Privacy Policy

01Introduction and Scope

This Privacy Policy (the "Policy") explains how Monolith Gaming, LLC, an Ohio limited liability company ("Monolith," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information. It also explains the rights and choices available to you.

This Policy applies to the following (together, the "Services"):

• our website at monolithgaming.org and its subdomains and pages (the "Site");
• community spaces we operate or moderate, including our Discord servers, to the extent we control the information collected there;
• our events, tournaments, leagues, livestreams, and esports activities;
• applications, partnership inquiries, and other forms we offer; and
• any other online or offline interaction that links to or references this Policy.

This Policy does not apply to information collected by third parties that operate their own platforms, even when you reach them through our Site. Examples include Discord, YouTube, Twitch, X, Instagram, TikTok, Facebook, and the Spreadshop / Spreadshirt merchandise store. Those companies act as independent businesses (or "controllers") and their own privacy policies govern their practices. This Policy also does not apply to information we handle about our own team members in their capacity as such, which is covered by separate notices where the law requires them.

By using the Services, you acknowledge that you have read and understood this Policy. Where the law requires your consent for a specific activity, we will ask for it separately, and you may withdraw it at any time. Withdrawing consent does not affect processing that happened before you withdrew it. This Policy is incorporated into, and should be read together with, our Terms & Conditions.

02Key Definitions

Capitalized and quoted terms in this Policy have the meanings below. Where a privacy law that applies to you defines a term differently, the legal definition controls for purposes of that law.

03Personal Information We Collect

The personal information we collect depends on how you interact with us. We do not require you to create an account to browse the Site.

Information you give us

• Contact and inquiry information. Your name or gamertag, email address, Discord or social media handle, subject, message, and any attachments you send through our Contact page or by other means.
• Application and recruitment information. When you apply to join our staff, volunteer team, esports rosters, content creator program, or leadership, we may collect your name, handles, age confirmation, time zone, availability, gaming experience, platforms and games played, references, portfolio links, and your answers to application questions.
• Partnership and sponsorship information. Business contact details, organization name, role, and the content of your proposal.
• Event and tournament information. Registration details, team names, in-game names and IDs, platform IDs, match results, and, for prize winners, the information needed to verify eligibility and deliver prizes. That may include your legal name, mailing address, and any tax documentation the law requires.
• Community content. Messages, posts, clips, images, and other content you submit to us or post in spaces we moderate.
• Feedback and survey responses. Any opinions, ratings, or suggestions you choose to provide.

Information collected automatically

• Device and connection data. IP address, browser type and version, operating system, device type, language, referring and exit pages, and date and time stamps.
• Usage data. Pages viewed, links clicked, time spent on pages, scrolling and navigation events, and similar interaction data, collected mainly through analytics tools.
• Approximate location. City, region, or country derived from your IP address. We do not collect precise geolocation.
• Cookie and similar-technology data. See Cookies and Tracking Technologies.
• Security and log data. Server logs, firewall and caching records, and spam-prevention signals used to keep the Site secure and available.

Information from third parties

• Platforms you use to engage with us. When you interact with us on Discord, YouTube, Twitch, or social media, we may receive your public profile information, username, avatar, roles, and the content of your interactions, according to your settings on those platforms.
• Analytics and service providers. Aggregated or pseudonymous reports about Site traffic and performance.
• Game publishers and tournament platforms. Match data, rankings, and eligibility information related to competitions we run or take part in.
• Other community members. Information included in reports of misconduct, referrals, or references you list in an application.

04Categories, Purposes, and Retention at a Glance

This table describes the categories of personal information we have collected in the past 12 months, using the categories listed in the California Consumer Privacy Act, as amended (the "CCPA"). It also shows how we use each category, who receives it, and how long we keep it. The same practices apply to all users, wherever they live.

We have not collected biometric information, education information as defined by FERPA, or commercial purchase records. Store purchases are handled directly by Spreadshirt.

