Privacy Policy

Last Updated: 17 February 2026

This Privacy Policy (the “Policy”) explains how MaxiGames (“we,” “us,” “our”) processes personal data when you use https://maxigames.io (the “Service”) under our Terms of Use.
This Policy is designed to reflect data protection principles that may apply depending on your country/region of residence.

1) Controller (Who is responsible)

Data Controller: MaxiGames
Address: Dubai, United Arab Emirates
Email: [email protected]

2) Categories of personal data we process

We collect personal data directly from you and automatically from your device/browser when you use the Service.

2.1 Account data (if you create an account)

Email address
Username / display name (if applicable)
Account identifiers (e.g., user ID)
Security and login data (e.g., timestamps, IP address, device/browser data)

2.2 Ratings data (when you rate games)

Your rating value (e.g., stars/score)
Game identifier/page
Time/date of rating
Anti-abuse signals needed to keep ratings reliable (e.g., account ID and technical identifiers)

2.3 Usage & device data (collected automatically)

IP address (may be used to infer rough location such as country/city)
Browser type, device type, operating system
Referrer URL, pages viewed, interactions, performance/error logs

2.4 Cookies & similar technologies

We use cookies and similar technologies for security, analytics, and advertising (see Section 11).

2.5 Communications

If you contact us, we process what you provide (e.g., email address, message content) and our replies.

3) Purposes and legal bases

We process personal data only when we have a valid legal basis under applicable law (this may vary by jurisdiction).

Purpose	Example legal basis	Data categories used
Provide the Service (site operation, gameplay access)	Contract / Legitimate interests	Usage & device data, cookies
Create/manage accounts	Contract	Account data, usage & device data
Enable and maintain ratings	Contract / Legitimate interests	Ratings data, account data, technical identifiers
Analytics and Service improvement	Legitimate interests / Consent (where required)	Usage & device data, cookies (analytics)
Advertising and measurement	Legitimate interests / Consent (where required)	Cookies/identifiers, usage data
Security, abuse prevention, fraud detection	Legitimate interests	Account data, ratings data, logs, cookies (security)
Legal compliance and enforcement	Legal obligation / Legitimate interests	Any relevant data (as required)

We do not process payment information for in-game purchases because MaxiGames.io does not currently offer in-game purchases.

We may share personal data with the following categories of recipients, as needed to operate the Service:

4.1 Infrastructure and security providers

Cloudflare (CDN, performance, and security services); Cloudflare may set the __cf_bm cookie when Bot Management/Bot Fight features are used, and it is described as necessary for those bot solutions to function properly.

4.2 Analytics providers

Google Analytics (GA4); Google states GA4 tags use first-party cookies to distinguish unique users and sessions.
Google also describes the _ga cookie as used by Google Analytics to distinguish users and as remaining active for two years.

4.3 Advertising and monetization providers

Google AdSense; Google explains AdSense may use first-party and third-party cookies for advertising purposes and that third-party cookies may be associated with doubleclick.net or Google domains.
Google Ads (ad delivery, measurement, and (where enabled) personalization); Google explains you can use ad settings to manage the Google ads you see and turn off personalized ads.

4.4 Legal and business disclosures

We may disclose personal data to authorities, courts, or regulators when required to comply with law or valid legal process.
If we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction (subject to applicable law).

5) International transfers

We may store/process personal data outside your country/region (including in the United Arab Emirates) depending on where we and our providers operate.
Where GDPR or similar rules apply to transfers, we may rely on mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs).

6) Retention (Storage periods)

We keep personal data only as long as necessary for the purposes in this Policy, unless a longer period is required/permitted by law.

Examples:

Account data: retained while your account is active; then deleted/anonymized after a deletion request, subject to legal/security retention needs.
Ratings data: retained to preserve rating integrity and prevent abuse, unless removed due to enforcement or applicable deletion rights.
Security logs: retained for a limited period to protect the Service and investigate abuse.

To request deletion, contact [email protected].

7) Your rights (may vary by location)

Depending on your location and applicable law, you may have rights such as access, correction, deletion, restriction, objection, and portability.
If GDPR applies, you may have the right to lodge a complaint with a supervisory authority.

To exercise rights, email [email protected] (we may request verification to protect your account).

8) Cookies

Cookies are small text files stored on your device by your browser.

8.1 Cookies we may use

Security / performance (Cloudflare): __cf_bm may be set for Cloudflare bot protection and is described as necessary for those bot solutions.
Analytics (Google Analytics): GA4 uses first-party cookies to distinguish unique users and sessions.
Advertising (Google AdSense / Google Ads): AdSense may use first-party and third-party cookies for advertising, and third-party cookies may be associated with doubleclick.net.

8.2 Cookie controls and opt-outs

You can manage cookies in your browser settings (blocking or deleting cookies may affect site functionality).
Google explains you can use ad settings to manage the Google ads you see and turn off personalized ads; it also points to self-regulatory consumer choice tools and browser cookie controls.
You can use My Ad Center to turn personalized ads on or off on Google.
Google provides a Google Analytics opt-out browser add-on that prevents supported Google Analytics scripts from sharing visit activity with Google Analytics.

9) Children’s privacy

The Service is not intended for children under 13 (or a higher age where required by local law).
If you believe a child provided personal data to us, contact [email protected] and we will take appropriate steps where required.

10) Changes to this Policy

We may update this Policy from time to time by posting an updated version on the Service and changing the “Last Updated” date.
If changes are material, we may provide additional notice where appropriate.

11) Contact

Questions or requests: [email protected]
MaxiGames — Dubai, United Arab Emirates