Conquest Arcade — Privacy Policy

Conquest Labs LLC d/b/a Conquest Arcade

Effective Date: July 6, 2026 · Last updated: July 6, 2026

1. Introduction

Conquest Arcade is operated by Conquest Labs LLC ("we," "our," or "us"), a company incorporated under the laws of Delaware, USA, with its registered office at 2810 North Church Street, Wilmington, DE 19802, USA. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to it. Conquest Arcade is a real-money skill-gaming service intended for adults (18+) in the United States. Please read this policy carefully. By using Conquest Arcade (the "Platform" or "App"), you acknowledge that you have read and understood this Privacy Policy. This Policy is incorporated into our Terms of Service.

2. Information We Collect

We collect information in several ways depending on how you interact with our Platform:

  • Account & identity — a pseudonymous user ID (Firebase UID), a display name, an email address (often an Apple private-relay address via Sign in with Apple), and your country/region.
  • Identity verification (KYC) — a government-issued photo ID, a selfie, your date of birth, and proof of address, collected via Stripe Identity before you can withdraw funds.
  • Payment — deposit amount, date, and status, and tokenized payment references. We never receive or store your full card number or CVV; card data is handled by Stripe.
  • Gameplay — match results, scores, mode, duration, win/loss, ELO rating, level, leaderboard position, and daily-reward and referral history.
  • Match recordings — screen-capture video of your competitive matches, used for match review and anti-cheat.
  • Profile photo — an optional avatar image you choose from your device.
  • Financial ledger — your Gem, Cash, and Withdrawable Cash balances; deposit and withdrawal history; and the payout details you provide (PayPal / Wise / bank).
  • Device & technical — device model, OS version, app version, language, advertising identifier (IDFA/IDFV), and IP address.
  • Approximate location — country and U.S. state derived from your IP address, plus a VPN/proxy flag, used to enforce eligibility and state restrictions. We do not collect precise GPS location.
  • Behavioral analytics — in-app events (screens viewed, matches, deposits, feature use) keyed to your pseudonymous ID, with no direct personal identifiers.
  • Attribution — app install source and campaign/attribution data.
  • Push token — a Firebase Cloud Messaging (FCM) token for notifications, collected only if you grant permission.

3. How We Use Your Information

We use the information we collect to:

  • create and manage your account and authenticate you (Sign in with Apple);
  • operate core gameplay — matchmaking, scoring, leaderboards, and rewards;
  • process deposits and, after verification, withdrawals;
  • verify age, identity, and location to comply with eligibility, KYC, and state-restriction rules;
  • detect, investigate, and prevent fraud, cheating, collusion, money laundering, and abuse (including via match recordings);
  • provide customer support and respond to your requests;
  • send transactional and gameplay push notifications and, where permitted, promotions;
  • measure and improve the App and understand which marketing campaigns are effective;
  • comply with legal, tax, anti-money-laundering, and regulatory obligations; and
  • enforce our Terms and protect the rights, safety, and property of Conquest and its users.

If any data-protection law such as the GDPR applies to you, we rely on the following legal bases: contractual necessity (to provide the services you request), legitimate interests (fraud prevention, security, service improvement, analytics), consent (advertising/attribution tracking, granted via the iOS App Tracking Transparency prompt, which you may withdraw at any time), and legal obligation (age verification, KYC/AML, and tax and financial record-keeping).

4. Third-Party Services

We share data only with the service providers below, each under its own privacy policy, and only as needed to run the App. We do not sell your personal information.

  • Google / Firebase — authentication, backend functions, push notifications, and remote config (policies.google.com/privacy).
  • Stripe, Inc. — payment processing and, via Stripe Identity, KYC verification (stripe.com/privacy).
  • Amazon Web Services — cloud database and secure storage for match recordings and avatars (aws.amazon.com/privacy).
  • PostHog — product and behavioral analytics (U.S. cloud; pseudonymous; session replay off) (posthog.com/privacy).
  • AppsFlyer — mobile attribution and marketing analytics (appsflyer.com/legal).
  • Meta — ad measurement and campaign optimization via the AppsFlyer connector, using aggregated/attribution data (facebook.com/privacy).
  • Unity Ads — optional rewarded-video ads (unity.com/legal).
  • PayPal & Wise — processing withdrawal payouts you request (paypal.com, wise.com).
  • Apple — Sign in with Apple, App Store delivery, and push delivery via APNs (apple.com/legal/privacy).