05How We Use Personal Information

We use personal information only for purposes that are reasonably necessary and proportionate to the purposes for which it was collected, or for other purposes compatible with them. These purposes include:

• Providing the Services: operating, hosting, maintaining, and improving the Site and our community spaces.
• Communicating with you: responding to inquiries, applications, and requests, and sending administrative messages, such as notices about changes to our terms or policies.
• Running community activities: managing events, tournaments, leagues, rosters, giveaways, and prizes, including verifying eligibility and announcing winners as permitted by the applicable official rules.
• Recruitment and partnerships: evaluating applications and proposals, and managing volunteer, staff, creator, and partner relationships.
• Safety, moderation, and integrity: enforcing our Terms & Conditions and community standards, investigating reports, preventing cheating, harassment, fraud, spam, and abuse, and protecting the rights, property, and safety of Monolith, our members, and the public.
• Analytics and improvement: understanding how visitors use the Site so we can improve our content, design, performance, and accessibility.
• Security: detecting, investigating, and responding to security incidents and malicious, deceptive, or illegal activity.
• Legal and compliance: complying with applicable laws, regulations, legal process, and tax obligations, and establishing, exercising, or defending legal claims.
• Business operations: keeping records, auditing, and planning, and handling a merger, acquisition, reorganization, or similar transaction.
• With your consent: any other purpose we disclose to you when we collect the information, or that you agree to.

No automated decisions with legal effects. We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

No AI training on your content without permission. We do not sell your personal information or your community content to third parties to train artificial-intelligence models. We do not use your personal information to train such models without your consent.

06GDPR, UK GDPR, and Swiss Data Protection

This section applies if you are in the European Economic Area ("EEA"), the United Kingdom, or Switzerland. It also applies wherever the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), the UK GDPR and Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), or the Swiss Federal Act on Data Protection ("FADP") otherwise applies. It supplements the rest of this Policy and provides the information required by Articles 13 and 14 of the GDPR. If this section conflicts with another part of this Policy, this section controls for those users.

Controller

The controller of your personal information is Monolith Gaming, LLC, an Ohio limited liability company in the United States, reachable through our Contact page. Third-party platforms such as Discord, Google/YouTube, Twitch, social networks, and Spreadshirt are separate, independent controllers for the data they collect.

Legal bases for processing

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may request details of that assessment by contacting us.

Special categories and criminal data

We do not intentionally process special categories of personal data under GDPR Article 9. These include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data used for identification, health data, and data about sex life or sexual orientation. We also do not process personal data relating to criminal convictions and offences under Article 10. If you voluntarily share such information with us, we will process it only where Article 9(2) allows, typically your explicit consent or because you have manifestly made it public, and we will delete it when it is not needed.

Is providing your information required?

You are not legally required to give us personal information. However, some information is necessary to respond to you, process your application, or let you join an event or receive a prize. If you do not provide it, we may be unable to do those things.

Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (GDPR Art. 22).

Your rights under the GDPR, UK GDPR, and FADP

• Access (Art. 15): obtain confirmation of whether we process your data, a copy of it, and information about the processing.
• Rectification (Art. 16): have inaccurate data corrected and incomplete data completed.
• Erasure (Art. 17): have your data deleted where the legal grounds apply (the "right to be forgotten").
• Restriction (Art. 18): have processing limited while accuracy or an objection is checked, or in other cases the law allows.
• Data portability (Art. 20): receive data you provided to us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.
• Objection (Art. 21): object at any time to processing based on legitimate interests, on grounds relating to your particular situation. You have an absolute right to object to direct marketing.
• Withdraw consent (Art. 7(3)): at any time, without affecting the lawfulness of processing before withdrawal.
• Complain (Art. 77): lodge a complaint with a supervisory authority. That may be the authority in the EEA member state where you live or work, or where the alleged infringement occurred (see the list of EEA authorities). In the UK, it is the Information Commissioner's Office. In Switzerland, it is the Federal Data Protection and Information Commissioner. UK residents are encouraged to complain to us first under our complaints process (see How to Submit a Privacy Request). We will acknowledge UK complaints within 30 days and respond without undue delay.

EU and UK representative; Data Protection Officer

Monolith is established only in the United States. Our processing of personal data of people in the EEA and UK is occasional, does not include large-scale processing of special categories or criminal data, and is unlikely to result in a risk to individuals' rights and freedoms. On that basis, we rely on the exemption in GDPR Article 27(2)(a) and UK GDPR Article 27(2)(a) and have not appointed a representative in the EU or UK. For the same reasons, we are not required to appoint a Data Protection Officer under Article 37. If these circumstances change, we will appoint the required representative or officer and list their contact details here. In the meantime, all GDPR and UK GDPR inquiries may be sent to us directly through our Contact page.

