Privacy Policy

The data controller is NOGEEK SARLU, a SARLU trading under the commercial name NoGeek, with registered office at ***, Madagascar.

Contact: [email protected].

This Privacy Policy explains how NoGeek collects, uses, stores, protects and shares personal information when you browse the website, use the mobile application, create an account, place an order, contact support, reveal a digital product, join a tournament or use Crédit NoGeek or Reward Points.

NoGeek sells digital and physical products directly to customers. Some products depend on confidential product providers, payment partners, technical partners or platforms, but NoGeek remains the customer’s point of contact for orders placed on NoGeek.

We collect only information needed to operate NoGeek, deliver products, process payments, provide support, protect accounts and comply with legal duties.

• Name, nickname, email address, phone number when provided, language and account preferences.
• Shipping address when needed for physical products.
• Order identifiers, purchase history, product type, delivery status, reveal status and support history.
• Payment references, payment status and fraud-prevention signals. We do not store full bank card details.
• IP address, technical logs, device, browser, language and security logs.
• Player ID, account ID, server, operator, phone number, platform account or other delivery identifier entered by the customer when required for delivery.
• Support messages, screenshots, claim evidence and dispute documents.
• Tournament, contest, ranking, prize, Crédit NoGeek and Reward Points records.

We process personal data to run the store and support customers. We do not sell personal data.

• Create and manage customer accounts.
• Process orders and payments.
• Deliver digital and physical products.
• Execute direct top-ups.
• Manage subscription, account-based or shared/family access products where applicable.
• Provide customer support and handle claims.
• Prevent fraud, abuse, duplicate accounts, suspicious payments and chargebacks.
• Manage refunds, disputes and accounting records.
• Manage Crédit NoGeek and Reward Points.
• Organize tournaments, contests, rankings, events and rewards.
• Send transactional communications and security notices.
• Send marketing communications only where permitted.
• Measure page views, product views, searches and ecommerce events with privacy-safe analytics, without sending personal information, passwords, digital keys or form contents to the analytics tool.
• Comply with legal, tax, accounting and security obligations.

Customer passwords are not stored as readable text. NoGeek stores password hashes and uses access controls to limit internal access.

NoGeek avoids asking for access to a customer’s personal account whenever possible. Some subscriptions, activations or access-based products may exceptionally require account access where this is permitted for the relevant product and clearly disclosed before purchase.

When a product requires account access, customers should preferably create a new account dedicated to that product. If an existing account is used, NoGeek recommends changing the password immediately after activation. After activation, the customer remains responsible for the security and management of that account, except where applicable law provides otherwise or NoGeek is proven at fault.

Personal data may be shared with payment partners such as PAPI, Stripe, Binance and their payment partners, as well as confidential product providers, technical partners, customer support tools, security tools, accounting partners or authorities where necessary.

Data is shared only where necessary for payment, delivery, support, fraud prevention, accounting, compliance, tournament management or legal obligations. NoGeek does not publicly disclose confidential product provider names.

Some partners may process data outside Madagascar. When this happens, NoGeek takes reasonable steps to limit the transferred data to what is necessary and to protect it through appropriate contractual, organizational or technical safeguards.

Retention periods depend on the type of data, product, payment method, legal duty and dispute risk.

• Account data: until account deletion, then archived where legally necessary.
• Orders and invoices: for the period required by accounting, tax and legal obligations.
• Payment references: for payment verification, fraud prevention, chargebacks and disputes.
• Support messages: for the time needed to resolve the request and protect legal rights.
• Technical logs: for a limited period needed for security and fraud prevention.
• Marketing data: until consent withdrawal or unsubscribe.
• Crédit NoGeek and Reward Points records: for balance management, conversion, fraud prevention and disputes.
• Tournament participation data: for event management, prizes, rankings and disputes.

Depending on applicable law, you may request access, correction, deletion, restriction, objection, export of your data, or withdrawal of marketing consent.

We may need to verify your identity before acting on a request. Some records cannot be deleted immediately when NoGeek must keep them for orders, disputes, fraud prevention, accounting, tax or legal compliance.

For privacy questions, account data requests or marketing opt-out requests, contact [email protected] or use support from your account.

NoGeek may update this Privacy Policy when services, products, payment methods, security practices or legal duties change. The updated version applies from the date shown above.