We may also disclose information when required by law, subpoena, or regulator; to enforce our Terms; to prevent fraud or harm; or in connection with a merger, acquisition, or sale of assets (subject to this Policy).

5. Tracking, Analytics & App Tracking Transparency

As a mobile app, Conquest Arcade uses SDK and device identifiers rather than website cookies.

  • iOS App Tracking Transparency (ATT). On iOS we request permission before using your advertising identifier (IDFA) for cross-app attribution (AppsFlyer). If you decline, attribution tracking is disabled and all free and paid gameplay remains fully available.
  • Behavioral analytics (PostHog). Product analytics are keyed to your pseudonymous user ID, contain no direct personal identifiers, and exclude session replay. You may opt out of behavioral analytics by contacting us.
  • SKAdNetwork. On iOS we use Apple's privacy-preserving ad-attribution framework, which reports campaign performance without identifying you.
  • Global Privacy Control (GPC). Where applicable, we honor recognized opt-out preference signals for behavioral advertising.

6. Identity Verification, Sanctions & AML Screening

To comply with anti-money-laundering (AML) and Bank Secrecy Act obligations, we verify the identity of players who withdraw funds through Stripe Identity and may screen users and transactions against applicable sanctions and watchlists. Verification data (government ID, selfie, date of birth, address) and transaction records are processed for fraud prevention, AML compliance, and legal reporting. We may decline, hold, or reverse transactions, and suspend or close accounts, where required to meet these obligations. Records associated with verification, transactions, and screening are retained for the minimum periods required by law (see Section 7).

7. Data Retention

  • Account data is retained while your account is active.
  • Match recordings are automatically deleted after approximately 30 days.
  • Financial, KYC, and anti-money-laundering records are retained for the period required by law — generally a minimum of 5–7 years after account closure — to meet tax (e.g., 1099), Bank Secrecy Act, and dispute-resolution obligations.
  • Behavioral analytics and attribution data are retained per our providers' policies (typically up to 24 months).
  • When you delete your account, personally identifying data is removed from the live App promptly and purged within 30 days, except records we are legally required to retain (see above). See Terms of Service, Section 20.

8. Data Security

  • Data is encrypted in transit (TLS) and at rest;
  • payment-card data is handled solely by Stripe (PCI-DSS Level 1); we never store card numbers;
  • match recordings and avatars are stored in access-controlled cloud storage;
  • access to production data is restricted to authorized personnel; and
  • we will notify affected users and regulators of a data breach where required by law, generally within 72 hours where feasible.

No system is perfectly secure, and we cannot guarantee the absolute security of your information.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the personal data we hold about you;
  • Correct — fix inaccurate data;
  • Delete — request deletion of your account and data, subject to legal-retention holds;
  • Port — receive your data in a portable format;
  • Object / restrict — object to or limit certain processing;
  • Withdraw consent — opt out of tracking or marketing at any time.

To exercise any right, email team@conquestarcade.com. We respond within 30 days and may need to verify your identity first.

California Residents (CCPA / CPRA). California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to opt out of the "sale" or "sharing" of personal information, and to non-discrimination for exercising these rights. We do not sell personal information. We honor Global Privacy Control signals for opt-out of behavioral advertising. To exercise your California rights, contact team@conquestarcade.com.

10. Children's Privacy

Conquest Arcade is strictly for users aged 18 and over (21 where required). We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will delete their data and terminate the account. If you are a parent or guardian and believe a minor has used the App, contact us immediately at team@conquestarcade.com.

11. International Data Transfers

Conquest Arcade serves U.S. users, and data is primarily processed in the United States. Some service providers may process data in other countries under appropriate safeguards. By using the App, you understand that your information may be processed in the United States.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the App or by email. Your continued use of the Platform after any changes become effective constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

13. Contact

If you have any questions about this Privacy Policy, or to exercise your privacy rights, please contact us at:

Conquest Labs LLC 2810 North Church Street Wilmington, DE 19802, USA Email: team@conquestarcade.com

Related Policies: Terms of Service

We do not sell your personal information.

© 2026 Conquest Labs LLC. All rights reserved.

Claude Debussy