PRIVACY POLICY

Last updated: March 18, 2026

This Privacy Notice for Connor Mills (doing business as Virtualized) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including the Balatro Multiplayer mod, game server, text chat functionality, and related services hosted at balatromp.com (and its subdomains).

Scope: The Balatro Multiplayer mod and server software are open-source software licensed under the GNU General Public License v3.0 (GPLv3). This Privacy Notice applies exclusively to the instance of the service hosted and operated by us at balatromp.com (and its subdomains). Third parties may operate their own instances of the server software; such instances are independent services not governed by this Privacy Notice.

Language: This Privacy Notice is provided in English and may be made available in other languages for your convenience. The English language version is the only legally binding version. In the event of any conflict or inconsistency between the English version and any translation, the English version shall prevail.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at bmp@virtualized.dev.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

What personal information do we process? When you use our Services, we process a salted hash of your Steam ID (used as your account identifier), your chosen display name, and if you enable text chat, your date of birth (used only to verify age, not stored after verification) and the content of chat messages you send. Learn more about personal information we collect.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We receive only your Steam ID from Valve Corporation during authentication. We do not collect any other information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, for content moderation and community safety, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We share chat message content with our content moderation provider (Paxmod) for automated filtering. We do not sell your personal information. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information, including salted hashing of identifiers and TLS encryption for data in transit. However, no electronic transmission over the internet can be guaranteed to be 100% secure. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information, including the right to request deletion of your account and data. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by visiting the account management page at balatromp.com, or by contacting us at bmp@virtualized.dev. We will consider and act upon any request in accordance with applicable data protection laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us, and a minimal set of data necessary to operate the service.

We collect personal information that you voluntarily provide to us when you register on the Services, enable text chat, participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the features you use. The personal information we collect may include the following:

• Account identifier: A salted cryptographic hash of your Steam ID, generated on our server during authentication. This hash serves as your unique account identifier in our system. We do not store your raw Steam ID on our servers.
• Display name / username: The display name you choose or that is derived from your Steam profile.
• Discord user ID (optional): If you choose to link your Discord account, we store your Discord user ID to associate your game account with your Discord identity in our Discord server. We also generate and store a salted cryptographic hash of your Discord user ID for moderation purposes. You can unlink your Discord account at any time.
• Date of birth: Collected only during the text chat activation process to verify you meet the minimum age requirement (16 years). Your date of birth is used for this one-time verification and is not stored after the check is completed. Only the result (eligible or ineligible) is recorded.
• Chat messages: If you enable text chat, the content of messages you send within multiplayer lobbies is transmitted through and temporarily stored on our servers.
• Moderation data: If your messages are flagged by our automated moderation system or reported by other users, the flagged message content, timestamps, moderation verdicts, and associated account identifier are stored as moderation records.
• Hashed IP address: When you connect to the Services, your public IP address is immediately processed into a salted cryptographic hash using the same method as your account identifier. We store only this non-reversible hash. Your plaintext IP address is never stored on our servers. This hashed IP is used for moderation purposes, including detecting ban evasion and preventing abuse.

Sensitive Information. We do not process sensitive information.

Steam Authentication Data. We use Steam authentication to create and manage your account. During this process, we receive your Steam ID from Valve Corporation. We immediately hash this identifier with a secret server-side salt and use the resulting hash as your account identifier. We do not access your Steam friends list, game library, purchase history, email address, or any other Steam account data. See Section 5 for more details.

Local Storage. The mod stores your Steam ID locally on your device for authentication purposes (such as enabling auto-login). This data is stored on your device, not on our servers, and is under your control. You can delete it at any time by removing the mod's local configuration files.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, for content moderation and community safety, for security and fraud prevention, and to comply with law. We may also process your information only with your prior explicit consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We process your Steam ID (by hashing it) to create and maintain your account.
• To provide text chat functionality. We process chat message content to deliver messages to other lobby participants.
• To moderate content and enforce community standards. We process chat messages through automated content moderation systems (Paxmod) to detect and filter prohibited content including hate speech, harassment, threats, and illegal material. We process moderation records (flagged messages, reports, ban history) to enforce our Terms of Service and protect users.
• To verify age eligibility. We process your date of birth (without storing it) to verify that you meet the minimum age requirement for the text chat feature.
• To enforce bans and prevent circumvention. We retain non-reversible account identifiers (hashed Steam ID and, if linked, hashed Discord user ID) and a hashed version of your IP address, along with associated moderation status, to prevent banned users from creating new accounts or relinking to circumvent sanctions.
• To protect our Services. We process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To comply with legal obligations. We process and retain information as necessary to comply with applicable laws, including reporting obligations related to child sexual abuse material (CSAM) under 18 U.S.C. § 2258A.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual's vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Moderate user-generated content, enforce community safety standards, and maintain ban records to protect users from harmful behavior
  • Diagnose problems and/or prevent fraudulent activities
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, report child sexual abuse material to NCMEC, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share chat message content with our content moderation provider and may share information in specific situations described below.

