Privacy Policy

1. General and definitions

We are pleased that you have shown interest in our Super Game Network. Data protection is a top priority for the management of h5gameworld. While it is possible to use the Internet pages of h5gameworld without providing any personal data, processing of personal data may be necessary if a user wishes to access specific enterprise services via our website. In such cases, we typically obtain consent from the data subject when processing personal data is necessary and no statutory basis exists for such processing.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, shall always comply with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to h5gameworld. Through this data protection declaration, our enterprise aims to inform the general public about the nature, scope, and purpose of the personal data we collect, use, and process. Additionally, this declaration informs data subjects of the rights they are entitled to under applicable data protection laws.

As the controller, h5gameworld has implemented extensive technical and organizational measures to ensure the utmost protection of personal data processed through this website. However, internet-based data transmissions may inherently have security vulnerabilities, and therefore absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us through alternative means, such as by telephone.

The data protection declaration of h5gameworld is based on the terminology used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). It aims to be clear and understandable for the general public, as well as our customers and business partners. To achieve this clarity, we will first explain the terminology used in our data protection declaration.

In this data protection declaration, we use, inter alia, the following terms:

a) Personal data

Personal Data Definition: Personal data is defined as any information relating to an identified or identifiable natural person. It includes various identifiers such as name, identification number, location data, and factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity. Data Subject (b): A data subject is an identified or identifiable natural person whose personal data is processed by a controller. Processing (c): Processing refers to any operation performed on personal data, whether automated or not, including collection, recording, organization, storage, alteration, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, or destruction. Restriction of Processing (d): Restriction of processing involves marking stored personal data to limit their future processing. Profiling (e): Profiling is automated processing of personal data to evaluate certain personal aspects about a natural person. Pseudonymisation (f): Pseudonymisation is processing personal data in a way that it can no longer be attributed to a specific data subject without additional information. Controller (g): The controller determines the purposes and means of processing personal data, either alone or jointly with others. Processor (h): The processor processes personal data on behalf of the controller. Recipient (i): A recipient receives personal data, whether a third party or not, but excludes public authorities under certain conditions. Third Party (j): A third party is any entity other than the data subject, controller, processor, or those authorized to process personal data under the direct authority of the controller or processor. Consent (k): Consent of the data subject is given freely, specifically, informedly, and unambiguously, indicating agreement to the processing of personal data. Controller's Name and Address (2): This section typically provides details of the controller responsible for data processing under the GDPR and related data protection laws.

h5gameworld

Email: cliff.wang.klp@gmail.com

3. Name and Address of the Data Protection Officer

The Data Protection Officer of the controller is:

cliff wang

Email Contact: The snippet begins with an email contact provided for inquiries related to data protection. Cookies (Section 4): Definition and Purpose: Cookies are described as text files stored in a user's computer via an internet browser. They enable the website to provide more user-friendly services and optimize user experience by recognizing the user's browser. Functionality: Examples of cookie functionality include remembering login credentials and items in a shopping cart. User Control: Users are informed they can prevent cookies from being set through browser settings, though this may impact website functionality. Existing cookies can also be deleted through browser settings. Collection of General Data and Information (Section 5): Data Collected: The website collects general data and information when accessed, such as browser types, IP addresses, referrers, access times, and similar data. This information is stored in server log files. Purpose: This data is used to ensure proper website functionality, optimize content and advertisements, maintain IT systems, and assist law enforcement in case of cyber-attacks. Anonymization: The collected data is analyzed anonymously to enhance data protection and security. Registration on the Website (Section 6): Data Collection: Users can register on the website, providing personal data as per the registration form. This data is collected and stored internally by the controller. IP Address Storage: The IP address used during registration is stored to prevent misuse of services and for potential investigation of offenses. Data Usage: Personal data may be transferred to processors (e.g., parcel services) for internal purposes related to the controller. Data Security: The storage and usage of this data aim to secure the controller and comply with legal obligations. Purpose of Data Registration: Users voluntarily provide personal data during registration to enable the controller (website) to offer specific contents or services that are available only to registered users. Users have the right to update or delete their personal data stored by the controller. Information and Correction (Section 7): Contact Possibility: The website offers quick electronic contact options, including an email address. When a data subject contacts the controller via email or a contact form, the personal data provided voluntarily are automatically stored for the purpose of processing the inquiry or contacting the data subject. No transfer of this data to third parties occurs. Routine Erasure and Blocking of Data (Section 8): Data Storage Duration: Personal data is processed and stored only for as long as necessary to fulfill the purpose for which it was collected. If no longer needed or if required by law, the data is either blocked or erased in accordance with legal requirements. Rights of the Data Subject (Section 9): Confirmation of Processing (a): Data subjects have the right to confirm whether their personal data is being processed by the controller. Access to Personal Data (b): Data subjects have the right to obtain free information about their stored personal data, including details on processing purposes, categories of data, recipients or categories of recipients, storage periods, rights to rectification, erasure, or restriction of processing, rights to lodge complaints, and information on automated decision-making processes. Information on Data Transfer (b): Data subjects also have the right to know if their personal data is transferred to third countries or international organizations, along with information about appropriate safeguards for such transfers. Rectification of Data (c): Data subjects have the right to request the correction of inaccurate or incomplete personal data from the controller.

Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact our Data Protection Officer or another employee of the controller.

d) Right to erasure (Right to be forgotten)

Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• The data subject withdraws consent to which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
• The personal data have been unlawfully processed.
• The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

Erasure of Personal Data (continued): Request for Erasure: If a data subject wishes to request the erasure of their personal data held by the controller (h5gameworld), they can contact the Data Protection Officer or another employee of the controller. Compliance with Erasure Request: The Data Protection Officer or another designated employee will promptly ensure that the request for erasure is fulfilled. Public Disclosure and Erasure (Article 17 GDPR): Informing Other Controllers: If the controller (h5gameworld) has made personal data public and is required to erase it under Article 17(1) of the GDPR, the controller must take reasonable steps, including technical measures, to inform other controllers processing the same data. This notification aims to ensure that links to or copies of the data are also erased, unless such processing is required. Implementation of Measures: The Data Protection Officer or another employee will coordinate these measures on a case-by-case basis. Right of Restriction of Processing (e): Conditions for Restriction: Data subjects have the right to request restriction of processing under certain conditions: If the accuracy of personal data is contested by the data subject. If the processing is unlawful, and the data subject opposes erasure but requests restriction instead. If the controller no longer needs the data for processing purposes, but the data subject requires it for legal claims. If the data subject has objected to processing pending verification of legitimate grounds. Request for Restriction of Processing: Procedure: If any of the above conditions are met and a data subject wishes to request restriction of processing of their personal data held by the h5gameworld, they can contact the Data Protection Officer or another employee of the controller. The responsible officer will arrange for the processing to be restricted accordingly. Right to Data Portability (f): Definition and Scope: Data subjects have the right to receive their personal data, which they provided to a controller, in a structured, commonly used, and machine-readable format. Transfer to Another Controller: They also have the right to transmit this data to another controller without hindrance from the original controller, provided the processing is based on consent or contract and carried out by automated means, unless it's for public interest tasks or official authority. Right to Data Portability (continued): Direct Transmission Between Controllers: Data subjects have the right under Article 20(1) of the GDPR to have their personal data transmitted directly from one controller to another, where technically feasible and without adversely affecting the rights and freedoms of others. Asserting the Right: To exercise this right, the data subject can contact the Data Protection Officer or another designated employee of h5gameworld. Right to Object (g): Grounds for Objection: Data subjects have the right to object to the processing of their personal data based on grounds relating to their particular situation, including profiling. Processing for Direct Marketing: If h5gameworld processes personal data for direct marketing purposes, the data subject can object at any time. This also applies to profiling related to such marketing activities. Scientific or Research Purposes: Data subjects can object to the processing of personal data for scientific or historical research purposes, or statistical purposes unless the processing is necessary for reasons of public interest. Exercising the Right to Object: Data subjects can contact the Data Protection Officer or another employee of h5gameworld to exercise their right to object. Additionally, they can use automated means for objection in the context of using information society services. Automated Individual Decision-Making, including Profiling (h): Protection Against Automated Decisions: Data subjects have the right not to be subject to decisions based solely on automated processing, including profiling, if those decisions significantly affect them. Exceptions: This right does not apply if the decision is necessary for entering into or performing a contract, authorized by law with suitable safeguards, or based on explicit consent. Safeguards: When automated decisions are necessary for a contract or based on explicit consent, h5gameworld will implement measures to safeguard the data subject's rights, including the right to human intervention. Right to Withdraw Consent (i): Withdrawal of Consent: Data subjects have the right to withdraw their consent to the processing of their personal data at any time. Exercising the Right: To withdraw consent, data subjects can contact the Data Protection Officer or another employee of h5gameworld. Data Protection for Applications and Application Procedures (Section 10): This section likely covers information specific to data protection in the context of job applications or similar procedures within h5gameworld. The details would typically include how personal data is collected, processed, and protected during these procedures. Purpose: Google AdSense is integrated into the website for displaying advertisements that are selected based on the content of third-party sites, allowing for interest-based targeting through user profiling. Controller: Alphabet Inc., based in the United States, operates Google AdSense. Data Collection: When a user accesses a page with Google AdSense, a cookie is placed on their device, enabling Alphabet Inc. to analyze website usage, including IP addresses, to track visitor origins and clicks for commission settlements. User Control: Users can prevent cookies from being set by adjusting their browser settings. Existing cookies can also be deleted through browser or software settings. Additional Details: Tracking Pixels: Google AdSense utilizes tracking pixels for analytics, including Google Analytics, which record and analyze user interactions to assess visitor flow and behavior on websites. Data Protection Provisions about the Application and Use of DoubleClick Overview: Components: The website integrates components of DoubleClick by Google, primarily offering online marketing solutions to advertising agencies and publishers. Operator: Google Inc., based in the United States, operates DoubleClick. Analysis and Considerations: Data Transfer: Personal data, including IP addresses, are transferred to Alphabet Inc. in the United States for processing and storage. This transfer is necessary for displaying targeted advertisements and for analyzing user behavior. Legal Framework: Given that Alphabet Inc. is based in the United States, these provisions highlight the importance of ensuring compliance with data protection regulations, particularly regarding international data transfers.

