This Privacy Policy (“Policy”) is issued by NOVAZREHH TECH SOLUTIONS LTD, a private company limited by shares incorporated in England and Wales (Company Number 16957969), trading as “Zishes”(“Zishes”, “we”, “us”, “our”). Our registered office is 162 Burghley Court Kingsquarter, Maidenhead, England, SL6 1AW.
At Zishes, your privacy is important to us. This Policy explains what personal data we collect, how we use it, how we protect it, and your rights. It applies to all users, sellers, winners, and visitors of the Zishes platform globally.
1) Data We Collect
- Account Data: Name, username, email, phone, address, age/date of birth, and KYC documentation (such as government-issued ID and proof of address), collected only where legally required or necessary for fraud prevention and regulatory compliance.
- Transaction Data: Payment details (processed securely by regulated payment service providers such as Stripe or other PSPs depending on user location), coin or membership purchases, prize wins, seller payouts, and invoices.
- Gameplay Data: Competition entries, scores, leaderboards, logs, session identifiers, and anti-cheat telemetry.
- Device & Technical Data: IP address, browser/app type, device identifiers, operating system, crash logs, cookie identifiers, and approximate location.
- Communications: Support requests, chats, dispute evidence, appeals, and reports of misconduct.
2) How We Collect Data
- Directly from you (when registering, playing, selling, or contacting support).
- Automatically (cookies, SDKs, telemetry, anti-cheat systems, and analytics tools).
- From third parties (payment processors, KYC providers, fraud detection services, and courier tracking systems).
3) How We Use Data
- Provide and operate skill-based competitions, memberships, and payouts.
- Verify identity, prevent fraud, detect abuse, and enforce fair play.
- Process payments, seller settlements, refunds, and accounting obligations.
- Improve services through analytics, debugging, and user experience optimisation.
- Send service notifications, competition results, policy updates, and marketing communications (where consented).
All competitions on Zishes are skill-based and do not involve gambling, betting, lotteries, or games of chance.
4) Legal Bases for Processing
- Contract necessity: to deliver platform services, competitions, memberships, and payouts.
- Legal obligation: KYC, AML, tax reporting, accounting, and consumer protection laws.
- Legitimate interests: fraud prevention, platform security, service improvement, and analytics.
- Consent: marketing communications, cookies, and certain analytics.
5) How We Share Data
- Payment providers: Regulated PSPs (such as Stripe), for secure transaction processing.
- KYC/AML providers: Identity verification and sanctions screening services.
- Logistics providers: Couriers and shipping partners for prize delivery.
- Vendors & analytics providers: Anti-cheat, fraud detection, crash logging, and analytics services.
- Legal and regulatory authorities: Where required by law, court order, or lawful investigation.
6) Data Retention
- KYC/AML records: up to 5–7 years (legal requirement).
- Transaction and tax records: minimum 7 years.
- Gameplay and anti-cheat logs: typically 12–24 months unless under investigation.
- Marketing preferences: until consent is withdrawn or account is deleted.
7) Security Measures
We apply industry-standard safeguards including encryption in transit, restricted access controls, monitoring, logging, and vendor due diligence. No system is entirely secure, but we continuously improve our protections.
8) International Transfers
Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses (SCCs) with the UK Addendum, and other lawful mechanisms.
9) Children
Zishes is intended for adults aged 18+ (or the age of majority in the relevant jurisdiction). We do not knowingly collect data from children.
10) Your Rights
- Access and obtain a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your account and personal data (subject to legal retention).
- Restrict or object to certain processing.
- Withdraw consent at any time.
- Request data portability.
To exercise these rights, email contact@zishes.com.
11) Region-Specific Addenda
- UK/EU GDPR: Right to lodge a complaint with the ICO (UK) or relevant EU authority.
- India DPDP Act 2023: Rights to withdraw consent and seek grievance redressal.
- UAE PDPL: Rights to access, correct, or erase personal data.
- US (CCPA/CPRA): Rights to opt out of sale or sharing of personal information.
12) Changes to This Policy
We may update this Policy periodically. Material changes will be highlighted in-app or on our website.
13) Contact Us
For privacy or compliance queries, contact us at contact@zishes.com or contact@novazrehhtech.com.
Effective date: 01 February 2026
