Privacy Policy

1. Introduction#

Galaxy Gaming Host LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Our Services: Virtual Private Server (VPS) hosting, game server hosting, control panel software, and related infrastructure services.

Our Location: Galaxy Gaming Host LLC is a Florida Limited Liability Company operating in the United States.

Your Rights: You have rights regarding your personal data. This policy explains what we collect, why we collect it, and your options for controlling your information.

2. Information We Collect#

2.1 Information You Provide Directly#

Account Registration: - Full name - Email address - Billing address - Phone number (optional) - Company name (if applicable)

Payment Information: - Credit card details (processed and stored by our payment processors) - PayPal email - Cryptocurrency wallet addresses (for crypto payments) - Billing history and invoices

Support Communications: - Support tickets and correspondence - Chat logs with support staff - Phone call recordings (with notice) - Uploaded files for troubleshooting

Server Configuration: - Server names and configurations - IP addresses you configure - Software installations you request - Firewall rules and settings

2.2 Information Collected Automatically#

Usage Data: - IP addresses accessing our control panel - Login timestamps and locations - Pages visited within our control panel - Control panel features used - API calls and automation scripts

Server Metrics: - CPU, RAM, disk usage statistics - Bandwidth consumption - Network traffic patterns - Server uptime/downtime logs - Process and resource monitoring

Technical Information: - Browser type and version - Operating system - Device identifiers - Screen resolution - Referral URLs

Cookies and Tracking: - Session cookies (required for functionality) - Authentication tokens - Preference cookies (optional) - Analytics cookies (optional - see Section 8)

2.3 Information from Third Parties#

Payment Processors: - Transaction success/failure notifications - Fraud detection signals - Payment disputes and chargebacks

Billing and Client Management Systems: - Billing cycle information - License validation data - Support ticket sync data

Abuse Reports: - DMCA notices - Spam complaints - Network abuse reports from third parties

3. How We Use Your Information#

3.1 Service Delivery#

• Provisioning and managing your VPS/servers
• Processing payments and generating invoices
• Providing technical support
• Sending service-related notifications
• Managing your account and preferences

3.2 Communication#

• Responding to your inquiries
• Sending billing reminders and receipts
• Notifying you of service disruptions or maintenance
• Sharing important updates about your services
• Marketing communications (with your consent - see Section 3.5)

3.3 Security and Fraud Prevention#

• Detecting and preventing fraudulent transactions
• Identifying and mitigating abuse
• Protecting our infrastructure from attacks
• Investigating Terms of Service violations
• Complying with legal obligations

3.4 Service Improvement#

• Analyzing usage patterns to improve our control panel
• Identifying performance bottlenecks
• Testing new features
• Gathering feedback through surveys (optional)
• Optimizing server allocation and resource management

3.5 Marketing (Opt-In Only)#

• We will NOT send marketing emails unless you explicitly opt-in
• You can opt-out at any time via unsubscribe links
• Transactional emails (invoices, support) cannot be opted out
• We do not sell or rent your information to third parties for marketing

4. Legal Bases for Processing (GDPR)#

For users in the European Economic Area (EEA), UK, or Switzerland:

Contract Performance: Processing necessary to provide services you requested (most of our processing falls here)

Legitimate Interests: - Fraud prevention and security - Network and infrastructure protection - Service improvement and optimization - Direct marketing to existing customers (with easy opt-out)

Legal Compliance: - Responding to law enforcement requests - Complying with tax and financial regulations - Responding to valid DMCA notices

Consent: - Analytics cookies (you can disable) - Marketing communications (opt-in only) - Non-essential data processing

5. Data Sharing and Disclosure#

5.1 We DO NOT Sell Your Data#

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5.2 Service Providers#

We share data with trusted third parties who help us operate:

Infrastructure Providers: - Data center colocation facilities - Network transit providers - DDoS mitigation providers - Content delivery networks

Business Services: - Payment processors - Billing and client management providers - Email service providers - Customer support platforms - Accounting and bookkeeping providers

All service providers: - Are contractually obligated to protect your data - May only use data to provide services to us - Must comply with applicable data protection laws

5.3 Legal Requirements#

We may disclose information when required by law: - In response to valid subpoenas, court orders, or legal process - To protect our rights, property, or safety - To enforce our Terms of Service - To investigate fraud or abuse - To comply with national security or law enforcement requests

5.4 Business Transfers#

If Galaxy Gaming Host LLC is acquired, merged, or sells assets, your information may be transferred to the new entity. We will notify you before your information becomes subject to different privacy practices.

