Privacy Policy

For the purposes of this Privacy Policy, as established in Art. 5 of the LGPD, the following terms mean:

1.1. Personal Data: Any information relating to an identified or identifiable natural person.

1.2. Sensitive Personal Data: Personal data concerning racial or ethnic origin, religious belief, political opinion, trade union membership, data concerning health or sex life, and genetic or biometric data, when linked to a natural person.

1.3. Data Subject: The natural person to whom the personal data being processed refers — in this case, you, a player and member of the community.

1.4. Controller: The natural or legal person responsible for decisions regarding the processing of personal data. CZSBrasil acts as the controller of the data processed through its platforms.

1.5. Processing: Any operation carried out with personal data, such as collection, storage, use, access, sharing and deletion, among others.

1.6. Consent: A free, informed and unambiguous statement by which the data subject agrees to the processing of their personal data for a specific purpose.

The processing of personal data carried out by CZSBrasil follows the principles set out in Art. 6 of the LGPD:

2.1. Purpose: Your data is collected for legitimate, specific and disclosed purposes, and may not later be processed in a way incompatible with those purposes.

2.2. Suitability: Processing is compatible with the purposes disclosed to the data subject.

2.3. Necessity: We collect only the minimum needed to fulfil the community's purposes, in a proportionate and non-excessive way.

2.4. Free Access: We guarantee easy and free enquiry about the form and duration of the processing of your data.

2.5. Data Quality: We guarantee the accuracy, clarity, relevance and currency of the data collected.

2.6. Transparency: We provide clear, precise and accessible information about the processing carried out.

2.7. Security: We adopt technical and administrative measures to protect data against unauthorised access and accidental or unlawful situations.

2.8. Prevention: We adopt measures to prevent damage arising from the processing of personal data.

2.9. Non-Discrimination: Data will never be processed for unlawful or abusive discriminatory purposes.

2.10. Accountability: We demonstrate the adoption of effective measures proving observance of and compliance with data protection rules.

CZSBrasil may collect the following personal data, depending on how you interact with the community:

3.1. Data you provide directly

• Username (nickname/gamertag);
• Email address;
• Platform identifiers (Steam ID, Epic ID, Discord ID and the like);
• Discord profile information (username, avatar, ID);
• Data provided in sign-up, contact or support forms.

3.2. Data collected automatically

• IP address used to connect to the servers;
• Date and time of access to the servers;
• Gameplay data (in-game progress, items, structures, activity on the servers);
• Server connection and disconnection logs;
• Device and operating system information used to connect.

3.3. Donation-related data

• Identification data provided to the payment platform (name, email, tax ID when required by the platform);
• Record of donations made (amounts, dates and status);
• Donor identification for granting benefits.

3.3.1. Donations made directly on the CZSBrasil website

When a donation is made through the support page on our own website, paid by Pix, CZSBrasil records in its systems:

• The email given at the time of the donation, required by the payment platform to issue the charge;
• The player identifier (Steam ID and/or Epic/EOS ID) already linked to your account, needed to deliver the benefit on the right server;
• The amount, the date, the status of the donation and the coupon code, when there is one;
• The technical charge identifiers generated by the payment platform, used to check whether the payment was in fact approved.

This data exists for a single purpose: to confirm the payment and deliver the benefit automatically, with no manual step.

3.4. Sensitive data

CZSBrasil does not collect sensitive personal data from its members, such as data concerning racial or ethnic origin, religious belief, political opinion, health data, sex life, or genetic or biometric data.

The processing of personal data carried out by CZSBrasil is based on the following legal bases set out in Art. 7 of the LGPD:

4.1. Consent of the data subject (Art. 7, I): When you register on our servers, Discord or platforms and accept this Privacy Policy, you give your consent to the processing of your personal data for the purposes described here.

4.2. Performance of a contract or preliminary procedures (Art. 7, V): To enable your participation on the servers, the processing of donations and the granting of benefits.

4.3. Legitimate interest of the controller (Art. 7, IX): To maintain server security, prevent fraud, fight cheating and harmful conduct, analyse performance and continuously improve the community's services, provided that the fundamental rights and freedoms of the data subject do not prevail.

The personal data collected by CZSBrasil is used for the following purposes:

• Community management: Identifying members, controlling access to the servers and managing accounts.
• Server operation: Maintenance, monitoring and stability of the game servers.
• Security and moderation: Preventing and fighting cheats, hacks, exploits and conduct that breaks the community rules; applying penalties when necessary.
• Donation processing: Recording voluntary contributions and granting the corresponding benefits to donors.
• Communication: Sending notices, updates, announcements and relevant information about the community and the servers.
• Support: Handling requests, questions, complaints and enquiries from members.
• Continuous improvement: Analysing usage and performance metrics of the servers to improve the players' experience.

CZSBrasil may share personal data in the following situations:

6.1. Payment platforms: When you make a donation, your identification and payment data is processed by the third-party platform in use — currently Tebex (external store) and Mercado Pago (Pix payments made directly on the CZSBrasil website). The processing of that data is governed by the privacy policy of the respective platform. CZSBrasil neither receives nor stores the donor's card, bank account or Pix key data.

6.2. Communication platforms: When you use the community Discord, your data is processed under the Discord privacy policy (Discord Inc.).

