy explains how EpicStar Games ("we," "us," or "our") collects, uses, and protects your information when you use Chaos Racing ("Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
This policy complies with the Protection of Personal Information Act (POPIA) of South Africa.
2. Information We Collect
We collect only the information necessary to operate the Service:
2.1 Account Information
- Username
- Email address
- Account identifiers
- Age confirmation (18+ verification)
2.2 Gameplay Data
- Race results and times
- Leaderboard rankings
- Tournament participation and performance
- Fuel consumption and regeneration
- XP earned and progression
2.3 Transaction Data
- Purchase history (optional in-game content)
- In-game currency usage (Coins, CR Tokens)
- Withdrawal records and payout history
2.4 KYC Verification Data
For withdrawal requests, we temporarily collect identity verification documents:
- Government-issued ID (passport, driver's license, or national ID card)
- Proof of address (utility bill, bank statement, or official correspondence)
- Selfie or photo for identity verification
⚡ Important: KYC documents are stored temporarily for verification purposes only. Documents are permanently deleted within 3–7 days of verification completion.
2.5 Device and Technical Data
- IP address
- Device type and operating system
- Log data and usage statistics
- Browser information
3. How We Use Information
We use collected information for the following purposes:
- Provide, operate, and maintain the Service
- Manage accounts and gameplay features
- Process transactions and in-game purchases
- Administer tournament participation and leaderboards
- Verify identity for withdrawal requests (KYC)
- Process and fulfill withdrawal payments
- Detect, prevent, and address fraud, cheating, or abuse
- Verify age compliance (18+ only)
- Improve and optimize the game experience
- Comply with legal obligations
4. KYC Verification
4.1 Purpose of KYC
KYC (Know Your Customer) verification is required to:
- Prevent fraud and identity theft
- Verify that withdrawal requests are legitimate
- Ensure compliance with South African regulations
- Protect against unauthorized account access and withdrawal attempts
- Confirm that you meet the 18+ age requirement
4.2 How KYC Data is Handled
- KYC documents are submitted through a secure, encrypted upload portal.
- Submitted documents are reviewed manually by authorized personnel solely for identity verification, anti-money laundering (AML), and regulatory compliance purposes.
- Only the verification outcome (e.g., Verified or Rejected) and any information necessary to demonstrate compliance are retained.
- KYC documents are retained only for as long as reasonably necessary to complete the verification process or to comply with applicable legal or regulatory obligations.
- Once no longer required, KYC documents are securely and permanently deleted or destroyed in accordance with the Protection of Personal Information Act, 2013 (POPIA), and applicable data protection requirements.
4.3 KYC Data Retention
EpicStar Games retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected or as required by applicable law, in accordance with the Protection of Personal Information Act, 2013 (POPIA).
- KYC documents: Retained only for the period reasonably necessary to complete verification or comply with applicable legal or regulatory obligations, after which they are securely deleted or destroyed.
- Compliance records retained: User ID, verification status, verification timestamp, audit information, and any other information reasonably required to demonstrate compliance.
- Identity documents not retained long-term: Copies of identity documents, passports, selfies, and proof of address documents are not retained after they are no longer required for verification or legal compliance.
- Audit records may be retained for a longer period where necessary to demonstrate compliance, investigate fraud, resolve disputes, or comply with applicable legal obligations.
5. Payments and Withdrawals
- Payments for optional in-game content are processed by third-party providers
- We do not store full payment card details
- Withdrawal payments are processed through bank transfer
- All withdrawals are subject to KYC verification
- Payouts are processed manually by our admin team
6. Data Sharing
We may share your information with:
- Payment and payout providers (for processing transactions)
- Hosting, infrastructure, and analytics providers
- Legal authorities when required by law
We do not sell your personal data.
7. Data Security
We implement reasonable technical and organizational measures to protect your data, including:
- Encryption of sensitive data in transit and at rest
- Secure temporary storage of KYC documents with access controls
- Access restricted to authorized personnel only
8. Your Rights Under POPIA
Under South Africa's Protection of Personal Information Act, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to certain processing activities
- Withdraw consent for data processing (where consent is the legal basis)
Requests can be made via the contact details below. We will respond to your request within 30 days.
9. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal data from children under 18. By using the Service, you confirm that you are at least 18 years old.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after updates constitutes acceptance of the revised policy.
11. Contact
For questions or requests regarding this Privacy Policy or KYC processes, contact: