Privacy Policy

This Privacy Policy explains what personal data dich.gg collects from Users, how it is used, and how it is protected.

1. Data controller

The data controller is dich.gg.

Contact: t.me/dichgg_support

2. Data we collect

2.1. Steam data (collected at login)

• Steam ID — your unique Steam account identifier;
• public account name (username);
• profile avatar URL;
• Steam profile URL.

We do not receive or store your Steam password. Authentication is handled via Steam's official OpenID protocol.

2.2. Technical data

• IP address;
• browser type and version, operating system;
• session data and cookies (see our Cookie Policy);
• Platform pages visited and timestamps.

2.3. Transaction data

• History of Store and Sell transactions;
• Instant Sell transaction history;
• Platform account balance;
• Your Steam Trade URL, if provided in profile settings.

2.4. Payment data

The Platform does not store full card details (card number, CVV/CVC, PIN). All payment data is processed directly by PCI DSS-certified payment gateways. The Platform retains only a tokenised transaction identifier, the last 4 digits of the card, and the payment instrument type — solely for the purposes of customer support and refund processing.

3. Purposes of processing

• User identification and account management.
• Execution of Store, Sell, and Instant Sell transactions.
• Payment processing and refund handling in accordance with Visa and Mastercard requirements.
• Detection and prevention of fraud and unauthorised transactions.
• Compliance with PCI DSS and other applicable payment industry security standards.
• User support.
• Compliance with applicable legal obligations.
• Platform improvement based on aggregated analytics.

4. Sharing data with third parties

We do not sell your personal data. Data may be shared only with:

• Payment processors and acquiring banks — to the extent necessary to process transactions and comply with Visa and Mastercard network requirements.
• Fraud prevention service providers — for transaction verification purposes.
• Competent authorities — when required by applicable law.
• Technical partners and infrastructure providers operating the Platform — limited to what is strictly necessary for their function.
• Third parties in anonymised, aggregated form — for analytical purposes only.

5. Data retention

Personal data is retained for as long as necessary to fulfil the purposes described above. Payment transaction data is retained for a minimum of 5 years in accordance with Visa, Mastercard, and applicable legal requirements. After retention periods expire, data is deleted or anonymised.

6. Your rights

• Access — obtain information about what personal data we process.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data where no lawful basis for continued processing exists.
• Objection — object to processing for specific purposes.
• Restriction — request that processing be limited.
• Portability — receive your data in a machine-readable format.

Requests are processed within 30 calendar days. Contact us at: t.me/dichgg_support

7. Data security

We apply technical and organisational security measures including: HTTPS/TLS encryption for all connections, PCI DSS compliance for payment data handling, role-based access controls based on the principle of least privilege, regular security audits, and continuous monitoring for suspicious activity.

8. Children's data

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If such data is identified, it will be deleted immediately.

9. Changes to this Policy

We reserve the right to update this Policy. The current version is always available on this page. Material changes will be communicated to Users through the Platform.

10. Contact

Privacy and data processing enquiries: t.me/dichgg_support