EXILE LAND

Last updated: 04/23/2026

1. Introduction

This Privacy Policy explains how PixelTech Studio CO., LTD processes personal data in connection with EXILE LAND.

2. Controller

PixelTech Studio CO., LTD
Operating jurisdiction: Thailand
Contact: [email protected]
Data Protection Officer (DPO)
Email: [email protected]

3. Scope

This Privacy Policy applies to personal data processed through the EXILE LAND website, forum, community platforms and related communication tools, account features, support flows, in-game service administration, billing administration, moderation, analytics, fraud review, and anti-cheat-related review.

4. Categories of Data We Process

We may process the following categories of personal data:

1. Account data
   such as email address, service identifiers, and Social Club ID;

2. Technical and device data
   such as IP address, browser/client environment data, device-related information, and security metadata;

3. Transaction data
   such as purchase history, billing status, top-up history, subscription status, and chargeback/dispute status;

4. Service usage and gameplay data
   such as gameplay logs, progression-related records, access history, and service event logs;

5. Communications data
   such as support emails, forum messages, reports, appeals, and chat logs under our control;

6. Analytics and cookie-related data
   such as identifiers and events collected through cookies, tags, or similar technologies, including Google Tag implementations where used.

Voice communications are not currently processed as a standard retained data category.

5. Purposes of Processing

We process personal data for purposes including:

• providing and administering the Services;

• authenticating access and managing accounts;

• delivering purchased digital benefits;

• support and complaint handling;

• moderation, enforcement, and appeals;

• fraud prevention, chargeback handling, and anti-cheat review;

• analytics and service improvement;

• legal compliance; and

• establishing, exercising, or defending legal claims.

6. Legal Bases

Where applicable law requires a legal basis, we may rely on:

• performance of a contract;

• compliance with legal obligations;

• legitimate interests, including service security, fraud prevention, moderation, enforcement, operational integrity, and service improvement; and

• consent, where consent is specifically required.

Where consent is used, it may be withdrawn where applicable, without affecting prior lawful processing.

7. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to operate, secure, and improve the Services, as well as to support marketing and analytics activities.

7.1 Types of Technologies We Use

We may use the following categories of cookies and tracking technologies:

a) Strictly Necessary Cookies
These are essential for the operation of the Services, including authentication, session management, security, and fraud prevention.
These cookies do not require consent where permitted by applicable law.

b) Analytics and Performance Cookies
Used to understand how users interact with the Services, measure performance, and improve functionality.

These may include tools such as:

• Google Analytics

• Microsoft Clarity

These tools may collect information such as pages visited, time spent, navigation patterns, and device/browser data.

c) Marketing and Advertising Cookies
Used to deliver relevant advertisements, measure campaign performance, and enable remarketing and audience creation.

These may include:

• Google Ads (including remarketing and conversion tracking)

• Meta Ads (Facebook and Instagram Pixel)

• TikTok Ads

These technologies may track interactions across websites and services to deliver personalized advertising.

d) Tag Management Systems
We use tools such as Google Tag Manager to manage and deploy tracking technologies in an organized and efficient manner.

7.2 Data Collected Through These Technologies

Depending on the tool and configuration, these technologies may collect:

• IP address

• device and browser information

• approximate location (not precise GPS)

• pages visited and interactions

• session behavior (clicks, scrolls, navigation patterns)

• identifiers associated with advertising platforms

7.3 Legal Basis for Cookies

Where required by applicable law (including Brazilian LGPD), we rely on:

• legitimate interest for strictly necessary cookies related to security and operation; and

• consent for analytics and marketing cookies.

Users may withdraw consent at any time, where applicable.

7.4 Consent and Control

Where required by law, users will be presented with a cookie notice or consent mechanism upon first access.

Users may:

• accept or reject non-essential cookies;

• manage preferences through browser settings;

• disable cookies, although some features may not function properly as a result.

7.5 Third-Party Technologies

Some cookies and tracking technologies are provided by third parties.

We do not control how these third parties process data once collected.
We recommend reviewing their respective privacy policies:

• Google

• Meta (Facebook / Instagram)

• TikTok

• Microsoft

7.6 Updates

We may update our use of cookies and tracking technologies as our Services evolve.
This section may be updated accordingly.

8. Sharing of Data

We may use service providers such as hosting providers, cloud infrastructure providers, payment processors, analytics providers, communication tools, and customer support platforms.

We may share personal data with:

• payment processors and aggregators;

• hosting and infrastructure providers;

• analytics providers;

• fraud-prevention and security providers;

• advisers and professional service providers;

• authorities, regulators, or courts where legally required; and

• parties involved in establishing, exercising, or defending legal claims.

We do not sell personal data for money.

9. International Processing

Because the provider is based in Thailand and operations may involve cross-border infrastructure, personal data may be processed in more than one jurisdiction.

Where Brazilian law applies to a transfer of personal data, we seek to handle international transfers in accordance with applicable requirements and safeguards.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, support, enforcement, fraud prevention, legal compliance, and dispute handling.

Until a more detailed internal retention matrix is adopted, we apply the following baseline approach:

• account records: while the account remains active and for 24 month afterward for fraud prevention, disputes, and compliance;

• transaction and billing records: for 24 month necessary for accounting, payment disputes, fraud prevention, and legal compliance;

• gameplay logs and chat logs: for a limited operational period reasonably necessary for moderation, security, and review;

• support and appeal records: for a limited period of approximately 6 months necessary for auditability and dispute handling;

• analytics and cookie-related records: according to tool settings, lawful basis, and operational needs.

Where law requires longer retention, disclosure, or preservation of logs or records, we may retain them accordingly. Brazilian internet-law frameworks may impose obligations around records and disclosure in specific contexts.

11. Account Deletion

Users may request deletion of their account by emailing [email protected].

Account deletion is handled as deletion of the account and associated profile. Once completed:

• access to the account ends;

• associated progress may be deleted;

• associated purchases and digital benefits may become permanently unavailable; and

• restoration may not be possible.

Deletion does not always mean immediate erasure of every related record. We may retain certain data where necessary for legal compliance, fraud prevention, security, payment disputes, enforcement history, or defense of legal claims.

12. Your Rights

Depending on the law applicable to you, you may have rights such as:

• confirmation of processing;

• access to personal data;

• correction of inaccurate, incomplete, or outdated data;

• information about processing and sharing;

• deletion, anonymization, or blocking in certain cases;

• portability where applicable;

• objection or review rights in certain cases; and

• withdrawal of consent where consent is the basis.

If you are in Brazil, you may have rights under the LGPD, and requests should first be directed to us as controller through the contact above. LGPD provides rights including confirmation, access, correction, anonymization/blocking/deletion in certain cases, portability where applicable, and information about sharing and consent.

13. Security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or unlawful processing.

No system can guarantee absolute security.

14. Age Restriction

The Services are intended only for users aged 18 or older.

The Services are not directed to individuals under the age of 18.

We do not knowingly collect or process personal data from individuals under the age of 18.

If we become aware that a user under the age of 18 has provided personal data, we may take steps to suspend or delete the account and associated data without prior notice.

Users are responsible for providing accurate and truthful information regarding their age during registration and use of the Services.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users.

16. Contact

Privacy-related requests and questions:

[email protected]