Home Privacy policy
Privacy policy
This policy explains what personal information Tinta Arena collects, why we need it, who else can see it, how long we keep it and what you can ask us to do with it. It applies to this website and to every page under tintaenterashop.com. It is written to be read rather than survived — if any part of it is unclear, that is a fault worth telling us about.
What we collect
We collect only what a competition platform needs to function. That falls into three groups.
- Information you give us. Your name and email address when you use the contact form, plus anything you choose to write to our arena host in the chat window.
- Information created by using the site. Which pages you opened, which games you started, the outcome of matches you played and the ladder points attached to them.
- Technical information. Browser type, screen size, approximate location derived from your IP address, and the cookie preference you selected. Approximate location is used for eligibility, since paid skill contests are not permitted everywhere.
What we deliberately do not collect
We do not ask for a date of birth beyond the yes-or-no question of whether you are over 18, we do not request identity documents until a first cashout makes them legally necessary, and we do not read the contents of your device. There is no fingerprinting script on this site, no session-recording tool that replays your mouse movements, and no advertising pixel from a social network. Each of those is common on competition sites and each of them collects far more than the job requires.
Why we use it
Each category has a single stated purpose and we do not repurpose data quietly. Contact details are used to answer the message you sent. Match and ladder data is used to seed brackets fairly and to resolve disputed results. Technical information is used to keep the site working across devices and to apply the age and location conditions described in our Terms of Service.
We do not sell personal information, we do not trade it with data brokers, and we do not build advertising profiles from your match history.
The legal basis we rely on
Under the Australian Privacy Principles we collect personal information because it is reasonably necessary for our functions — running competitions, paying out prizes and meeting the record-keeping obligations that come with handling money. Where something is genuinely optional, such as the measurement entries described in our cookie policy, we ask first and treat a refusal as final rather than as an invitation to ask again on the next visit.
Automated checks and human decisions
Anti-cheat systems flag accounts automatically. Patterns such as impossible input timing, identical inputs across supposedly separate accounts, or a sudden jump in performance that does not match a learning curve will raise a flag.
A flag is not a decision. No account is closed, and no balance withheld permanently, on the strength of an automated signal alone — a person reviews the stored replays and the account history before anything happens, and you are told what the review concerned. If you disagree with the outcome you can ask for the basis of the decision and we will explain it. That is deliberately slower than an automatic ruling, and we think the trade is worth it.
Who else sees it
Games on this site are embedded from third-party studios and platforms. When you press Play, the game loads inside a frame served by that provider, and the provider may set its own cookies and receive your IP address as part of delivering the game. We do not control those cookies and we do not receive your gameplay telemetry from them. Their own policies apply inside that frame.
Beyond that, personal information is shared only with the service providers who host this site and process cashout requests, and only to the extent they need it to perform that specific job. We disclose information to a regulator or court where we are legally required to.
Categories of processor we use
- Hosting and content delivery — stores the site files and serves them to your browser.
- Payment and payout processing — receives the minimum identity and account details required to move money to you.
- Identity verification — checks the documents supplied for a first cashout, then returns a pass or fail rather than leaving a copy with us.
- Email delivery — carries our reply to your contact-form message.
Each of those providers is bound by contract to use the information only for the task we engaged them for. We do not add analytics vendors, chat vendors or advertising vendors to this list without updating this page first.
Where your information is stored
Our primary hosting and backups sit in Australia. Some of the processors described above operate infrastructure overseas, which means a limited set of personal information may be stored or accessed outside Australia in the course of hosting, payment processing or email delivery.
Where that happens we require the recipient to handle the information under protections at least equivalent to the Australian Privacy Principles. That obligation does not evaporate because a server sits in another country, and you can ask us which categories of information are handled where.
How long we keep it
Retention is set by purpose, not by convenience. When a purpose ends, the data goes.
- Contact form messages — twelve months from the date of the last reply, then deleted.
- Chat transcripts — held for the browser session only; they are not stored on our servers afterwards.
- Match and ladder records — twenty-four months, because a contested result can be raised long after the match itself.
- Records connected to a completed cashout — seven years, which is the retention period Australian financial record-keeping rules require of us.
- Identity verification results — the pass or fail outcome and its date; the documents themselves are not retained by us.
Deleting an account
Closing your account removes your profile, your contact details and your ladder standing. It does not remove the financial records attached to a completed cashout, because we are not permitted to delete those before the seven-year period expires. We will tell you plainly which records survive a deletion request and why, rather than confirming a deletion that has not fully happened.
Keeping it safe
Traffic to and from this site is encrypted in transit. Access to stored personal information is limited to the staff who need it for support, dispute review or payment processing, and that access is logged. Administrative accounts require a second factor, and credentials are rotated when anybody with access leaves.
No system is perfect, and we will not claim otherwise — if a breach ever creates a likely risk of serious harm to you, we will notify you and the Office of the Australian Information Commissioner in line with the Notifiable Data Breaches scheme. Our notice will say what happened, what information was involved and what you can do about it, in that order.
Your rights
Under the Australian Privacy Principles you can ask us to do the following, and we will respond within thirty days at the latest.
- Confirm whether we hold personal information about you, and give you a copy of it.
- Correct anything that is inaccurate, out of date or incomplete.
- Delete information we no longer have a lawful reason to keep.
- Explain how a particular piece of information was used, and who it went to.
- Complain about how we handled your information — first to us, and then to the Office of the Australian Information Commissioner if our answer does not satisfy you.
Making a request go smoothly
We do not charge for access requests. Tell us which account the request concerns and roughly what period you are asking about — a request for everything takes longer to assemble than a request for a specific month of match history, and we would rather send you something useful quickly. If we cannot identify you from the details supplied we will ask for more before releasing anything, which is a protection for you rather than an obstacle.
Marketing
We do not run marketing email campaigns. You will hear from us when you write to us, when a bracket you entered produces a result that needs explaining, when a cashout needs an action from you, or when this policy changes materially. There is no promotional list to unsubscribe from because there is no promotional list.
If that ever changes, it will be opt-in, the opt-in will be a separate deliberate action rather than a pre-ticked box, and the unsubscribe link will work on the first click.
Children
This site is not for anyone under 18. We do not knowingly collect personal information from minors, and an account found to belong to someone under 18 is closed with any balance returned to its source. If you believe a child has given us personal information, contact us and we will remove it.
Changes to this policy
When this policy changes we update the date below and, for a change that materially affects your rights, we place a notice on the home page for at least thirty days before it takes effect. Continuing to use the site after that period means the updated policy applies to you.
We keep the previous version on file. If you want to know exactly what changed and when, ask and we will tell you rather than pointing at a diff you cannot see.
Contact
Questions about this policy, or a request under any of the rights listed above, go through the contact form. Write the word privacy in the name field if you would like it routed straight to the person who handles data requests.
If you are unhappy with our response, the Office of the Australian Information Commissioner accepts complaints about the handling of personal information and can be reached independently of us. We would rather you came to us first, but we are not going to pretend that route does not exist.
Last updated: 11 August 2026.