User Rights (LGPD/GDPR/CCPA)

Your Privacy Rights

Cyber Play respects and complies with the main global data protection laws. This page consolidates your rights under 3 regulations:

  • 🇪🇺 GDPR — General Data Protection Regulation (European Union)
  • 🇺🇸 CCPA — California Consumer Privacy Act (California, USA)
  • 🇧🇷 LGPD — General Data Protection Law (Brazil)

📌 General Information

Data Controller: Cyber Play
Tax ID:
Address: Rua Moóca, 230
DPO:[email protected]

🇪🇺 GDPR (European Union)

Legal Basis (Art. 6)

  • Consent (Art. 6(1)(a))
  • Performance of contract (Art. 6(1)(b))
  • Legal obligation (Art. 6(1)(c))
  • Legitimate interests (Art. 6(1)(f))

Data Subject Rights (Arts. 15-22)

  1. Right of access — obtain confirmation and copy of your data
  2. Right to rectification — correct inaccurate data
  3. Right to erasure — “right to be forgotten”
  4. Right to restriction of processing
  5. Right to data portability — receive data in structured format
  6. Right to object to processing based on legitimate interest
  7. Right to withdraw consent at any time
  8. Right not to be subject to automated decision-making, including profiling

How to Exercise

Send request to [email protected]. We respond within 30 days (may be extended to 90 in complex cases, with notification).

Supervisory Authority

If not satisfied with our response, you can complain to your country’s supervisory authority. See list at EDPB.

🇺🇸 CCPA (California)

Your Rights as California Consumer

  • Right to Know — what personal information we collect, use, disclose or sell
  • Right to Delete — request deletion of personal information we collected
  • Right to Opt-Out of Sale — if we sell personal information (we do NOT currently sell personal data)
  • Right to Non-Discrimination — we will not discriminate against you for exercising your rights
  • Right to Correct inaccurate information (CPRA 2023)
  • Right to Limit Use of sensitive personal information (CPRA 2023)

“Do Not Sell or Share My Personal Information”

Cyber Play does not sell personal data in the traditional sense. However, the CCPA definition of “sale” may include some data sharing for advertising purposes. To exercise opt-out, send request to [email protected].

How to Exercise

Email: [email protected]. We respond within 45 days.

🇧🇷 LGPD (Brazil)

Data Subject Rights (Art. 18)

You may request free of charge:

  • Confirmation of processing
  • Access to processed data
  • Correction of incomplete, inaccurate or outdated data
  • Anonymization, blocking or elimination of unnecessary data
  • Data portability
  • Elimination of data processed with consent
  • Information about entities with whom we share data
  • Information about possibility of not providing consent
  • Revocation of consent

How to Exercise

Send request to [email protected]. We respond within 15 business days.

Authority

If not satisfied, complain to ANPD — Brazilian enforcement authority.

📊 Data We Process

For full details on what data we collect and how we use it, see our Privacy Policy.

🔒 Security

We adopt technical and organizational measures to protect your data, including:

  • HTTPS/TLS encryption on all traffic
  • Role-based access control (RBAC)
  • Regular and secure backups
  • Anomaly monitoring
  • Continuous privacy training of the team

📞 Contact Channel

Data Protection Officer (DPO):
Email: [email protected]
Address: Rua Moóca, 230

Last updated: 18/04/2026