Privacy policy

1Data Controller

Who We Are

CSGOMatchmaking.com is the data controller responsible for your personal data. For any privacy-related inquiries, you can contact us here

2Data We Collect

Personal Information

We collect the following categories of personal data:

• Account Information: Username, email address, and password (encrypted)
• Steam Data: Steam ID and profile information when you link your Steam account
• Gaming Data: Match history, statistics, rankings, and gameplay performance
• Payment Information: Transaction records, payment status, and the account and checkout countries recorded for a purchase (payment details are processed by third-party providers)
• Prize Payout & Verification Data: Where you win a cash prize, the payout details you provide (e.g. bank/IBAN or PayPal) and any identity-verification (KYC) information we may need to confirm eligibility and pay you
• Technical Data: IP address, IP-derived country, browser type, and device information for security, regional eligibility, and service delivery
• Communication Data: Messages sent through our platform and support inquiries
• Anti-Cheat Data: Where you are required to run our anti-cheat client, the integrity data it collects while you play (see the Anti-Cheat & Fair Play section below)

3Account Country

How Country Information Is Used

We derive a two-letter country code from trusted network information when you create your account, or on your first login if it was not previously recorded. Your country and flag are visible in your account settings and on your public profile.

We lock this value to help apply regional payment availability, offers, pricing, and gifting rules consistently. Each payment also records the country presented at checkout and your account country so we can investigate fraud and regional-offer abuse. You may correct your country once in account settings. After a correction by you or support, further changes require a support ticket.

4Legal Basis for Processing

Why We Process Your Data

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our gaming services, manage your account, and fulfill premium subscriptions
• Legitimate Interests: Fraud prevention, anti-cheat enforcement, platform security, and service improvement
• Legal Obligation: Compliance with applicable laws and regulations
• Consent: Where required, such as for marketing communications (you may withdraw consent at any time)

5How We Use Your Data

Purpose of Processing

Your personal data is used for:

• Providing and maintaining our gaming platform and services
• Processing payments and managing premium subscriptions
• Determining eligibility for regional payment methods, offers, pricing, and gifting
• Administering competitions and paying out cash prizes, including verifying winner identity and eligibility and meeting tax/reporting obligations
• Matchmaking and ranking calculations
• Enforcing our Terms of Service and anti-cheat measures
• Detecting and preventing fraud, abuse, and security threats
• Communicating service updates and responding to support requests
• Improving our services and user experience

6Anti-Cheat & Fair Play

Our Anti-Cheat Client

To keep competition fair, some players — for example those flagged for review or playing in certain competitive contexts — are required to run our anti-cheat companion application (the "CSP Verifier") while they play. It runs only in connection with gameplay on our platform.

While active, it may process the following categories of data:

• A non-reversible identifier for your device and the client version, to tie the session to your account
• Raw, allowlisted Windows identity metadata — including the local account name and SID, computer name, standard profile/system paths, MachineGuid, and ProductId — to distinguish verifier hosts and investigate shared or related accounts
• Account identifiers remembered on the verifier host — including other local Windows profile names/SIDs and Discord or Steam account IDs recorded by their desktop clients — solely to identify shared devices and potentially related platform accounts. The verifier does not collect Discord or Steam passwords, login tokens, cookies, messages, contacts, or other account content.
• Limited information about software and system activity on your device that is relevant to game integrity while you are playing, including processes that access game memory and whether such a process exposes radar-like content through a local web service. Local response content is matched on-device and is not uploaded; only positive fingerprint labels, hashes, process details, and the local port are reported for review.
• In-game input and performance signals used to assess fair play

We process this data solely to detect and deter cheating and to enforce our Terms of Service, on the basis of our legitimate interest in a fair, secure platform and the performance of our contract with you. The client does not monitor your general computer use beyond the above, and we do not sell this data.

Access to anti-cheat data is restricted to authorised staff whose role includes anti-cheat or related-account review. Ordinary verifier screenshots are automatically deleted within 48 hours, except where they are retained as evidence for a cheating conviction. Authorised anti-cheat staff may also manually select a limited number of screenshots for a private training dataset, label only what is visible in each frame, and retain those selected copies for as long as reasonably necessary to develop, evaluate, audit, and improve cheat detection. A training label does not automatically ban a player or change their anti-cheat score. Session metadata, identity observations, and integrity findings may be retained for as long as reasonably necessary to investigate cheating, account sharing, fraud, appeals, and enforcement of our Terms of Service.