We may need to share your personal information in the following situations:

• Content Moderation (Paxmod). All chat messages are transmitted to Paxmod, a third-party content moderation service, for automated filtering before delivery to other users. Paxmod processes the text content of your messages to detect prohibited content. Paxmod acts as a data processor on our behalf and processes data solely for the purpose of content moderation. For more information about Paxmod's data practices, please refer to their privacy policy at paxmod.com.
• Law Enforcement and Legal Obligations. We may share information with law enforcement authorities, regulatory bodies, or NCMEC (National Center for Missing & Exploited Children) when required by law or when we have a good-faith belief that disclosure is necessary to comply with a legal obligation, protect your safety or the safety of others, or investigate fraud or respond to a government request.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to users and other consumers.

5. HOW DO WE HANDLE YOUR STEAM AUTHENTICATION AND DISCORD LINKING?

In Short: We use Steam to verify your identity and immediately hash your Steam ID. You may optionally link a Discord account, which stores your Discord user ID and a hashed version of it.

Steam Authentication

Our Services use Steam authentication (provided by Valve Corporation) to create and manage your account. When you log in, we receive your Steam ID from Valve. We immediately process this ID by generating a salted cryptographic hash (SHA-256 with a secret server-side salt), and this hash becomes your account identifier in our system.

We do not access, collect, or store:

• Your raw Steam ID (it is hashed immediately upon receipt and the original is not retained)
• Your Steam friends list
• Your Steam game library or purchase history
• Your email address associated with Steam
• Any other Steam account data beyond the ID needed for authentication

Your relationship with Valve Corporation and your use of Steam is governed solely by your agreement(s) with Valve. We recommend that you review Valve's privacy policy to understand how they collect, use, and share your personal information.

Discord Account Linking (Optional)

You may optionally link your Discord account to your game account. Discord linking is not used for authentication or login. It is used solely to associate your game account with your Discord identity in our Discord server (for example, for role assignment or identity verification).

When you link your Discord account, we collect and store:

• Your Discord user ID: Stored alongside your game account while your account is active. Deleted when you unlink your Discord account or delete your game account.
• A salted hash of your Discord user ID: Generated using the same salting and hashing process as your Steam ID. This hash is retained after account deletion for moderation and ban enforcement purposes (see Section 8).

We do not access, collect, or store your Discord friends list, server memberships, message history, email address, or any other Discord account data beyond your user ID. Linking is voluntary and can be removed at any time through your account settings.

6. TEXT CHAT DATA AND CONTENT MODERATION

In Short: Chat messages are processed by automated moderation systems, stored temporarily, and may be retained longer if flagged or reported.

If you opt in to the text chat feature (which requires verifying that you are at least 16 years of age), the following data processing occurs:

Message processing: Every chat message you send is transmitted to our server and routed through Paxmod's content moderation API before being delivered to other lobby participants. Paxmod analyzes the text content for prohibited material and returns a moderation verdict. Messages that fail moderation may be blocked, censored, or flagged for review.

What is stored per message:

• Your hashed account identifier (sender)
• Lobby identifier
• Message content (post-moderation)
• Timestamp
• Paxmod moderation verdict/scores
• Report flag (if reported by another user)

What is NOT stored:

• Your raw Steam ID
• Your plaintext IP address (your IP is immediately hashed upon connection; only the non-reversible hash is stored; see Section 1 for details)
• Your date of birth (used only for the one-time age check, then discarded)

User reports: When a user reports another user for abusive behavior, we log the reported message content, the reporter's account identifier, the reported user's account identifier, and a timestamp. False or malicious reports may result in action against the reporting user's account.

CSAM reporting: We are registered with the National Center for Missing & Exploited Children (NCMEC) CyberTipline. If we become aware of any content that constitutes or appears to constitute child sexual abuse material (CSAM) or child exploitation, we will report it to NCMEC and/or relevant law enforcement authorities and preserve all related evidence for a minimum of one year as required by 18 U.S.C. § 2258A (as amended by the REPORT Act).

