ASCARON ONLINE PRIVACY POLICY
Version for publication on ascaron.online
Last updated: September 14, 2026
This Policy explains what personal data is processed when the websites and game are used, why it is needed, who may receive it, and how users may exercise their rights.
1 Data controller
The personal data controller and service operator is Knuth Capital LLC FZ, Company No. 2531107, registered at Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, UAE. Data requests may be sent to [email protected].
This Policy applies to ascaron.online, ascaron.ru, the game client, game servers, accounts, the store, and support.
2 Categories of data
- registration and account data, including login, email address, account identifier, registration date, password stored in irreversibly transformed form, and language settings
- game data, including characters, nicknames, progress, inventory, crystals, in-game operations, communications, reports, sanctions, and requests
- technical data, including IP address, date and time, device, operating system, client version, browser, language, session identifiers, and security or error logs
- payment data, including transaction number, amount, currency, product, status, shortened payment method details, and information received from a payment provider; the Operator does not receive or store CVC or CVV
- support data, including the request, attachments, and information necessary to confirm ownership of an account or transaction
- consent records, including document version, date, time, IP address, interface source, and cookie choice
3 Sources of data
Data is obtained from the User, automatically from the websites and game client, from game logs, and from banks or payment providers to the extent necessary to confirm a transaction, process a refund, or prevent fraud.
A User who provides another person's data must have a lawful basis to do so and must not disclose information that is unnecessary for the request.
4 Purposes and legal bases
- creating and maintaining the account, providing the game, and fulfilling purchases under the contract
- authentication and prevention of compromise, abuse, and fraudulent transactions under the contract, law, and legitimate interests where permitted
- processing payments, refunds, accounting records, and mandatory legal requirements
- providing support, handling complaints, and protecting the rights of the Operator and users
- fixing errors, measuring performance, and improving the service using necessary data or consent where required
- sending marketing messages only on the basis of separate voluntary consent if marketing is used
Where processing is based on consent, consent may be withdrawn. Withdrawal does not make prior processing unlawful and does not stop processing supported by another lawful basis.
5 Required and optional data
A login, email address, and data technically necessary for security are required to create and maintain an account. Without them, the Operator cannot provide the relevant function.
Optional analytics and advertising cookies remain disabled until consent is given where consent is required. Refusing them does not prevent access to core functions.
6 Recipients and processors
Data may be disclosed only as necessary to hosting and network security providers, email and support providers, payment providers and banks, analytics providers after required consent, professional advisers, auditors, and public authorities acting under a lawful request.
Processors acting for the Operator must follow confidentiality, security, documented instructions, and applicable restrictions. The Operator does not sell personal data.
7 International transfers
Infrastructure and recipients may be located in different countries. Before an international transfer, the Operator identifies a lawful basis and applies the safeguards required by law, including contractual commitments, an assessment of protection, or specific consent where necessary.
If data of Russian Federation citizens is collected online and Russian law applies, initial recording, systematisation, accumulation, storage, updating, and retrieval are carried out using databases located in the Russian Federation, subject to statutory exceptions. Cross-border transfer occurs only after the assessment and notices required by law.
If European Union law applies, a transfer outside the European Economic Area is based on an adequacy decision, standard contractual clauses, another permitted safeguard, or a statutory exception.
8 Retention periods
- account data and game history are retained while the account is active and normally for up to 3 years after closure for dispute resolution and abuse prevention
- payment and accounting records are retained for at least the period required by applicable tax and accounting law; a provisional working period pending legal and accounting confirmation is 5 years
- security logs are normally retained for up to 12 months, while records linked to a confirmed incident may be retained for up to 3 years or until a dispute ends
- support requests are normally retained for up to 3 years after closure
- consent evidence and document versions are retained while the consent remains valid and for up to 5 years afterwards, or longer where necessary for legal protection
Data is deleted or anonymised when its purpose is fulfilled unless law or the protection of rights requires longer retention. Before publication, the Operator must approve a final retention schedule and align actual system settings with it.
9 Cookies and similar technologies
The websites use essential cookies for sessions, security, and saving choices. Functional, analytics, and advertising technologies are used under the Cookie Policy and only after consent where required.
The User can change the choice through the Cookie Settings link. Withdrawing consent must be as easy as giving it.
10 Automated risk analysis
To prevent abuse, risk signals may be assessed automatically, including login and payment frequency, device and region mismatches, repeated transactions, and signs of automation.
The assessment may lead to additional review or temporary suspension of a transaction. The User may contact support and request human review where an automated decision materially affects access or a purchase and applicable law provides that right.
11 User rights
Depending on applicable law, the User may request information about processing, access and a copy, correction, deletion, restriction, objection, portability, withdrawal of consent, and review of an automated decision. The User may also complain to a competent supervisory authority.
Requests may be sent to [email protected]. To protect the account, the Operator may request information sufficient for reasonable identity verification but should not collect excessive documents. A response will be provided within the period required by applicable law.
12 Security
The Operator uses organisational and technical measures appropriate to the risk, including access controls, logging, encryption in transit, secure password storage, backups, system updates, monitoring, and incident response procedures.
Absolute security cannot be guaranteed. If a breach occurs, the Operator documents the incident, limits its effects, and notifies users and authorities where required by law.
13 Data concerning minors
The service is not intended for independent purchases by persons who cannot enter into such transactions without a legal representative's consent. The Operator does not intend knowingly to collect a child's data without required consent.
A parent or legal representative may submit a request concerning a minor's data to [email protected]. After reasonable verification of authority, the Operator will delete the data or take another action required by law.
14 Third party links
The service may link to external resources. Their owners independently determine their data practices. The User should review the external resource's policy before providing data there.
15 Policy changes
The current version is published on both websites with an update date. Material changes are communicated through the website, game, or email. If a change requires fresh consent, it is requested separately before the relevant processing.
16 Contacts
Knuth Capital LLC FZ
Company No. 2531107
Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, UAE