5.5 Abuse Reports#

We may share information with: - Copyright holders (for valid DMCA notices) - Abuse reporting organizations (e.g., Spamhaus, abuse.net) - Other service providers affected by abuse from your services

6. Data Retention#

6.1 Active Accounts#

We retain your data while your account is active and for legitimate business purposes.

6.2 After Account Termination#

Immediate Deletion (within 7 days): - Server data and configurations - Uploaded files and backups - Database contents

Retained for Legal/Business Purposes: - Account and billing information: 7 years (tax compliance) - Support tickets: 3 years - Abuse reports: 3 years - Payment transaction records: 7 years - IP logs for abuse investigations: 90 days

6.3 Backup Retention#

Data may persist in backups for up to 30 days after deletion before being permanently purged.

6.4 Legal Holds#

We may retain data longer if required by legal proceedings, investigations, or audits.

7. Your Data Rights#

7.1 Rights for All Users#

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal obligations)
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing emails

7.2 Additional Rights (GDPR - EEA/UK Users)#

• Right to Object: Object to processing based on legitimate interests
• Restriction: Request restricted processing in certain situations
• Automated Decision-Making: Not be subject to automated decisions with legal effects (we don't do this)
• Withdraw Consent: Withdraw consent where processing is based on consent
• Lodge Complaint: File complaints with your data protection authority

7.3 Additional Rights (CCPA - California Users)#

• Know: Know what personal information we collect, use, and share
• Delete: Request deletion (with exceptions for legal obligations)
• Opt-Out of Sale: Opt-out of "sale" of information (we don't sell data)
• Non-Discrimination: Not be discriminated against for exercising rights

7.4 How to Exercise Rights#

Contact us at: [email protected]

Include: - Your name and account email - Specific right you're exercising - Details of your request

We will respond within 30 days (GDPR) or 45 days (CCPA).

7.5 Verification#

For security, we may require identity verification before fulfilling requests. We may deny requests that are: - Clearly unfounded or excessive - Prohibited by law - Would compromise others' privacy - Require disproportionate technical effort

8. Cookies and Tracking Technologies#

8.1 What We Use#

Essential Cookies (cannot be disabled): - Session management and authentication - CSRF protection tokens - Load balancing - These are required for the control panel to function

Analytics Cookies (optional): - Google Analytics (anonymized IP addresses) - Control panel usage statistics - Performance monitoring

Preference Cookies (optional): - Language preferences - Theme choices - Dashboard customizations

8.2 Third-Party Tracking#

• We use Google Analytics with anonymized IPs
• We do not use advertising cookies
• We do not participate in ad networks

8.3 Your Cookie Choices#

• Essential cookies: Required, cannot be disabled
• Analytics/Preference cookies: Can be disabled in your browser
• Browser "Do Not Track": We respect DNT signals for analytics

8.4 Cookie Management#

Manage cookies through: 1. Your browser settings 2. Our control panel privacy settings 3. Third-party opt-out tools (e.g., Google Analytics opt-out)

9. Data Security#

9.1 Technical Measures#

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, principle of least privilege
• Authentication: Strong password requirements, optional 2FA
• Network Security: Firewalls, intrusion detection, DDoS protection
• Monitoring: 24/7 security monitoring and logging
• Backups: Regular encrypted backups with offsite storage

9.2 Organizational Measures#

• Employee background checks
• Confidentiality agreements
• Security awareness training
• Incident response procedures
• Regular security audits

9.3 Your Responsibilities#

• Keep your password secure and confidential
• Enable two-factor authentication
• Promptly report suspected security breaches
• Ensure your own server security (you control your VPS)
• Keep your contact information current

9.4 No Guarantee#

While we implement industry-standard security, no method is 100% secure. We cannot guarantee absolute security against all threats.

