Privacy Policy

1. Introduction

Welcome to Elyrix ("we," "our," or "us"). We comply with the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit data via Form 1, Form 2, Form 3 and other collection forms, register accounts and play our games.

By using our platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our services immediately.

2. Information We Collect & GDPR Legal Basis for Processing

2.1 Personal Data You Provide via All Website Forms (Form 1, Form 2, Form 3, Registration, Support)

We may collect: Contact Information (name, email, phone), Account Data (username, avatar, preferences), and Communication Data (messages, feedback submitted on all data input forms).

GDPR Article 6 Legal Basis:
• Art.6(1)(b) Performance of Contract: Create game accounts, deliver game services, respond to requests submitted through Form 1, Form 2, Form 3 and inquiry forms;
• Art.6(1)(a) Explicit Consent: Opt-in marketing emails, non-mandatory analytics tracking;
• Art.6(1)(f) Legitimate Interest: Anti-fraud monitoring, platform security, service performance optimization.

2.2 Automatically Collected Data

When you access our website, we automatically collect: Device Information, Usage Data, Location Data, and Cookies & Similar Technologies.

GDPR Article 6 Legal Basis:
• Art.6(1)(a) Consent: Analytics and marketing tracking cookies (only activated after your opt-in);
• Art.6(1)(f) Legitimate Interest: Essential login security, website stability monitoring, threat detection.

3. How We Use Your Information

We use the collected data to provide, maintain, and improve our gaming platform; personalize your gaming experience; process inquiries and support requests submitted via Form 1, Form 2, Form 3 and all other data collection forms; send service notifications; monitor usage patterns for performance and security; detect and prevent fraud; and fulfill statutory legal obligations under GDPR Art.6(1)(c).

4. Cookies and Tracking Technologies

We use Essential Cookies (authentication, security), Preference Cookies (settings, progress), Analytics Cookies (usage patterns), and Marketing Cookies (advertising). You can adjust all cookie consent preferences via our banner or browser settings. Non-essential tracking will not load without your explicit approval.

5. Data Sharing and Disclosure

We do not sell your personal data to third parties as restricted by CCPA. We may share information with authorized Service Providers, to comply with Legal Requirements, during Business Transfers, or with your separate written Consent. All third-party partners sign binding data protection contracts to secure your personal data.

6. Data Security

We implement industry-standard security measures including SSL/TLS encryption, regular security audits, role-based access controls, and employee privacy compliance training. However, no method of electronic data transmission over the internet is 100% secure.

7. Data Retention

We retain your personal data only as long as necessary to fulfill collection purposes or meet legal retention deadlines. Account data is kept while your account remains active; game progress stored for 24 months after last login; anonymized analytics data retained up to 36 months; business and legal records stored for a minimum of 7 years.

8. User Rights, Data Controller & Full DPO Contact Information

8.1 GDPR Data Subject Rights

You hold full rights to Access, Rectify, Erase, Restrict processing, Data Portability, Object to processing, and withdraw previously granted consent at any time without negative consequences. All formal privacy requests must be submitted to our dedicated DPO mailbox for official processing.

8.2 Data Controller

Data Controller: Elyrix Co., Ltd.

8.3 Dedicated Data Protection Officer (DPO)

Our independent DPO oversees all GDPR and CCPA compliance work, responds to user data requests, and coordinates communication with official data protection supervisory authorities.

• DPO Exclusive Contact Email: [email protected]
• General Privacy Support Mailbox: [email protected]

We will issue a formal response to all DPO-submitted data subject requests within 30 calendar days as required by GDPR regulation.

8.4 CCPA California Consumer Specific Rights

If you are a California resident, you have statutory rights under the CCPA: request full disclosure of all categories of personal data collected via Form 1, Form 2, Form 3 and other website forms; request permanent full deletion of all your stored records; opt out of cross-party personal data sharing; and receive equal platform service without discrimination when exercising your privacy rights. All CCPA related requests should be sent directly to our DPO email address.

9. Children's Privacy

Our platform is not intended for children under 13 years old. We do not knowingly collect personal data from minors under 13 via Form 1, Form 2, Form 3, registration pages or any other input forms. If we discover personal information from underage users without verified parental consent, we will permanently erase all related records immediately.

10. Third-Party Links

Our platform may contain hyperlinks to external third-party websites. We take no responsibility for their independent privacy policies or data collection rules. Please review their privacy disclosures before submitting personal data on their forms.

11. International Data Transfers

Your personal information may be transferred and stored outside the EEA / United Kingdom. All cross-border data transfers are protected using EU Standard Contractual Clauses (SCCs), the official GDPR-approved data transfer safeguard.

12. Changes to This Policy

We may revise this Privacy Policy periodically. All material policy updates will be announced via site-wide notice or user email 30 days prior to effective date. Your continued use of the website after updates take effect constitutes full acceptance of the revised privacy terms.

13. Contact Us

Legal Registered Name: Elyrix Co., Ltd.

General Support Email: [email protected]

Official Website: https://whimsyplayground.top

If you believe we have violated applicable data protection laws, you may submit a formal complaint to your local national data protection authority.

Mandatory Privacy Disclosure for All Data Collection Forms (Form 1, Form 2, Form 3)

Form 1, Form 2, Form 3, account registration, contact and feedback forms on this website collect personal information solely to complete the service or request you submit. All data entered on these three core forms and auxiliary input forms is fully governed by this Privacy Policy. You may leave all optional input fields blank and are not obligated to provide unnecessary personal details. You can submit a full data access or permanent deletion request for all records submitted via Form 1, Form 2 or Form 3 by contacting our DPO at [email protected]. We will never use data submitted through any form for unsolicited advertising unless you manually check a separate opt-in consent checkbox on the relevant form page.