Skip to content
HallidayGames

Legal · Privacy

Privacy policy

What we collect when you play the Dubai Series, why we need it, how long we keep it and how to take control of it — in plain language.

Draft — pending review by our legal counsel

Published for transparency while the Dubai Series launches. Wording may change before final sign-off; the version on this page applies until then. Last updated 24 October 2026.

Applies to
All players
Updated
24 Oct 2026
Framework
UAE PDPL

Who we are

Halliday Games is the organiser of the Dubai Series, based in Dubai, United Arab Emirates. We decide how your personal data is used for the series.

This policy covers hallidaygame.com, the player panel, our Discord server and the in-person events of the Dubai Series. It has been prepared with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) in mind and will be finalised with our legal counsel.

Questions about your data go to hello@hallidaygame.com.

Data we collect

Only what we need to run your profile, verify missions and seat you at events.

You give us

  • Account details — your name, email address and password. Passwords are stored only as a secure hash by our authentication provider; we never see them.
  • Player profile — gamer tag, Discord handle, Instagram handle and, if you choose, your city and preferred game. We generate a Player ID for you.
  • Confirmations & consents — that you are 18+, that you accept the rules, and your separate marketing and media choices, with when you gave or changed them.
  • Mission activity — missions you mark as done and any proof links or notes you submit.
  • Your character & player card — the character you pick and the title, frame and banner you display.
  • Chat activity — messages you post in the lobby chat, your reactions, reports you make, and when you accepted the chat rules.
  • Messages — what you send us by email or in Discord.

We create or collect

  • Progress records — XP history, level, league, streaks, unlocked cosmetics, and admin decisions and notes on your submissions.
  • Moderation records — chat warnings, mutes and bans, the reason for each, reports about your messages and any appeal.
  • Event records — slot confirmations, waitlist status, check-in, brackets and results. ID checks at events are visual: we record that the check was completed rather than keeping a copy of your document, unless a copy is legally required to release a prize.
  • Technical data — IP address, device and browser details and security logs, plus the essential storage that keeps you signed in.

We never ask for payment card details, crypto wallet addresses or seed phrases to take part. Entry is free.

How we use it

  • Create and run your account and player panel.
  • Verify missions, award XP and work out your level, league and when you become eligible.
  • Run the lobby chat: deliver messages, apply the chat rules and filters, and handle reports and sanctions.
  • Manage event slots, waitlists, check-in, brackets and results.
  • Send service messages about your account and the events you are confirmed for.
  • Send news about future events and seasons — only with your marketing consent.
  • Use event photos and video in which you appear — only with your media consent.
  • Keep the series fair and safe: detect fake accounts, fraud and abuse, and enforce the rules.
  • Verify prize winners and arrange prize payments.
  • Meet our legal obligations and respond to lawful requests.

Other players can see your gamer tag, character, level, league and player card on the season leaderboard, in the lobby chat and in the community activity feed, and your gamer tag appears in brackets and results. We never show your email address or real name there. Public statistics on this site are aggregate counts and never identify an individual.

Mission approvals and eligibility decisions are made by people. In the chat, automatic filters can block a message or hold it for a moderator, and may add a strike for slurs; every sanction can be appealed to a person.

Lawful grounds

We only process personal data where UAE law allows it, namely:

  • Your consent — for marketing messages and the use of media featuring you. You can withdraw it at any time without affecting your entry.
  • Our agreement with you — to run your account, missions, eligibility and event places once you register and accept the rules.
  • Legal obligations — for example keeping records connected to prize payments.
  • Other grounds permitted by law — such as protecting the series and its players against fraud and abuse.

Sharing & transfers

We don't sell your personal data.

  • Service providers who run our hosting, database and sign-in, and email delivery, acting only on our instructions.
  • Discord and Instagram — when you post proof or interact with us there, those platforms process your data under their own policies.
  • Venues and event staff — only what is needed to admit and seat confirmed players.
  • Authorities — where UAE law requires it, including lawful requests to remove chat content.

We don’t pass your contact details to our sponsor or any other partner for their own marketing. If that ever changes, we will ask for your separate, explicit consent first.

Some providers may store or process data outside the UAE. Where they do, we use providers that apply appropriate safeguards, as permitted under UAE data protection law.

How long we keep it

  • Account and profile — while your account is active. Deleted or anonymised within 30 days of a deletion request, or after 24 months without activity.
  • Mission proof, XP history and moderation notes — for the season plus 12 months, to handle disputes and stop repeat abuse.
  • Chat messages, reports and moderation records — 12 months, then deleted. Messages a moderator removes stop being visible straight away.
  • Consent records — for as long as we rely on the consent, plus the time needed to show it was given.
  • Brackets and results — kept as the season’s historical record, showing gamer tags only.
  • Prize and payment records — for as long as UAE law requires.

Your rights

Ask us at any time — we reply within 30 days.

  • Access the personal data we hold about you and get a copy of it.
  • Correct anything inaccurate — most profile details can be edited in your player panel.
  • Ask us to delete your data or to restrict how we use it.
  • Object to processing, including all marketing.
  • Withdraw your marketing or media consent at any time in your player panel.
  • Receive your data in a portable format.
  • Complain to the UAE Data Office if you think we have handled your data unlawfully.

Email hello@hallidaygame.com from your registered address. We may need to confirm your identity before acting on a request.

Security & age limit

Data is encrypted in transit, access to admin tools is limited to authorised staff, and database rules restrict each player to their own records. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

The Dubai Series is for players aged 18 and over. We do not knowingly collect data from anyone younger, and we delete accounts we find belong to under-18s.

Cookies & storage

We use essential cookies and browser storage to keep you signed in and to remember basic preferences. They are needed for the site to work.

If we add analytics or advertising measurement — for example to understand which campaigns bring players to the site — we will ask for your consent where required and list the tools here first.

Changes & contact

We will update this policy as the series evolves and after legal review. Material changes are announced on this site and, where appropriate, by email. Last updated 24 October 2026.

Contact: Halliday Games, Dubai, United Arab Emirates — hello@hallidaygame.com. See also our Terms of Use and Official rules.