To protect the integrity of these measures, we do not publish the specific methods our anti-cheat uses to detect cheating.

7Voice Chat Moderation

Reviewing Reported Voice Chat

In-game voice chat on our servers is included in the match recording (GOTV demo). We only review it when a player is reported for toxic behavior or hate speech, or when staff review a reported match. In that case we process:

• The reported player's voice from that match, with the silence removed
• An automatic transcript with the time and round each word was said
• Automated labels for abusive lines (for example racism, threats, or harassment) with a severity
• Short evidence clips of flagged moments with the voice, transcript, and in-game view

Staff may extend the review to the other players in the reported match. We process this data on the basis of our legitimate interest in a safe community and in enforcing our Terms of Service. Automated labels are only a signal; staff decide on any action.

The voice audio is transcribed by a speech-to-text provider. The transcribed text, without usernames or account identifiers, is labeled by an AI provider. Access to the results is restricted to authorised moderation staff.

The extracted voice audio and the full transcript are deleted 30 days after the check. Flagged lines, their labels, and evidence clips are kept with the report for as long as needed to handle it, any resulting enforcement, and appeals. You can object to this processing or request access to data about you as described under Your Rights.

8Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

Data Subject Rights

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion or anonymization of your personal data ("right to be forgotten"), subject to legal and legitimate retention requirements
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us here. We will respond within 30 days.

9Data Retention

How Long We Keep Your Data

• Account Data: Direct profile and sign-in details are anonymized after the 30-day deletion grace period. A disabled account record, Steam ID, and limited security data are retained to prevent account recreation, preserve platform integrity, comply with legal obligations, and resolve disputes
• Match History: Retained after account anonymization so rankings, match results, and statistics remain accurate
• Payment Records: Retained for 7 years as required by financial regulations
• Prize Payout & Verification Data: Retained as long as needed to make the payout, then for the period required by tax, accounting, and anti-fraud obligations
• Security Logs: Retained for up to 12 months for fraud prevention and security purposes
• Ban Records: Retained indefinitely to maintain platform integrity
• Reported Voice Chat: Extracted voice audio and full transcripts are deleted 30 days after the check; flagged lines, labels, and evidence clips are kept with the report while needed for the case, enforcement, and appeals

10Third-Party Services

Data Sharing

We share your data with the following categories of third parties:

• Payment Processors: We use Stripe for card and wallet payments, PayPal for PayPal payments and NOWPayments for optional cryptocurrency payments. Each provider collects and processes payment information according to its own privacy policy: the Stripe Privacy Policy, the PayPal Privacy Statement and the NOWPayments Privacy Policy.
• Steam/Valve: When you link your Steam account for authentication. We also read public details of that Steam account through the Steam Web API (account age, Counter-Strike playtime, profile visibility and VAC, game and community ban records) for our reputable player check
• CSRep (csrep.gg): When you link Steam, when you are reported, or when staff review your account, we send your SteamID64 to CSRep to receive a reputation estimate. We keep CSRep’s answer for at most 24 hours, only staff can see it, and it is never the sole reason for a restriction: a poor result only sends your account to a staff review while you keep playing. CSRep processes the request under its own privacy policy
• Payout & Verification Providers: When we pay a cash prize, we share the details needed to complete the transfer (and, where applicable, to verify your identity) with our payout and KYC providers
• Hosting Providers: Infrastructure services that store and process data on our behalf
• Speech & AI Providers: For reported voice chat, a speech-to-text provider transcribes the audio and an AI provider labels the transcribed text (see Voice Chat Moderation)
• Legal Authorities: When required by law or to protect our legal rights

We do not sell your personal data to third parties.

11International Data Transfers

Cross-Border Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Other legally recognized transfer mechanisms

12Cookies & Tracking

How We Use Cookies

We use cookies and similar technologies for:

• Essential Cookies: Required for the website to function (authentication, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our platform

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use our services.

13Data Security

How We Protect Your Data

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure password hashing
• Access controls and authentication measures
• Regular security assessments

While we strive to protect your data, no method of transmission over the internet is 100% secure.

14Children's Privacy

15Changes to This Policy

Policy Updates

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

16Contact Us

Privacy Inquiries

For any questions about this Privacy Policy or to exercise your data protection rights, contact us at:

Contact Us

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.