Personal data breaches

If a personal data breach occurs, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to individuals (GDPR Art. 33). Where a breach is likely to result in a high risk to you, we will also notify you without undue delay (Art. 34).

07How We Disclose Personal Information

We disclose personal information only as described in this Policy, or as disclosed to you when we collect it:

• Service providers and processors that perform services on our behalf. These include web hosting, content delivery, caching, security, website building, analytics, email and form handling, cloud storage, and prize fulfillment. They are contractually prohibited from using personal information for any purpose other than providing services to us, and from selling or sharing it.
• Platforms you direct us to interact with, such as Discord, YouTube, or Twitch, when you join our community, take part in a livestream, or ask us to connect with you there.
• Event, tournament, and game partners, where needed to run a competition, confirm eligibility, or deliver prizes, as described in the applicable official rules.
• Professional advisers, such as lawyers, accountants, and insurers, under duties of confidentiality.
• Law enforcement, regulators, and other parties, when we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process. We also disclose when necessary to protect the rights, property, or safety of Monolith, our members, or others; to report suspected child exploitation to the National Center for Missing & Exploited Children or law enforcement; or to investigate fraud, security, or violations of our Terms.
• Business transferees, in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets. The recipient will be bound to honor this Policy for previously collected information, or to give you notice and any choices required by law.
• The public, where you choose to post content in public or community spaces, appear on a livestream, or allow us to feature you (for example, on our Team page).
• With your consent or at your direction.

We may disclose aggregated or de-identified information that cannot reasonably identify you for any lawful purpose.

08No Sale, Sharing, or Targeted Advertising

Some regulators have taken the position that certain third-party cookies or analytics tools may amount to a "sale" or "sharing" under specific state laws. We configure our tools to avoid this. Even so, you may use any of the opt-out methods below, and we will honor your choice for all U.S. users:

• enable a Global Privacy Control (GPC) or other recognized universal opt-out signal in your browser. We treat it as a valid request to opt out of sale, sharing, and targeted advertising for that browser or device, and, where you are known to us, for your associated information; or
• submit an opt-out request through our Contact page, as described in How to Submit a Privacy Request.

If we ever change these practices, we will update this Policy before doing so, give any notice and opt-out choices required by law, and obtain consent where the law requires it.

09Cookies and Tracking Technologies

We and our service providers use cookies, local storage, pixels, scripts, and similar technologies ("Cookies") on the Site. We use the following types:

No session replay or keystroke recording. We do not use session-replay, keystroke-logging, or chat-interception tools on the Site. We do not intercept the contents of your communications in transit. We do not use advertising pixels (such as the Meta Pixel or TikTok Pixel) on the Site. If we ever plan to use any of these technologies, we will update this Policy first and obtain any consent the law requires.

Do Not Track. Browsers' "Do Not Track" signals have no common industry standard, so we do not respond to them in a uniform way. We do honor Global Privacy Control signals as described above.

Where consent is required. For visitors in jurisdictions that require prior consent for non-essential Cookies, such as the EEA and UK, we ask for consent before setting them, through a consent banner or equivalent mechanism.

10Embedded Content, Social Media, and Discord

Pages on our Site may include embedded videos, livestreams, social posts, widgets, and links from third parties such as YouTube, Twitch, Discord, X, Instagram, TikTok, and Facebook. When you view or interact with embedded content, the provider may collect information about you, set its own Cookies, and link your activity to an account you hold with it. This happens as if you visited the provider's own site, and is governed by that provider's privacy policy.

• Google / YouTube Privacy Policy
• Twitch Privacy Notice
• Discord Privacy Policy

Video viewing. We do not knowingly disclose information that identifies a person as having requested or obtained specific video materials to any third party for advertising or marketing purposes. Embedded players are operated by their providers under their own terms.

Discord. When you join a Monolith Discord server, Discord operates the platform and controls your account data. As server administrators and moderators, we can see your username, display name, avatar, roles, join date, and the messages and media you post in our server. We may use moderation and logging bots to enforce our rules, keep records of moderation actions, and protect the community. We keep moderation records as long as reasonably needed for safety and enforcement.

