Pwnage Esports B.V., trading as GoBLAM, is the controller of the personal data described in this Privacy Notice unless another controller is identified for a specific feature, provider relationship, or transaction.

The controller is registered with the Dutch Chamber of Commerce under number 42019847, VAT ID NL869321791B01, at Churchill-Laan 260H, 1078 EZ Amsterdam, the Netherlands. Privacy requests and questions may be sent to support@goblam.gg.

This Privacy Notice applies to personal data processed in connection with GoBLAM accounts, Contests, tester recruitment, support, Ticket Bundle purchases, payments, Prize Awards, Prize Payouts, age verification, identity verification, compliance review, analytics, advertising, security, and related subdomains.

Some personal data is required to provide an account, determine eligibility, process payments, administer Contests, protect platform integrity, or process Prize Payouts. If you do not provide required data, GoBLAM may be unable to provide the relevant feature.

• Account data, including customer ID, username, email address, authentication provider identifiers, Steam identifiers, password credentials where applicable, account settings, and account status.
• Profile and eligibility data, including country of residence, contact details, age-verification status, identity-verification status, sanctions or screening status, and support notes.
• Contest data, including registrations, entry costs, live status, rank, score, K/D, rating, balance, elimination status, standings, Prize Awards, and gameplay event data.
• Transaction data, including Ticket Bundle purchases, entry costs, paid live actions, account transaction records, prize credits, Prize Payout requests, provider references, amounts, currencies, tax data, and timestamps.
• Security and risk data, including hashed IP address, hashed user agent, hashed device fingerprint, GeoIP results, proxy or hosting indicators, provider reason codes, fraud signals, and limited context snapshots.
• Communications data, including emails, SMS, support tickets, admin notes, notifications, consent records, and complaint history.
• Tester-recruitment data, including name, email address, and an optional Steam profile URL or Steam name submitted through a recruitment form.
• Marketing and analytics data, including attribution parameters, ad-click data, campaign data, consent status, conversion events, and site usage data where enabled.

• To create accounts, authenticate Customers, operate profiles, and connect Steam identities.
• To register Customers, administer Contests, display leaderboards, determine results, settle Prize Awards, and update ratings.
• To price purchases, process payments, maintain ledgers, award credits, handle refunds, and support Prize Payouts.
• To verify age, identity, country, sanctions status, payout eligibility, payment account ownership, and platform integrity.
• To detect, prevent, and investigate fraud, duplicate accounts, proxy abuse, chargeback abuse, linked-account risk, cheating, and misuse.
• To respond to support requests, investigate disputes, enforce rules, preserve evidence, and improve operations.
• To manage tester recruitment, identify a voluntarily supplied Steam account, and contact prospective testers about GoBLAM testing.
• To operate analytics, advertising, attribution, and conversion measurement where there is an appropriate legal basis and consent where required.

GoBLAM relies on different legal bases depending on the feature and context. Processing may be necessary for contract performance where it is needed to provide accounts, Contests, Ticket Bundle purchases, support, Prize Awards, and Prize Payout requests.

Processing may be necessary to comply with legal obligations, including accounting, tax, sanctions, consumer protection, payment, payout, and law-enforcement obligations. Processing may also be based on legitimate interests, including fraud prevention, security, service integrity, support quality, abuse prevention, internal analytics, and legal claims, balanced against Customer rights.

Consent is used where required for non-essential cookies, marketing communications, optional tracking, and any other processing that legally requires consent. GoBLAM does not rely on vital interests unless a real and legally recognized use case exists.

GoBLAM relies on consent when a prospective tester voluntarily submits a tester-recruitment form so GoBLAM can manage the application, identify an optionally supplied Steam account, and contact the person about testing. Consent may be withdrawn at any time by contacting support@goblam.gg.

Age-verification and identity-verification providers may process Customer data through hosted verification sessions. GoBLAM generally stores provider identifiers, statuses, timestamps, thresholds, applicant or session references, and reason codes rather than raw identity evidence where reasonably possible.

