The private capital company under the name "PLAY 2 WIN COMPETITIONS I.K.E.", trading as "P2W" (the "Company"), with registered office in the Municipality of Agios Dimitrios, Attica, contact e-mail: info@play2winapp.com.
The Company is the Data Controller. The Company undertakes to comply with the national and European rules on protection of individuals' rights and freedoms regarding the processing of personal data, and with the regulatory provisions governing its operation, and expressly declares that it will not engage in any unfair use of your personal data and does not disclose personal data to third parties (beyond the cases provided in this Privacy Policy or required by law), nor does it publish, sell, lease, transfer or exchange the personal information you provide. Access to and use of the Website www.play2winapp.com is subject to this Privacy Policy and the Terms of Use. This Privacy Policy may change from time to time in accordance with law or industry developments. We recommend that you check this page periodically for any changes. Continued use of the website after the posting of amendments implies knowledge of these changes.
I. What data the Company collects and processes about you and for what purposes.
Personal data means any information, in printed or electronic form, that can lead, alone or in combination with other information, to the identification of a natural person.
Processing of Personal Data means the collection, recording, organisation, storage, adaptation, alteration, retrieval, use, transmission to third parties, dissemination, correlation, combination, restriction, deletion and destruction of Personal Data of natural persons.
We inform you that, within the scope of its activities, the Company collects and processes the following personal data about you for the purposes below:
While browsing the website, providing personal data is not, as a rule, required. However, if you choose to enter a game organised by our Company, we will ask you for the following: contact details, such as name and surname, email address and phone number; payment and billing details (if you choose to use a credit/debit card or another electronic payment method) and details of your bank account. For electronic payments, transactions may be processed by third-party certified payment service providers. The Company does not store full credit or debit card details. Payment data is processed exclusively by the relevant payment providers under their own privacy policies and applicable security standards; invoicing details (company name, VAT number, address, email). The legal basis for the processing is the performance of a contract with our customers (Article 6(1)(b) GDPR). In this context we collect data about you in order to perform our contractual obligations and provide our services optimally. In addition, the legal basis for processing the above data is also the Company's legal obligation (Article 6(1)(c) GDPR), i.e. compliance with law, such as tax legislation. As a rule, providing the above personal data to the Company is necessary to achieve those purposes. If you refuse to provide the data required, the Company will inform you whether it is impossible without them to achieve the main purpose of collecting that data — for example, it may become impossible to provide our services to you.
When you visit and use the website, technical information and connection data may be collected automatically, such as IP address, device type, operating system, browser type and version, date and time of access, and data about the use of the website and the game. This data is collected for network and information security, prevention of malicious activity or fraud, ensuring proper operation of the website and improvement of the services provided. The legal basis for processing is the Company's legitimate interest under Article 6(1)(f) GDPR.
When creating an account or using the game, data such as username, account identifiers, usage statistics, game progress, achievements and other data related to the operation and improvement of the game may be collected. This data is processed for the purposes of providing the game services, user support, account security and improving the user experience. If a user is selected as a winner, the Company may request additional identification and contact details, such as full name, shipping details, VAT number and/or bank account details, exclusively for the purposes of awarding prizes, tax compliance and fraud prevention. This data is retained in accordance with the Company's obligations under applicable tax and commercial law. Participation in the game is free; any optional payments relate exclusively to features that enhance the user experience and do not affect the outcome or results of the game.
The Company may process technical, connection and user activity data in order to protect the integrity of the game and prevent fraud, automated use (bots), multiple accounts and other breaches of the terms of use. This processing is based on the Company's legitimate interest in ensuring the smooth and secure operation of the service. The website may display advertisements through cooperating third-party advertising service providers. These providers may use cookies or similar technologies to measure the effectiveness of advertisements and display personalised content, subject to the user's consent choices.
If you wish to contact our Company through the website (contact form), you will be asked to fill in your full name, contact phone and email. The processing of the above data is necessary to handle your request and is based either on your consent or on the taking of pre-contractual measures at your request, for the purpose of contacting us, managing your requests or providing information to you. The above data is collected and stored for the purpose of communicating with you and performing the contract. The Company does not, as a rule, collect and process personal data related to your image (videos, photographs). If we exceptionally carry out such processing, you will be specifically informed and we will take all necessary legal actions in compliance with the applicable regulatory framework. For promotional or advertising activities of our Company, your data is collected only with your consent, provided through the contact form on the website. For this purpose, the Company may use visitors'/users' contact data for informational and promotional activities regarding gifts, discounts on products and services, subject to their express consent. As for our suppliers and third-party partners, the Company collects and processes: full name, VAT number, IBAN, contact phone, address, email, entity represented, invoicing details and bank account details. The legal basis for processing is the performance of a contract to which the subject is a contracting party. Please note that personal data legislation applies to professionals/natural persons or sole proprietorships and not to legal entities, to which the GDPR does not apply. As a rule, we do not collect or in any way access special categories ("sensitive") of personal data.