11Merchandise Store and Payments

Our official merchandise store is hosted by Spreadshop / Spreadshirt, which may be embedded on or linked from our Site. When you browse, add items to a cart, or buy, Spreadshirt collects and processes your order, payment, shipping, and account information as an independent business under its own privacy policy and terms, which are linked from the store. Monolith does not receive or store your payment card information. We may receive limited, aggregated sales reports, such as which products sell, that do not identify you.

The Site does not process payments or donations directly. If we offer any paid feature, ticketing, or contribution option in the future, it will be handled by a third-party payment processor under its own privacy policy, and we will update this Policy as needed.

12Events, Livestreams, Photos, and Likeness

Many Monolith activities are recorded, streamed, or photographed. These include tournaments, community game nights, voice-chat events, and in-person meetups. If you take part in a recorded or livestreamed activity, your username, voice, image, gameplay, and chat messages may be captured and broadcast. Recorded activities are announced in advance or identified in the event details, and we try to remind participants when recording begins.

• If you do not want to be recorded, please do not take part in the recorded portion of the activity, or tell a moderator beforehand so we can try to accommodate you.
• We feature names, handles, and headshots of team members and leaders (for example, on our Team page) only with their permission. You may ask us to remove your photo or profile at any time.
• Requests to remove recordings that have already been published will be considered in good faith. However, we cannot always edit archived broadcasts or remove copies made by third parties.
• Where state law requires written consent to use your name, image, or likeness for advertising or commercial purposes, we will obtain it.

13Communications

We send emails to respond to your inquiries and applications, and to send administrative or transactional messages. If we ever send newsletters or promotional emails, we will do so in compliance with the CAN-SPAM Act and other applicable law. Each promotional email will include a working unsubscribe link, and we will process opt-outs promptly. You cannot opt out of administrative messages about your requests or legally required notices.

We do not send marketing text messages or make automated or prerecorded marketing calls. If we ever do, we will first get your prior express written consent as required by the Telephone Consumer Protection Act and applicable state law.

14Age Requirement and Children's Privacy

The Site, our community spaces, and our Services are intended only for adults 18 years of age or older. They are not directed to children under 13. We do not knowingly collect, use, sell, or share personal information from anyone under 18.

If we learn that we have collected personal information from someone under 18, we will delete it as quickly as reasonably possible and may remove that person from our community spaces. We will handle information about any child under 13 in accordance with the Children's Online Privacy Protection Act ("COPPA"). If you are a parent or guardian and believe your child has given us personal information, please contact us through our Contact page so we can delete it.

If you were under 18 when you posted content in a space we control, you may ask us to remove that content, consistent with California Business and Professions Code § 22581 and similar laws. Removal from our Services may not ensure complete removal if the content was copied or reposted by others.

15Data Security and Breach Response

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information we hold. These include encrypted (HTTPS) connections, access controls and least-privilege permissions for staff, multi-factor authentication on administrative accounts where available, security and firewall tools, regular software updates, and vendor contracts that require appropriate safeguards.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your own accounts on third-party platforms secure. If we learn of a security breach involving your personal information, we will investigate. Where required, we will notify you and the appropriate regulators without unreasonable delay, in accordance with the data breach notification laws of every applicable U.S. state and other jurisdictions.

16Data Retention

We keep personal information only as long as reasonably necessary for the purposes described in this Policy. That includes satisfying legal, tax, accounting, and reporting obligations, resolving disputes, enforcing our agreements, and maintaining safety and moderation records. The retention periods for each category are listed in Categories, Purposes, and Retention at a Glance.

When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, and our legal obligations. When personal information is no longer needed, we securely delete it or de-identify it. We may keep information longer when required by law, legal hold, or an ongoing investigation.

17Your Privacy Rights

Many U.S. states have comprehensive consumer privacy laws. These include California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Other countries' laws, such as the GDPR, also give individuals rights over their personal information.