Customer profiles record country of residence. Compliance profiles may record age status, identity status, screening status, manual restrictions, linked-account review flags, and internal notes. GoBLAM may require fresh verification when status expires, country changes, risk increases, payout thresholds are met, or law requires it.

GoBLAM uses cookies, local storage, session storage, pixels, tags, SDKs, and similar technologies as described in the Cookie Notice. Strictly necessary technologies support login, security, routing, localization, checkout continuity, consent storage, and service availability.

Non-essential analytics, advertising, attribution, and conversion tracking run only when configured, legally permitted, and allowed by your consent settings where consent is required.

Where configured and legally permitted, Google Advanced Consent Mode may receive limited cookieless page views and confirmed account-creation or Contest-registration signals after optional analytics or advertising is rejected. GoBLAM removes Customer and Contest identifiers, advertising click identifiers, arbitrary query parameters, enhanced-conversion user data, and detailed workflow diagnostics from those denied-consent signals. The Cookie Notice explains the separate behavior of analytics cookies, advertising technologies, first-party experiments, and other providers.

GoBLAM may share personal data with hosting, database, observability, payment, payout, verification, email, SMS, analytics, advertising, customer-support, security, professional-adviser, and legal providers where necessary for the purposes described in this Privacy Notice.

Tally provides GoBLAM's tester-recruitment form and processes the name, email address, optional Steam identifier, and form metadata submitted through it on GoBLAM's behalf.

GoBLAM may disclose personal data to authorities, courts, regulators, banks, payment networks, providers, or law enforcement where legally required, where necessary to protect rights, or where necessary to investigate fraud, abuse, integrity issues, or legal claims.

GoBLAM may display usernames, gameplay statistics, ratings, rankings, standings, Contest results, and leaderboard information as part of the public or semi-public Contest experience. GoBLAM does not sell personal data unless a lawful model is confirmed and clearly explained in advance.

GoBLAM and its providers may process personal data inside and outside the European Economic Area. Where personal data is transferred outside the EEA, GoBLAM uses an appropriate transfer mechanism where required, such as an adequacy decision, standard contractual clauses, or another approved safeguard.

Customers may request more information about relevant transfer safeguards through GoBLAM support where applicable.

GoBLAM retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Notice, including account operation, Contest administration, payments, payouts, accounting, tax, disputes, fraud prevention, support, legal claims, and compliance.

• Account data is generally retained while the account exists and for a defined period after closure where needed for legal, fraud, dispute, accounting, or compliance purposes.
• Transaction, Prize Award, and Prize Payout records may be retained for accounting, tax, dispute, fraud, payment, payout, and legal periods.
• Verification records are retained for the shortest period compatible with provider evidence, legal obligations, platform integrity, and dispute needs.
• Security and risk signals are retained for periods tied to abuse prevention, eligibility review, security, dispute handling, and legal requirements.
• Tester-recruitment submissions are retained until the relevant testing programme ends or for no more than 12 months after submission, whichever is earlier, unless the person withdraws consent sooner or a longer period is required for a legal claim.
• Closed or deleted accounts may retain limited records where required or permitted for legal, fraud, payout, tax, accounting, or enforcement reasons.

Depending on applicable law, you may request access, rectification, erasure, restriction, portability, objection, and revocation of consent. You may object to certain processing based on legitimate interests and to direct marketing, and you may have rights related to automated decisions that produce legal or similarly significant effects.

GoBLAM may need to verify your identity before fulfilling a privacy request. GoBLAM responds without undue delay and may refuse or limit requests where required or permitted by law, including where necessary for fraud prevention, legal claims, accounting, compliance, security, or another person's rights.

You may contact GoBLAM support for privacy requests. You may also have the right to lodge a complaint with the Dutch Data Protection Authority or another competent supervisory authority.

GoBLAM uses technical and organizational measures appropriate to account, payment, payout, verification, and Contest risk. Sensitive security signals are hashed, minimized, separated, or access-restricted where reasonably practicable.

Access to customer, verification, payout, support, and admin data is role-based and audited. No service can guarantee perfect security, and Customers remain responsible for protecting their own account credentials, devices, email accounts, and Steam access.