The services and the game of the website are not directed at persons under the age of eighteen (18) without the consent or approval of their parent or guardian, where required by applicable law. The Company does not knowingly collect personal data of minors in violation of applicable law. If it is found that personal data of a minor has been collected without the necessary legal basis, the Company will proceed to their immediate deletion.
II. Cookies, tracking technologies and cooperating service providers
The website may use cookies and similar tracking technologies to ensure its proper operation, improve the user experience, collect visitor statistics and provide personalised content or advertising. Cookies are small text files stored on the user's device while browsing the website. The Company uses: strictly necessary cookies for the operation of the website, statistical/analytical cookies (e.g. analytics services), functionality cookies, and advertising or commercial cookies, provided the required consent is given. The user can at any time modify or withdraw their consent through the website's cookie settings or through the settings of the browser they use. Further information is provided in the website's Cookies Policy. The Company may work with third-party service providers for the operation of the website and the game, such as hosting providers, email services, statistical analytics, technical support, payment services and security services. These third parties may access personal data only to the extent required for providing their services to the Company and are contractually bound to confidentiality and GDPR compliance. In certain cases data may be transferred outside the European Economic Area, subject to the safeguards provided by the GDPR.
III. Transfer of your data to third parties
As a rule, we will not disclose your information to third parties without your consent. However, we may share your information with third parties only under the terms of this Privacy Policy and in particular: where required or permitted by law (e.g. transfer of data to a tax authority); where necessary to provide the services you have requested; and to a third-party processor providing accounting services and bound by the relevant contract.
IV. Data Retention Period
Your personal data will be retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law. In particular, the Company will store your Personal Data: (i) for data necessary for compliance with a legal obligation, e.g. tax or labour law, for as long as the legal obligation exists or as required by law; (ii) for data relating to the performance of our contract, the Company retains your data for the duration of our contractual relationship, as well as for a period of three (3) years from the last calendar day of the year in which your relationship with our Company ends, in view of possible future cooperation/contact and for evidentiary purposes vis-à-vis authorities and public services. Exceptionally, the Company may retain your data beyond the above period, where it has a legitimate interest or where the data is required to assert or defend its rights against claims. (iii) Where you have given your consent to the use of your data for advertising/promotional purposes, until such consent is withdrawn. You should be aware that you have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you wish your personal data to be permanently deleted, you may notify us in writing by email and we will proceed to their immediate deletion.
V. Your Rights
Regardless of the purpose or legal basis on which we process your data, you have the following rights:
- To request access and information about the data we hold about you (right of access).
- To ask us to correct your data so that it is true and accurate (right to rectification).
- To request the deletion or removal of your personal data where there is no lawful reason to continue processing. Please note that the Company may have the right or obligation to retain the information in cases where it has a specific legal obligation to do so or has another lawful reason to retain it (e.g. tax obligation or defence of claims).
- To ask us to restrict the processing of your personal data (right to restriction).
- To ask to receive the personal data you have given us in a structured, commonly used and machine-readable format, in order to transmit it directly to another legal entity without hindrance from us (right to portability).
- To object to the processing of data concerning you, in particular where your data is collected for direct marketing purposes (right to object).
The Company implements appropriate technical and organisational security measures to protect personal data from unauthorised access, loss, destruction, alteration or unlawful processing. These measures include, indicatively, use of secure communication protocols (SSL/TLS), restriction of access to data, system security audits and incident-management procedures.
To exercise your rights above, you can submit the relevant request to the Company at the following email address: info@play2winapp.com.
For each of your requests, the Company will respond, as a rule, within one (1) month and at the latest within three (3) months, after informing you about such delay and the reasons that make processing your request more difficult. If your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the Company may charge a reasonable fee, taking into account the administrative costs of providing the information or carrying out the requested action.
VI. Right to lodge a complaint with the competent Authority.
If you consider that the protection of personal data is being infringed in any way, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, Kifisias Avenue 1-3, P.C. 115 23, Athens, +30 210 6475600, +30 210 6475628, contact@dpa.gr).
This Privacy Policy was posted in May 2026.