No expectation of privacy: Chat messages sent through the Services are subject to automated filtering and, where necessary, human review for moderation purposes. You should not expect privacy in the content of messages sent through the Services.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. The specific retention periods are:

Data Type	Retention Period	Notes
Account data (hashed ID, display name, preferences)	Duration of account	Deleted upon account deletion request, except as noted in Section 8
Unflagged chat messages	30 days	Automatically and permanently deleted after 30 days
Flagged/reported chat messages	Up to 12 months	Retained for moderation follow-up and legal compliance
CSAM-related evidence	Minimum 1 year	Required by US federal law (18 U.S.C. § 2258A)
Moderation action records (bans, warnings)	1 to 3 years	Retained for community safety and defense of legal claims
Anonymized ban records (hashed Steam ID, hashed Discord ID if linked, hashed IP address, + ban flag)	Indefinite	Non-reversible identifiers retained to enforce bans; see Section 8

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. ACCOUNT DELETION AND DATA RETENTION

In Short: You can delete your account at any time. Most data is erased, but certain moderation-related records are retained in pseudonymized form for safety and legal purposes.

You may request deletion of your account at any time through the account management interface or by contacting us at bmp@virtualized.dev. Upon receiving a valid deletion request, we will process the deletion within 30 days.

What is deleted:

• Your display name and profile information
• Your Discord user ID (if linked)
• All unflagged chat messages
• Any other personal data associated with your account

What is retained (in pseudonymized form):

• Non-reversible account identifiers and moderation status: Your salted hashed Steam account identifier, a salted hash of your IP address, and, if you linked a Discord account, a salted hash of your Discord user ID, along with any associated ban or moderation status are retained to enforce bans and prevent banned users from creating new accounts, relinking, or reconnecting from the same network to circumvent sanctions. These identifiers cannot be used to identify you or link back to your Steam profile, Discord profile, or IP address without access to our server-side security key, which is never shared. Legal basis: Legitimate interest in community safety and the defense of legal claims.
• Flagged or reported chat messages: Messages that were flagged by our moderation systems or reported by other users may be retained for up to 12 months. Your username in these records is replaced with a pseudonymous identifier (e.g., "deleted_user_a3f9"). Legal basis: Legitimate interest in community safety; GDPR Article 17(3)(e) (establishment, exercise, or defense of legal claims).
• CSAM-related evidence: If content associated with your account was reported to NCMEC or law enforcement, related evidence is retained for a minimum of one year. Legal basis: GDPR Article 17(3)(b) (compliance with a legal obligation under 18 U.S.C. § 2258A).
• Moderation action logs: Records of warnings, suspensions, and bans are retained in pseudonymized form. Legal basis: Legitimate interest in community safety; GDPR Article 17(3)(e) (establishment, exercise, or defense of legal claims).

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These include:

• Identity and network hashing: Your Steam ID, Discord user ID (if linked), and IP address are all salted and hashed (SHA-256) before storage, preventing direct identification even in the event of a data breach. No plaintext versions of these identifiers are stored on our servers.
• Secret salt protection: The salt used for hashing is stored as a server-side environment variable, never committed to source code or exposed to clients.
• Encryption in transit: All communications between the game client and our servers use encrypted connections.
• Data minimization: We collect only the minimum data necessary to operate the service, with short retention periods for most data types.
• Pseudonymization at deletion: When accounts are deleted, retained moderation records are pseudonymized by replacing personal identifiers with opaque references.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account.
• Contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements. See Section 8 for full details on what is retained after account deletion and the legal bases for retention.

If you have questions or comments about your privacy rights, you may email us at bmp@virtualized.dev.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of certain US states, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name	NO
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history, and financial information	NO
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	NO
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details, job title, work history, and professional qualifications	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about an individual's preferences and characteristics	NO
L. Sensitive personal information		NO

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to users and other consumers.

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

How to Exercise Your Rights

To exercise these rights, you can contact us by visiting the account management page at balatromp.com, by emailing us at bmp@virtualized.dev, or by referring to the contact details at the bottom of this document.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at bmp@virtualized.dev. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (Privacy Act).

This Privacy Notice satisfies the notice requirements defined in both Privacy Acts, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

• offer you the products or services that you want
• respond to or help with your requests
• manage your account with us
• confirm your identity and protect your account

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us using the contact details provided in the section "HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?"

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner and a breach of New Zealand's Privacy Principles to the Office of New Zealand Privacy Commissioner.

Republic of South Africa

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us using the contact details provided in the section "HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?"

If you are unsatisfied with the manner in which we address any complaint with regard to our processing of personal information, you can contact the office of the regulator, the details of which are:

The Information Regulator (South Africa)
General enquiries: enquiries@inforegulator.org.za
Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by presenting the updated terms upon your next login, requiring your acceptance before continuing to use the Services. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at bmp@virtualized.dev or contact us by post at:

Connor Mills
Calgary, Alberta
Canada

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please visit the account management page at balatromp.com or contact us at bmp@virtualized.dev.

---

This Privacy Policy was generated using Termly's Privacy Policy Generator and customized for the Balatro Multiplayer service.