9.5 Data Breach Notification#

In case of a data breach affecting your information: - We will notify you within 72 hours (GDPR requirement) - Notification will include nature of breach, affected data, and remedial actions - We will report to relevant authorities as required by law

10. International Data Transfers#

10.1 Data Location#

• Our servers are located in the United States
• Data may be processed in facilities worldwide
• All data centers meet our security standards

10.2 International Users#

If you access our services from outside the U.S.: - Your data will be transferred to and processed in the U.S. - U.S. data protection laws may differ from your country - By using our services, you consent to this transfer

10.3 EU-U.S. Data Transfers#

For EEA/UK users: - We rely on Standard Contractual Clauses (SCCs) for transfers - We implement supplementary security measures - You have the right to object to international transfers

11. Children's Privacy#

Our services are NOT intended for individuals under 18 years of age.

• We do not knowingly collect data from children under 18
• If we discover we've collected such data, we will delete it immediately
• Parents/guardians should contact us if they believe their child provided information
• Accounts found to belong to minors will be terminated

Contact us at: [email protected] if you have concerns about children's data.

12. California Privacy Rights#

12.1 CCPA Rights Summary#

California residents have specific rights under the California Consumer Privacy Act (CCPA):

Information We Collect (see Section 2) How We Use It (see Section 3) Who We Share With (see Section 5)

12.2 Categories Collected (Last 12 Months)#

• Identifiers (name, email, IP address)
• Commercial information (purchase history)
• Internet activity (browsing behavior on our site)
• Financial information (payment data via processors)
• Professional information (company name, if provided)

12.3 Sale of Personal Information#

We do NOT sell personal information as defined by CCPA.

12.4 California "Shine the Light" Law#

You may request information about our disclosure of personal information to third parties for direct marketing (we don't do this).

12.5 Exercising CCPA Rights#

No discrimination for exercising rights. Contact: [email protected]

13. European Privacy Rights#

13.1 GDPR Compliance#

For EEA, UK, and Swiss users, we comply with GDPR requirements.

Data Controller: Galaxy Gaming Host LLC EU Representative: [If you have significant EU business, appoint an EU representative]

13.2 Supervisory Authority#

You have the right to lodge complaints with your data protection authority: - [List relevant authorities for primary markets] - Find your authority at: https://edpb.europa.eu/about-edpb/board/members_en

14. Changes to This Privacy Policy#

14.1 Updates#

• We may update this policy to reflect changes in our practices or laws
• Material changes will be announced via email and on our website
• We will update the "Last Updated" date at the top
• Continued use after changes constitutes acceptance

14.2 Notification#

• 30 days advance notice for material changes
• Immediate notice for legally required changes
• Previous versions available upon request

15. Third-Party Services#

15.1 Not Covered by This Policy#

This policy does NOT cover: - Software you install on your VPS - Third-party control panels you may use - Game servers or applications you host - External websites linked from our site - Services integrated with your servers

15.2 Your Responsibility#

You are responsible for: - Privacy practices of software you install - Data collected by your game servers - Third-party integrations you enable - Compliance with privacy laws for your users

16. Contact Information#

16.1 Privacy Inquiries#

Email: [email protected] Mail: Galaxy Gaming Host LLC 8203 Ireland Dr, Jacksonville, FL 32244

16.2 Data Protection Officer#

If required by applicable law, we will appoint a Data Protection Officer. Contact details will be listed here when appointed.

16.3 Response Time#

• General inquiries: 5 business days
• Data subject requests: 30 days (GDPR) or 45 days (CCPA)
• Security incidents: Immediate acknowledgment, resolution within 72 hours

17. Your Consent#

By using our services, you consent to this Privacy Policy and our collection, use, and sharing of your information as described.

If you do not agree, please do not use our services.

Copyright © 2026 Galaxy Gaming Host LLC. All rights reserved.