• Right to know and access. Confirm whether we process your personal information. Learn the categories and specific pieces we hold, the sources, the purposes, and the categories of recipients. Obtain a copy.
• Right to correct. Ask us to correct inaccurate personal information.
• Right to delete. Ask us to delete personal information we collected from or about you.
• Right to data portability. Receive your personal information in a portable, readily usable format, where technically feasible.
• Right to opt out. Opt out of the sale or sharing of personal information, targeted advertising, and profiling with legal or similarly significant effects. We do not engage in these activities, but you may still submit an opt-out request or use GPC.
• Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right. If you believe we hold any, you may ask us to limit or delete it.
• Right to a list of third parties. Where state law provides it (for example, in Oregon, Delaware, Maryland, and Minnesota), get a list of the specific third parties, or categories of third parties, to which we have disclosed personal information.
• Right to question profiling. Where Minnesota or similar law applies, question the result of profiling, learn the reasons, and review the data used. We do not perform such profiling.
• Right to withdraw consent. Withdraw any consent you have given, at any time.
• Right to appeal. Appeal our decision on your request, as described in the next section.
• Right to non-discrimination and non-retaliation. We will not deny you services, charge you different prices, provide a different quality of service, or retaliate against you, including as an employee, applicant, or volunteer, for exercising your rights.

EEA, UK, and Swiss residents have additional rights, including restriction and objection, described in GDPR, UK GDPR, and Swiss Data Protection. Residents of other countries should see Other International Privacy Laws.

Exceptions. We may decline or limit a request where the law permits or requires it. Examples: we cannot verify your identity; fulfilling the request would infringe on the rights of others; the information is needed to complete a transaction, detect security incidents, protect against fraud or illegal activity, comply with a legal obligation, or establish, exercise, or defend legal claims; or the request is manifestly unfounded or excessive. If we decline, we will explain why, unless the law prohibits us from doing so.

18How to Submit a Privacy Request

To exercise any of your rights, submit a request through our Contact page. Select the privacy topic if one is offered, or include the words "Privacy Request" in your message. Tell us which right you want to exercise, your name, the email address and any community handles you have used with us, and your state or country of residence.

Verification

To protect your information, we will verify your identity before fulfilling requests to know, access, correct, delete, or port information. We do this by matching information you give us against information we already hold, and we may ask for more information if needed. We will use verification information only for verification. We do not require verification for opt-out requests, although we may decline an opt-out request that we reasonably believe is fraudulent.

Authorized agents

You may use an authorized agent to submit a request for you. We may ask the agent to provide signed written permission from you, or a valid power of attorney. We may also ask you to verify your identity directly, unless the law prohibits this. Parents or legal guardians may submit requests for a minor.

Response timing

We will confirm receipt of your request within 10 business days where the law requires it, and respond within 45 calendar days. If reasonably necessary, we may extend this by up to another 45 days, and we will tell you why. For EEA, UK, and Swiss residents, we respond within one month, which may be extended by up to two further months where permitted. We will not charge a fee to process your request unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or decline, as the law allows.

Appeals

If we decline to act on your request, in whole or in part, you may appeal by replying to our decision or by submitting a new message through our Contact page titled "Privacy Appeal". We will respond to your appeal in writing within the time required by your state's law, generally within 45 to 60 days, and explain the reasons for our decision. If you are not satisfied with the outcome of your appeal, you may contact your state's Attorney General or the applicable regulator.

19Additional Notice for California Residents

This section supplements the rest of this Policy and serves as our Notice at Collection and Privacy Policy under the CCPA.

• Notice at collection. The categories of personal information we collect, the purposes for which we use them, whether they are sold or shared, and how long we keep them are described in Categories, Purposes, and Retention at a Glance and in How We Use Personal Information.
• Sale and sharing. We do not sell or share personal information and have not done so in the preceding 12 months.
• Sensitive personal information. We do not collect or use sensitive personal information to infer characteristics about you, or for any purpose that would require us to offer a right to limit.
• Financial incentives. We do not offer financial incentives or price or service differences in exchange for personal information.
• Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.
• Do Not Track disclosure (Cal. Bus. & Prof. Code § 22575). See Cookies and Tracking Technologies.
• Accessible format. Consumers with disabilities can get this Policy in an alternative format. See Accessibility.

20Additional State-Specific Disclosures

• Nevada. We do not sell "covered information" as defined in Nevada Revised Statutes Chapter 603A. Nevada residents may still submit an opt-out request through our Contact page, and we will record and honor it.
• Washington, Nevada, and Connecticut health data laws. We do not collect, share, or sell "consumer health data" as defined in the Washington My Health My Data Act, Nevada SB 370, or similar laws.
• Illinois, Texas, Washington, and other biometric laws. We do not collect, capture, store, or use biometric identifiers or biometric information. That includes face geometry derived from photos, which we do not use.
• Colorado, Connecticut, Texas, Oregon, and other states. These residents may designate an authorized agent to opt out on their behalf, including through a universal opt-out mechanism such as GPC.
• Texas. We do not sell sensitive personal data or biometric data. If that ever changes, we will display the notices required by Texas law.
• Vermont and Massachusetts residents. We do not disclose personal information to nonaffiliated third parties except as allowed by this Policy and applicable law.

