Privacy Policy

1. Who we are

Мастър Гейминг Хол ЕООД ("MasterGamingHall", "we"), Tax ID BG205566218, operates gaming halls in Bangkok (Thailand), Jakarta (Indonesia) and Hanoi (Vietnam), as well as this website. We are the data controller for personal data collected through the website, the booking system and the services provided at our venues.

For privacy questions, contact us at play@mastergaminghall.bg or by post to our flagship address: бул. „Витоша“ 118, Триадица, 1408 София, България.

2. What personal data we collect

We collect only the data needed to run our venues and process bookings:

• Booking data: name, email address, phone number, date and time of visit, party size and chosen experience (arcade, VR, private event, tournament).
• Account data: if you create an account, we store your email, name and booking history.
• Payment data: card or e-wallet details are processed by our payment provider. We never store full card numbers on our servers.
• Billing: name, address and tax ID when you request a tax invoice.
• Communications: messages sent through contact forms, email or customer support.
• Technical data: IP address, browser type, device information, pages visited and cookie identifiers collected automatically.

3. How we use your data

We process personal data for the following purposes:

• Confirming, managing and reminding you about bookings and events.
• Processing payments, issuing invoices and refunds where applicable.
• Answering questions, support requests and suggestions.
• Running leaderboards, tournaments and membership programmes.
• Improving the website and understanding how visitors use our services.
• Sending marketing communications where you have consented (you can opt out at any time).
• Meeting legal obligations, including tax requirements, and defending our rights.

4. Legal basis for processing

In line with Thailand's Personal Data Protection Act (PDPA), Indonesia's Personal Data Protection Law and Vietnam's personal data protection regulations, we process personal data on the basis of: (a) performance of a contract when you make a booking; (b) legitimate interests in running and improving our venues; (c) compliance with legal obligations; and (d) consent, where required, for example for marketing or non-essential cookies.

5. Cookies and analytics

We use essential cookies for the website to function and optional analytics and marketing cookies with your consent. Our cookie policy explains the details. Tools such as Google Analytics and the Meta Pixel may collect browsing data. You can manage your choices in the cookie banner or your browser settings.

6. Who we share data with

We do not sell personal data. We share data only with:

• Processors: payment providers, booking platforms, email delivery and hosting services that help us operate the website and venues.
• Authorities: where required by law, court order or to protect our rights and people's safety.
• Partners: tournament organisers and sponsors, only when you sign up for a specific event and give consent.

Where data is transferred across borders within our group of venues or to service providers, we ensure appropriate safeguards are in place.

7. Data retention

We keep booking and account data for as long as needed to provide services and meet tax and accounting obligations. Billing records are kept for the period required by local law in each country (typically 5 to 10 years). Marketing consent is kept until you withdraw it. Technical logs are kept for up to 12 months.

8. Your rights

You have the right to access, correct, delete, restrict and object to the processing of your personal data, as well as the right to data portability. You can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to play@mastergaminghall.bg. We respond within 30 days. You also have the right to lodge a complaint with the data protection authority in your country.

9. Security

We apply technical and organisational measures to protect personal data, including encryption in transit, access controls and periodic security reviews. No online system is fully secure, so we recommend strong passwords and not sharing your account details.

10. CCTV

Our venues use CCTV for the safety of people and property, with appropriate signage. Footage is kept for 30 days and only shared with competent authorities as required by law.

11. Changes to this policy

We may update this privacy policy from time to time. Changes are published on this page with a new "Last updated" date. Please check back regularly.