Privacy Policy
Last updated: 1 October 2026
This Privacy Policy explains how NordPlay Malta Limited ("Nordplay", "we", "us") handles personal data when you visit nordplay.com, contact us, or interact with our company pages on social media.
This policy covers our corporate website only. Each of our gaming brands has its own privacy policy, published on that brand's website, which applies when you play or hold an account there.
1. Who we are
The data controller is:
NordPlay Malta Limited
Company No. C87786
Ewropa Business Centre, Level 3
701 Triq Dun Karm
Birkirkara BKR 9034, Malta
Contact for privacy matters: privacy@nordplay.com
2. What we collect and why
We keep data collection to a minimum. nordplay.com does not use advertising pixels or tracking cookies. We use Vercel Web Analytics, which counts page visits without cookies and without identifying individual visitors.
| What | When | Why | Legal basis |
|---|---|---|---|
| Name, email address, the subject and content of your message | You use the contact form or email us | To read and answer your enquiry | Our legitimate interest in responding to you (Art. 6(1)(f) GDPR), or steps prior to a contract (Art. 6(1)(b)) |
| IP address, browser type, requested page, date and time | You visit nordplay.com | Technical server logs kept by our hosting provider to deliver the site and protect it against abuse | Our legitimate interest in running a secure website (Art. 6(1)(f)) |
| Information you share with us on our social media pages | You message or comment on our Facebook, Instagram or LinkedIn pages | To respond to you | Our legitimate interest in responding to you (Art. 6(1)(f)) |
We do not sell personal data and we do not use it for automated decision-making or profiling.
3. Job applications
Applications made through careers.nordplay.com are handled in our recruitment system, Teamtailor. Their processing is described in the separate data privacy notice on the careers site.
4. Cookies
nordplay.com does not set tracking or advertising cookies. Our hosting provider may use strictly necessary technical cookies or similar storage to deliver the site securely. These do not require consent and are not used to identify you.
5. Meta (Facebook) integration
We operate a Meta app (App ID 1816127389418460) solely to manage our own advertising accounts, catalogues and company pages through Meta's business tools. The app does not offer a login to the public and does not collect personal data from visitors to nordplay.com. If you interact with our pages on Facebook or Instagram, Meta processes that data under its own privacy policy, and we are joint controllers with Meta only for page insights, as described in Meta's Page Insights Controller Addendum.
6. Who we share data with
We share personal data only where needed to provide the website and answer you:
- Hosting: Vercel Inc., which hosts nordplay.com.
- Email and IT providers that we use to receive and answer messages.
- Companies in the Nordplay group, when your enquiry concerns one of our brands.
- Authorities, when the law requires it.
Some providers are located outside the European Economic Area. Where data is transferred outside the EEA, we rely on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Contact enquiries: up to 24 months after our last correspondence, unless a longer period is required for legal reasons.
- Server logs: kept by our hosting provider for a short period, normally no longer than 30 days.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you,
- have inaccurate data corrected,
- have your data deleted,
- restrict or object to our processing,
- receive your data in a portable format.
To use any of these rights, email privacy@nordplay.com. We answer within one month.
9. Data deletion
To ask us to delete data we hold about you, including data connected to our Facebook or Instagram pages or our Meta app, email privacy@nordplay.com with the subject "Data deletion request" and tell us which email address or profile the request concerns. We will confirm when the deletion is complete.
10. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (idpc.org.mt), or with the authority in the EU country where you live.
11. Changes to this policy
We may update this policy. The date at the top shows when it was last changed.