Privacy Policy

This Privacy Policy explains how MysticSea Online collects, uses, stores, and shares information when you use our website, account services, launcher, game server, item mall, support channels, and related services.

MysticSea Online is the operator of the game service and website. Some purchases may be processed by third-party payment providers or merchants of record, and those providers may also act as independent controllers for payment-related information they collect during checkout.

For privacy, account, or support requests, contact us at support@mysticsea.online.

Account information, such as username, email address, password hash, password reset records, registration date, account status, login history, and security settings.

Game information, such as character names, character IDs, inventory and currency balances, IMP balance, VIP status, rankings, online status, gameplay activity, sanctions, moderation records, and server-side logs needed to operate the game.

Technical and security information, such as IP address, approximate location derived from IP address, device and browser information, session cookies, CSRF tokens, Cloudflare Turnstile results, request logs, launcher logs, game connection logs, hardware or device identifiers used for abuse prevention, and anti-cheat or anti-abuse signals.

Purchase information, such as package selected, order reference, payment provider, transaction status, amount, currency, tax or region information supplied by the provider, delivery status, refund or chargeback status, and support notes related to a transaction.

Support information, such as messages you send to us, email address, Discord username if provided, screenshots, logs, receipts, and other details you choose to include in a support request.

We do not intentionally collect or store full card numbers, CVV codes, bank account credentials, wallet private keys, or payment-provider passwords on MysticSea Online servers.

When you pay through a provider such as Paddle, Creem, Xsolla, Lemon Squeezy, PayPal, Binance, a card network, bank, wallet provider, or another available provider, that provider may collect payment details, billing details, tax details, fraud-prevention signals, and identity or compliance information under its own terms and privacy notice.

We receive only the payment information needed to confirm, deliver, support, refund, reconcile, or investigate a purchase, such as provider transaction IDs, order status, package details, amount, currency, account reference, and provider webhook events.

To create and manage accounts, authenticate users, protect sessions, reset passwords, provide support, operate the website, operate the game server, and deliver launcher or patch services.

To process, confirm, queue, deliver, reverse, refund, or investigate IMP, VIP, item mall purchases, payment disputes, chargebacks, and payment-provider notices.

To detect and prevent fraud, cheating, botting, duplicate abuse, payment abuse, account compromise, security incidents, service misuse, and violations of our Terms and Conditions.

To maintain logs, backups, audit records, rankings, public game information, service health checks, and operational reports needed to keep the service stable and secure.

To comply with legal obligations, tax or accounting requirements, sanctions screening, law enforcement requests, payment-provider requirements, and the establishment or defense of legal claims.

Where privacy laws require a legal basis, we process information because it is necessary to provide the service you requested, because we have a legitimate interest in operating and protecting the website and game, because you gave consent, or because processing is required to comply with legal, tax, payment, or security obligations.

You may withdraw consent where processing is based on consent, but this will not affect processing that happened before withdrawal or processing that remains necessary for another lawful reason.

We use essential cookies and similar technologies for login sessions, account security, CSRF protection, fraud prevention, Cloudflare protection, Turnstile verification, checkout continuity, and website operation.

We do not use cookies to collect card details. Payment providers may set their own cookies or similar technologies during checkout, fraud review, tax calculation, wallet login, or receipt handling.

If we add non-essential analytics or advertising cookies in the future, we will update this policy and provide any required notice or controls.

Payment providers and merchants of record, such as Paddle, Creem, Xsolla, Lemon Squeezy, PayPal, Binance, card networks, banks, wallet providers, fraud-prevention services, and tax or compliance providers, when needed for checkout, delivery, refunds, chargebacks, fraud prevention, tax handling, receipts, or payment support.

Infrastructure and service providers, such as website hosting, backend API hosting, database hosting, game server hosting, Cloudflare, email providers, logging providers, backup providers, and security tools, when needed to operate, secure, and maintain the service.

Community and support services, such as Discord or email support tools, when you contact us through those channels or ask us to help with an issue there.

Legal, regulatory, accounting, fraud-prevention, dispute, or law enforcement recipients when disclosure is required by law, needed to protect the service, needed to respond to a valid request, or needed to defend legal rights.

MysticSea Online, its servers, and its service providers may process information in countries other than your own, including countries where our hosting, security, payment, email, support, or infrastructure providers operate.

Where required, we rely on appropriate safeguards, provider commitments, contractual protections, or other lawful transfer mechanisms for international processing.

We keep account, game, support, security, and transaction records for as long as needed to operate the service, maintain account history, provide support, prevent fraud and cheating, resolve disputes, comply with legal or accounting obligations, and enforce our terms.

Payment, refund, chargeback, tax, fraud, audit, and compliance records may be retained longer than ordinary support messages where required by payment providers, tax rules, accounting rules, dispute windows, or legal obligations.

When information is no longer needed, we delete it, anonymize it, or restrict it to archival and security purposes where deletion is not immediately practical.

We use technical and organizational measures intended to protect personal information, including HTTPS, access controls, authentication, security logging, provider-side protections, and separation between public website traffic and private infrastructure where practical.

No internet service can guarantee perfect security. You are responsible for keeping your account password private, using a secure email account, and contacting support quickly if you believe your account or payment information has been compromised.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or a copy of certain personal information we process about you.

Some requests may require identity verification. We may refuse or limit a request where the information is needed for security, fraud prevention, legal compliance, payment disputes, tax or accounting records, server integrity, or enforcement of our terms.

To make a privacy request, contact support@mysticsea.online and include enough information for us to locate your account. Do not send full card numbers, CVV codes, private wallet keys, or identity documents unless specifically requested through a secure provider process.

MysticSea Online is not intended for children under 13. If you are under the age of majority where you live, you must have a parent or legal guardian review and accept our terms and approve any purchase.

If we learn that we collected personal information from a child where parental consent is required and was not provided, we will take appropriate steps to delete or restrict that information.

We may update this Privacy Policy when our website, game systems, payment providers, security tools, support process, or legal requirements change.

The latest version posted on this page applies when you use the service after the update date.