Nexus Esports
Sign in
Back to Nexus Esports

Legal

Privacy Policy

This policy explains what personal data Nexus Esports processes, why we use it, who receives it, and the choices and rights available to you.

Effective and last updated: 3 August 2026

1. Who we are

Nexus Esports operates this gaming venue, tournament, event, matchmaking, wallet, and community platform from 2 Ivan Vazov Street, Plovdiv, Bulgaria. For questions about this policy or the use of your personal data, contact us at nexusesportscenter@gmail.com.

For personal data processed through this platform, Nexus Esports acts as the data controller unless a different role is stated when a service is provided.

2. Data we collect

  • Account and identity data, including your name, email address, profile image, selected username, linked sign-in provider, provider account identifier, and account status.
  • Tournament and gaming data, including registrations, check-ins, teams, brackets, match results, rankings, ratings, wins, losses, and organizer activity.
  • Transaction data, including purchases, wallet movements, payouts, refunds, currency, payment status, and Stripe transaction references. We do not store full payment-card numbers.
  • Support and communications data, including support tickets, messages, email correspondence, and notification preferences.
  • Content and media you submit, such as event or venue information and uploaded images.
  • Technical and security data, including session identifiers, essential cookies, browser or device information, IP address where logged for security, request logs, and audit records.
  • Language preference stored in an essential preference cookie.

3. Google and Discord sign-in data

When you choose Google or Discord sign-in, the provider sends us the basic account information you authorize, normally your provider account identifier, name, email address, profile image, and email-verification status. We use this information only to authenticate you, create or link your Nexus Esports account, secure access, and display your account profile.

We do not request access to Google Drive, Gmail, contacts, calendars, or other unrelated Google services. We do not use Google or Discord account data for advertising, sell it, or allow humans to read it except when necessary for security, support, legal compliance, or with your permission.

4. How and why we use data

  • Provide accounts, authentication, venue services, tournaments, matchmaking, rankings, payments, wallets, support, and platform communications.
  • Perform our contract with you, including processing registrations, purchases, refunds, and requested services.
  • Protect the platform, prevent fraud and abuse, enforce tournament rules, investigate incidents, and maintain audit records based on our legitimate interests and legal obligations.
  • Send operational or transactional messages. We will request consent where applicable before sending optional marketing communications.
  • Meet accounting, tax, consumer-protection, payment, and other legal requirements.
  • Improve reliability and usability using aggregated or appropriately de-identified information.

5. Cookies

We use cookies and similar storage that are necessary for secure sign-in, session continuity, fraud prevention, username onboarding, language preference, and other requested platform functions. Third-party sign-in and payment pages may set their own cookies under their respective policies.

We do not currently use this platform's account data for targeted advertising. If optional analytics or advertising cookies are introduced, we will provide the notices and consent controls required by applicable law before using them.

6. Service providers and sharing

We share data only where needed to operate the service, complete a transaction, comply with law, protect users, or support a business transfer. Our principal service providers may include:

  • Google and Discord for account authentication.
  • MongoDB Atlas and hosting infrastructure providers for application hosting and data storage.
  • Stripe for payment, refund, fraud-prevention, and payout processing.
  • Cloudinary for hosting and delivering uploaded media.
  • Resend and email infrastructure providers for transactional email.
  • Professional advisers, public authorities, or law enforcement where disclosure is legally required or necessary to protect rights and safety.

7. International transfers

Some providers may process data outside Bulgaria or the European Economic Area. Where required, we rely on adequacy decisions, approved contractual safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.

8. Data retention

We keep personal data only for as long as necessary for the purposes described above. Active account data is generally retained while your account remains open. Security and audit records are retained for a limited period appropriate to fraud prevention and dispute handling. Financial and transaction records may be retained for the period required by Bulgarian tax, accounting, payment, and legal rules.

When data is no longer required, we delete or anonymize it unless continued retention is required to establish, exercise, or defend legal claims or comply with law. Backup copies may remain temporarily until they are securely overwritten.

9. Your rights

Subject to the GDPR and other applicable law, you may request access to your data, correction, deletion, restriction, portability, or objection to certain processing. Where processing depends on consent, you may withdraw that consent without affecting earlier lawful processing. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.

To exercise a right or request account deletion, email nexusesportscenter@gmail.com from the address connected to your account. We may need to verify your identity. You can unlink a Google or Discord provider in Account settings when another sign-in method remains linked. You may also revoke provider access from your Google or Discord account settings.

10. Security and children

We use administrative, technical, and organizational safeguards designed to protect personal data. No online service can guarantee absolute security, so you should protect access to your sign-in provider and report suspected unauthorized access promptly.

The platform is not directed to children who cannot lawfully consent to the processing of their data. A parent or guardian should contact us if they believe a child provided personal data without the authorization required by applicable law.

11. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. We will publish the revised version here, update the effective date, and provide additional notice when a material change requires it.