Privacy Policy

This Privacy Policy outlines how Rollify Limitada (“Rollify ”, “we ”, “our ” or “us ”) collects, uses, stores, discloses, and protects your personal information when you access our website https://rollify.com and use our related services (together, the “Services”).

Rollify Limitada is a limited liability company registered in Costa Rica, under registration number 3102908645, with its registered address at San Pedro, Barrio Dent, Del Centro Cultural Costarricense Norteamericano, Dos Cientos Metros Al Norte Y Cincuenta Al Este, Edificio Ofident, Oficina Número Tres . Rollify is licensed and regulated by the Government of the Autonomous Island of Anjouan, Union of Comoros, operating under License No. ALSI-202408004-FI1.

We are committed to ensuring your privacy is protected and that your data is handled in full compliance with the applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and any other relevant legal and regulatory requirements.

1. Legal Basis for Processing

Rollify processes your personal data based on one or more of the following legal grounds:

• Performance of a Contract — To provide access to and deliver the Services as agreed when you use our platform.
• Legitimate Interest — To secure our platform, prevent abuse, and enhance the user experience.
• Consent — For activities that require your approval, such as email marketing or optional features.
• Legal Obligation — To comply with anti-money laundering (AML), tax, or regulatory obligations that require the collection or use of your data.

2. Information We Collect

We may collect and process the following types of personal data:

• Account Information : User ID, email address, wallet address, username, age, account history, and verification status.
• Contact Information : Name, email, phone number, country of residence.
• Device Information : Device ID, browser type, IP address, operating system, and user-agent data.
• Financial Information : Wallet activity, Game Token transactions, deposit and withdrawal records.
• Location Data : Geolocation based on IP or device-level permissions.
• KYC Data : Government-issued ID, proof of address, source of funds—collected as required.
• Usage Data : Game history, transaction logs, user interactions, and preferences.
• Fraud Prevention Data : Account behavior, transaction pattern risk scoring, account flags, and device fingerprinting.
• Marketing Preferences : Newsletter subscription status, campaign opt-ins, and communication channels.

We do not process sensitive categories of data (e.g., religion or ethnicity), unless required by law, and only with your explicit consent.

3. How We Use Your Personal Data

Your personal data may be used for the following purposes:

• To operate and deliver the Services;
• To verify your identity and ensure eligibility;
• To process transactions or fulfill platforms interactions;
• To communicate critical Account updates;
• To analyze and improve the functionality of the platform;
• To comply with legal and regulatory obligations (e.g., AML, KYC, tax reporting);
• To investigate potential fraud or violations of our Terms;
• To provide personalized content, features, promotions, or campaigns;
• To manage loyalty programs or reward campaigns;
• To contact you based on your communication preferences.

4. International Data Transfers

As part of our global operations, your personal data may be transferred to and stored in jurisdictions outside of your country of residence, including countries with data protection laws that may differ from yours. In such cases, we implement recognized safeguards such as Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) to ensure compliance.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill our obligations, resolve disputes, and ensure service continuity. Retention periods include:

• Account Data – retained as long as the account is open or until deletion is requested.
• Transaction Records – retained for up to 7 years to comply with tax, legal, or AML recordkeeping requirements.
• Marketing Preferences – retained until you opt out.
• KYC and Fraud-related data – retained for up to 5 years or longer where required by law.

Data that is no longer required will be securely deleted or anonymized.

6. Your Rights

Depending on your country or region, you may have the following rights under data protection law:

• Right of Access – Request a copy of the data we hold about you.
• Right of Rectification – Update or correct your personal information.
• Right of Erasure – Request deletion, subject to regulatory retention requirements.
• Right to Restrict Processing – Request limitations on how we process your data.
• Right to Object – Opt out of data processing for certain purposes (e.g., direct marketing).
• Right to Data Portability – Request a copy of your data in a machine-readable format.
• Right to Lodge a Complaint – Contact your local regulatory authority regarding our data handling.

To exercise any of these rights, please contact us at privacy@rollify.com.

7. Security Measures

We implement best-in-class security measures to safeguard your personal data:

• Use of HTTPS/SSL encryption across all sessions;
• Account-level multi-factor authentication (MFA);
• Secure access controls for data and admin interfaces;
• Regular platform and provider-level security audits;
• Internal policies ensuring data minimization and principle of least privilege;
• Employee security training and access logging;
• Incident Reporting & Breach Notification procedures in accordance with applicable laws.

We strive to comply with leading frameworks for data integrity and availability, including ISO 27001 and SOC 2 standards.

8. Children’s Privacy

Rollify does not knowingly offer services to individuals under the age of 18 or allow minors to register. If we discover that a user is underage, we will promptly delete the associated personal data.

9. Sharing Your Data

We may share your personal data in the following cases:

• With trusted third-party service providers who assist with payment processing, hosting, customer service, identity verification (KYC), and marketing tools;
• With regulatory or law enforcement authorities to comply with legal obligations;
• Within the Rollify group of companies and corporate partners supporting the platform;
• In the event of a transactional event such as a merger, sale, or acquisition;
• With fraud detection and cybersecurity services who help us detect abuse or misuse.

We do not sell or rent your personal data for marketing purposes.

10. Direct Marketing & Opt-Out

With your consent or as permitted by law, we may use your data to send promotional content. You can opt out at any time by:

• Clicking the "unsubscribe" link in a promotional email;
• Updating your contact preferences in your Account settings;
• Emailing privacy@rollify.com requesting removal from marketing communications.

11. Supervisory Authority & Complaints

If you are located in a country with a designated data protection authority (such as an EEA member), you have the right to lodge a complaint with them regarding our privacy practices.

For privacy-related concerns, you can also reach us directly at privacy@rollify.com.

12. Updates to This Privacy Policy

This Privacy Policy may be revised periodically. The most recent version will be available at https://rollify.com/privacy-policy, where the date of the most recent revision will be displayed.

Significant changes will be communicated via email or an announcement within your Account. If you continue to use the Services after any updates become effective, you agree to be bound by the revised Privacy Policy.

If you have any questions about our privacy practices, please contact us at privacy@rollify.com.