Privacy Policy

Last updated: 28 July 2026

Gamzic is a South African mobile esports platform. This policy is written under the Protection of Personal Information Act 4 of 2013 (POPIA). We’ve tried to write it in plain language rather than legal padding — if anything here is unclear, email support@gamzic.com and we’ll explain it.

1. Who we are

Gamzic (“we”, “us”) operates gamzic.com. For POPIA purposes we are the responsible party for the personal information described here. You can reach us at support@gamzic.com for anything in this policy, including access, correction and deletion requests.

2. What we collect, and why

We collect the minimum needed to run competitive events and pay prizes. There is no advertising network on this platform and we do not sell data.

Google account details: Your name, email and profile picture, received when you sign in with Google. Sign-in is Google-only — we never see or store a password.
Profile you write: Display name, @handle, bio, avatar and the games you follow. All of this is public.
Phone number: Only if you choose to verify one. Required to take part in events with a cash prize, because it is how we know a winner is a real, single person and where to send money. Verified by a one-time SMS code. Never shown publicly.
Approximate location: Country, province and town, worked out from your network connection when you create your account. Not GPS — we never ask for or receive your device location. Only the province and country are shown publicly.
Game activity: Matches, tournaments, check-ins, scores, results, ratings and badges. Public, because it is the point of a competitive platform.
Result screenshots: If you win a cash prize you post a screenshot of your own result. These are public on the event page and your profile — see section 4.
Chat messages: What you send in game lobbies and event rooms. Kept while the room exists — we don’t delete it on a schedule. Ask us and we’ll remove yours.
Payout records: What you were owed, what was paid, the method and the reference. Kept for accounting purposes.
Technical information: IP address, browser and device type, and pages visited, in ordinary server logs used to keep the platform working and secure.

What we never collect: passwords, ID or passport numbers, bank account or card numbers, or your device’s GPS location. We hold no money on your behalf and there is no wallet or balance on this platform.

3. Why we are allowed to process it

POPIA requires a lawful basis for each purpose. Ours are:

Running your account and events you join: Performance of our agreement with you.
Phone verification and anti-fraud checks: Our legitimate interest in preventing one person running several accounts to take prize money that is meant for a real field of players.
Location: Our legitimate interest in knowing which country a player is in, because prizes are paid into South African accounts and eligibility depends on it.
Paying prizes and keeping payout records: Performance of our agreement, and our legal obligations for financial records.
Anything optional: Your consent, which you can withdraw at any time.

4. What other people can see

Being clear about this matters more than the rest of the policy, because most of what you do here is public by design.

Public to anyone: Your display name, @handle, avatar, bio, followed games, match and tournament history, results, ratings, badges, province and country.
Public: winner screenshots: If you win money at a funded event, the screenshot you post appears on that event page and in a gallery on your profile, with your name and the amount you won. This is deliberate — it is what lets anyone check a result instead of taking our word for it. Do not include anything in the screenshot you would not want public.
Visible to people in the room: Chat messages, to anyone who can see that lobby or event room.
Never public: Your email address, your phone number, your exact town, and your payout details.
Visible to admins: Everything above, plus your email, phone number, town and payout records — only as needed to run events, resolve disputes and pay you.

5. Who else processes your data

We use a small number of service providers (POPIA calls them operators). They process data on our instructions only, and none of them are permitted to sell it.

Supabase: Database, authentication and file storage.
Vercel: Hosting and delivery of the website.
Google: Sign-in, when you choose to use it.
Twilio: Sends the one-time SMS code, if you verify a phone number.

Some of these store or process data outside South Africa. POPIA permits this where the recipient is bound by comparable protection; these providers operate under contractual data-protection terms that meet that bar.

We will also disclose information where the law requires it, or where it is necessary to investigate fraud, cheating or a threat to someone’s safety.

6. How long we keep things

Your account: Until you delete it, or ask us to.
Chat messages: Kept — there is no automatic deletion. Ask us to remove yours and we will. Support threads with admins are kept as the record of decisions about money.
Match and tournament results: Kept as part of the public competitive record, even after an account is closed, though it is disconnected from your profile.
Result screenshots: Kept while the event record stands. Removed on request — see section 7.
Phone verification codes: Minutes. The code itself is never stored in readable form.
Payout records: Five years, as financial records generally must be.
Server logs: A short rolling window for security and debugging.

7. Your rights

Under POPIA you may:

Ask what we hold about you, and get a copy of it.
Correct anything that is wrong. Most of it you can edit yourself in Settings.
Ask us to delete your account and personal information.
Object to processing based on legitimate interest.
Withdraw consent you previously gave.
Complain to the Information Regulator of South Africa if you think we have handled your information badly, at inforegulator.org.za. We would rather you told us first at support@gamzic.com so we can fix it.

Email support@gamzic.com to exercise any of these. We will respond within 30 days. There are two honest limits: results of events you actually played stay in the public record, because other players’ standings depend on them, and payout records must be kept for accounting even after an account closes.

8. Players under 18

You must be at least 13 to use Gamzic. If you are under 18, you need a parent or guardian’s permission, and under POPIA we rely on that permission to process your information.

You must be 18 or older to take part in any event with a cash prize. Those events require a verified phone number, and prizes are only paid to accounts held by adults.

If you are a parent or guardian and want your child’s account or any screenshot of them removed, email support@gamzic.com and we will do it without argument.

9. Security

Sign-in is handled by Google, so we never hold your password. Phone verification codes are held only by our SMS provider and are never stored in readable form. Access to the database is restricted, and admin actions on money are logged.

No platform can promise perfect security. If a breach affects your personal information, POPIA requires us to notify you and the Information Regulator, and we will.

10. Cookies

We use cookies to keep you signed in and to remember basic preferences. That is it — there are no advertising or cross-site tracking cookies on this platform. Blocking cookies will stop you being able to stay signed in.

11. Changes to this policy

When we change something significant we will update the date at the top and, for anything that affects your rights or how prizes work, tell you in the app. Continuing to use Gamzic after a change means you accept it.

12. Contact

Email support@gamzic.com for anything at all — questions, corrections, deletion requests or complaints. It reaches a person, not a ticket queue.

See also our Terms of Service, which cover how events, hosting and prizes work.