21International Data Transfers

Monolith is based in the United States, and our Services are operated from the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. Those countries' data protection laws may differ from, and may be less protective than, those of your country.

For transfers of personal data from the EEA, the UK, or Switzerland to countries without an adequacy decision, we use one or more of these safeguards:

• the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914);
• the UK International Data Transfer Addendum or International Data Transfer Agreement;
• a recipient's certification under the EU-U.S. Data Privacy Framework, the UK Extension, or the Swiss-U.S. Data Privacy Framework; or
• a derogation under GDPR Article 49, such as where a transfer is necessary to perform a contract at your request, or because you contacted us directly in the United States.

You may request more information about these safeguards, or a copy of them (redacted where necessary), through our Contact page. Equivalent safeguards are applied where other countries' laws restrict cross-border transfers, such as Brazil, Canada (including Quebec), Australia, Japan, South Korea, and Singapore.

22Other International Privacy Laws

Monolith welcomes members from around the world. Wherever you live, we will honor the privacy rights given to you by the laws of your country or region, to the extent those laws apply to our processing. Without limiting the rest of this Policy:

• Canada (PIPEDA and provincial laws, including Quebec's Law 25). You may access and request correction of your personal information, withdraw consent subject to legal or contractual restrictions, and complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner. Our Privacy Officer is responsible for protecting personal information and can be reached through our Contact page (attention: Privacy Officer).
• Brazil (LGPD, Law No. 13,709/2018). You have the rights in Article 18 of the LGPD. These include confirmation, access, correction, anonymization, blocking or deletion, portability, information about the public and private entities with which we share data, information about the consequences of refusing consent, and revocation of consent. You may also petition the National Data Protection Authority (ANPD).
• United Kingdom. See GDPR, UK GDPR, and Swiss Data Protection. That section reflects the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and the Data (Use and Access) Act 2025.
• Switzerland (revised FADP). See GDPR, UK GDPR, and Swiss Data Protection. The controller and contact details listed there apply.
• Australia (Privacy Act 1988 and the Australian Privacy Principles) and New Zealand (Privacy Act 2020). You may request access to and correction of your personal information. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner.
• Japan (APPI), South Korea (PIPA), Singapore (PDPA), and other Asia-Pacific laws. You may request disclosure, correction, suspension of use, or deletion of your personal information as provided by those laws.
• India (Digital Personal Data Protection Act, 2023). To the extent applicable, you may access a summary of your personal data, request correction, completion, updating, or erasure, nominate another person to exercise your rights, and seek grievance redressal from us before approaching the Data Protection Board of India.
• South Africa (POPIA) and other jurisdictions. You may exercise the access, correction, deletion, and objection rights those laws provide, and lodge complaints with the relevant regulator, such as the Information Regulator of South Africa.

To exercise any of these rights, follow the process in How to Submit a Privacy Request. We will respond within the time limit your local law sets.

23Third-Party Websites and Services

The Services contain links to, and integrations with, websites, platforms, and services that we do not own or control. We are not responsible for the privacy, security, or content practices of those third parties. Linking to a third party does not mean we endorse it. We encourage you to read the privacy policy of every website and service you visit.

24Accessibility

We are committed to making this Policy accessible to people with disabilities. If you need this Policy in a different format, such as large print or plain text, or need help using it, please contact us through our Contact page. You can also use the "Print / Save PDF" button at the top of this page.

25Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will update the "Last updated" date at the top of this page. If we make material changes, we will give additional notice where the law requires it, such as a prominent notice on the Site, an announcement in our community spaces, or an email. We will get your consent where the law requires it, including before using previously collected personal information in a materially different way. We encourage you to review this Policy periodically.

26How to Contact Us

If you have questions, concerns, or complaints about this Policy or our privacy practices, or want to exercise your rights, contact us through our Contact page and include "Privacy Request" in your message.

Monolith Gaming, LLC
An Ohio limited liability company
Website: monolithgaming.org
Privacy requests: monolithgaming.org/contact-us