Privacy notice

Who processes data

MAXIMUS VEGAS L.L.C-FZ, Meydan Free Zone, Dubai, UAE — the portal operator. Data questions: info@maximus.ltd.

What we collect

Account: email, username, display name, password hash (the password itself is never stored), 18+ confirmation, email confirmation date.

Consents: which versions of the terms and notice you accepted and when; a separate marketing preference (off by default).

Profile, at your choice: country, bio, in-game names, avatar colour.

Participation: teams, entries, check-ins, match results and leaderboard stats, evidence (links and images), disputes and decisions, challenges and the quick match queue.

Progression: XP, coins and their history, cosmetic items, pass progress, your referral code and its use.

Membership and payments: applications, invoices, payment attempts and provider confirmations (amount, currency, status, references). Card details are entered only on the payment provider's page and never reach the portal.

Security: sessions (time, browser), failed sign-in attempts in hashed form, one-time confirmation and recovery tokens in hashed form, a log of critical actions. For staff, a second sign-in factor and hashed recovery codes.

Inquiries: name, email, organisation and message text.

Why

To run your account, hold tournaments and matches, verify results, resolve disputes, credit progression, review membership applications and record payments, ensure fair play and security, and answer inquiries.

Marketing emails are sent only with your separate consent; the portal currently sends none.

Cookies and browser storage

Only necessary cookies are used: the sign-in session, a short-lived copy of what you typed into the sign-up form (never the password) in case of an error, and a one-time hand-over of staff recovery codes. So that switching language does not wipe the sign-up form, what you type there (never the password) is kept in the current browser tab's storage and removed when you submit. No advertising or analytics cookies.

Who receives data

The hosting and managed database provider — to run the portal. If an email delivery service is connected — the address and text of service emails. If payments are connected — the payment provider receives your email, the amount and the invoice number. If an external inquiry service is configured — inquiry data. Data is never sold.

The services actually connected are listed below on this page; a new service is named here before it is switched on.

Where data is stored

The portal's servers run at the hosting provider in the region listed below. The database location is determined by its provider.

Visibility

A public profile and results are visible to everyone. You can hide your profile in settings; match results remain in tournament brackets because they are part of other participants' results. Evidence images are visible only to the match participants and staff.

Retention and deletion

Data is kept while the account exists. When you delete your account, personal data is anonymised and sessions end; match records and the decision log are kept without your name to preserve tournament integrity.

Open membership applications are withdrawn, unpaid invoices are voided and any membership ends. If the provider is still processing a payment, the account can be deleted once it settles.

Invoices, payments and accounting records are kept for as long as applicable accounting and tax law requires and remain linked to the anonymised account.

Your rights

You can export your data (JSON), change your marketing preference and delete your account in settings. For other requests, write to info@maximus.ltd.

Services connected right now

This list is generated from the portal's current configuration every time the page is opened.