DoubleClick by Google transmits data to the DoubleClick server with each impression, clicks, or other activity. Each of these data transfers triggers a cookie request to the data subject browser. If the browser accepts this request, DoubleClick uses a cookie on the information technology system of the data subject. The definition of cookies is explained above. The purpose of the cookie is the optimization and display of advertising. The cookie is used, inter alia, to display and place user-relevant advertising as well as to create or improve reports on advertising campaigns. Furthermore, the cookie serves to avoid multiple display of the same advertisement.

DoubleClick uses a cookie ID that is required to execute the technical process. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick may also use the Cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplications. It is also possible for DoubleClick to track conversions through the cookie ID. For instance, conversions are captured, when a user has previously been shown a DoubleClick advertising ad, and he or she subsequently makes a purchase on the advertiser website using the same Internet browser.

A cookie from DoubleClick does not contain any personal data. However, a DoubleClick cookie may contain additional campaign IDs. A campaign ID is used to identify campaigns that the user has already been in contact with.

With each call-up to one of the individual pages of this website, which is operated by the controller and on which a DoubleClick component was integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective DoubleClick component to send data for the purpose of online advertising and billing of commissions to Google. During the course of this technical procedure, Google gains knowledge of any data that Google may use to create commission calculations. Google may, inter alia, understand that the data subject has clicked on certain links on our website.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google may be deleted at any time via a web browser or other software programs.

Art. 6(1) Consent (Article 6(1)(a) GDPR): Processing operations based on consent require that the data subject has given clear consent for a specific purpose of processing. This is essential for ensuring that data processing is lawful where consent is the legal basis. Performance of a Contract (Article 6(1)(b) GDPR): When processing is necessary for the performance of a contract to which the data subject is party, such as supplying goods or providing services, the legal basis is under this article. This includes pre-contractual measures like inquiries about products or services. Legal Obligation (Article 6(1)(c) GDPR): If there is a legal obligation under EU or Member State law requiring the processing of personal data (e.g., tax obligations), the processing is based on this article. Vital Interests (Article 6(1)(d) GDPR): Processing may be necessary to protect the vital interests of the data subject or another natural person. This applies in situations where urgent action is needed to protect someone's life or physical integrity. Legitimate Interests (Article 6(1)(f) GDPR): Processing can be based on legitimate interests pursued by the company or a third party, except where such interests are overridden by the fundamental rights and freedoms of the data subject. This basis requires a careful balance between the company's interests and the individual's privacy rights.

14. The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

15. Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

16. Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or may result from contractual provisions (e.g., information necessary to identify the contractual partner). In some cases, it may be necessary to collect and process personal data in order to enter into or fulfill a contract with the data subject. For instance, the data subject may be obligated to provide us with personal data when our company enters into a contract with them. Failure to provide such personal data would result in the inability to conclude the contract with the data subject. Before providing personal data, the data subject should consult our Data Protection Officer. Our Data Protection Officer will clarify whether the provision of personal data is required by law or contract, or if it is necessary for entering into the contract. They will also explain if there is an obligation to provide the personal data and the potential consequences of not providing such data.

Last updated: March, 2023