6.3. Game platforms: When you connect to the servers, your player identification data is processed together with the game platforms (Steam, Epic Games, etc.), under their respective privacy policies.

6.4. Hosting services: Connection and gameplay data is stored on the hosting servers contracted to run the game servers.

6.5. Legal obligation: CZSBrasil may share data when required by law, regulation or by a decision of a competent authority.

6.6. CZSBrasil does not sell, rent or trade its members' personal data to third parties, under any circumstances.

7.1. Storage

Personal data is stored on secure servers, which may be located in Brazil or abroad, always with adequate protection measures as required by the LGPD.

7.2. Retention period

Personal data will be kept for as long as necessary to fulfil the purposes for which it was collected, following these guidelines:

• Account and gameplay data: Kept while the player is an active member of the community and for up to 6 (six) months after inactivity or a deletion request.
• Donation data: Kept for 5 (five) years after the donation, a period aligned with the applicable accounting and tax obligations. After that period, the data is deleted or anonymised.
• Connection logs: Kept for 6 (six) months, as set out in Art. 15 of the Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014).

7.3. Security measures

CZSBrasil adopts technical and administrative measures to protect personal data, including:

• Restricted access control to the data, limited to the administration team
• Use of secure connections (where applicable)
• Protection of passwords and system access credentials
• Monitoring for unauthorised access
• Periodic backups of essential data

7.4. Security incidents

In the event of a security incident that may bring relevant risk or damage to data subjects, CZSBrasil will notify those affected and, where applicable, the Brazilian National Data Protection Authority (ANPD), as set out in Art. 48 of the LGPD.

In accordance with Art. 18 of the LGPD, you, as the data subject, have the right to request from CZSBrasil, at any time:

• Confirmation that your personal data is being processed.
• Access to your personal data processed by the community.
• Correction of incomplete, inaccurate or outdated data.
• Anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in breach of the LGPD.
• Portability of the data to another service or product provider, upon express request, under ANPD regulation.
• Deletion of personal data processed on the basis of your consent, except in the retention cases set out in Art. 16 of the LGPD.
• Information about the public and private entities with which CZSBrasil has shared data.
• Information about the possibility of not giving consent and about the consequences of refusing.
• Withdrawal of consent, at any time, by express statement, under Art. 8, § 5 of the LGPD.

8.10. How to exercise your rights

To exercise any of the rights described above, contact the CZSBrasil administration through the channels listed in the "Contact" section of this Policy. Requests will be handled within up to 15 (fifteen) days, as set out in current legislation.

9.1. What cookies are

Cookies are small text files stored on your device when you visit a website. They allow your browser to be recognised and certain information to be remembered.

9.2. How CZSBrasil uses cookies

The CZSBrasil website may use cookies to:

• Keep your session active and remember browsing preferences;
• Analyse access and performance metrics for the site;
• Ensure the site's features work properly.

9.3. Managing cookies

When you first visit the site, you see a notice where you can accept or decline analytics cookies — Google Analytics only loads after you accept, and declining is as easy as accepting. You can also set your browser to refuse cookies or to alert you when cookies are sent. However, refusing cookies may affect how some features of the site work.

10.1. CZSBrasil does not intentionally collect personal data from children (under 12 years old) without the consent of their parents or legal guardians, as set out in Art. 14 of the LGPD.

10.2. For adolescents (between 12 and 18 years old), data will be processed in the best interest of the minor, under current legislation.

10.3. Should the administration become aware that children's data has been collected without proper consent, it will be deleted as soon as possible.

10.4. Parents or legal guardians who find that their underage children have provided personal data to the community may get in touch to request the deletion of that information.

11.1. Because of the nature of the services used (server hosting, game platforms, Discord, payment platforms), personal data may be transferred to and stored on servers located outside Brazil.

11.2. In those cases, CZSBrasil ensures that processing will be carried out in accordance with Arts. 33 to 36 of the LGPD, guaranteeing an adequate level of protection for personal data.

12.1. CZSBrasil may update this Privacy Policy at any time to reflect changes in data processing practices, in current legislation or in the community's features.

12.2. Changes take effect from the date the updated version is published. Where applicable, members will be notified of significant changes through the community's official channels.

12.3. Continuing to use the community's servers and platforms after changes are published will be taken as acceptance of the new version.

12.4. We recommend that members check this page from time to time.

This Privacy Policy is based on the following legislation:

• Brazilian Federal Constitution of 1988 — Art. 5, X and XII (inviolability of privacy, private life, honour and image; secrecy of correspondence and communications)
• Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD) — Arts. 1 to 18, 33 to 36 and 48 (general provisions, principles, legal bases, rights of the data subject, international transfers and security incidents)
• Brazilian Civil Rights Framework for the Internet (Law No. 12.965/2014) — Arts. 3, 7 and 15 (principles, user rights and retention of access records)
• Brazilian Civil Code (Law No. 10.406/2002) — Arts. 11 to 21 (personality rights)

For questions, requests to exercise your rights, complaints or any matter related to this Privacy Policy and to the processing of your personal data, contact the CZSBrasil administration through our Discord server.

CZSBrasil undertakes to answer all requests related to personal data clearly, fully and within the legal deadline.