Privacy notice

Version 1.1

Date Published: September 4, 2026

Scope of Privacy Policy

This Privacy Policy describes and governs the manner in which Cardflow Digital Limited (“Collect Duel”, “We”, “Us”), with its registered address at Axiou 30, Akropoli, 2013, Nicosia, Cyprus, collects, uses, shares, discloses and stores customer personal information through its website https://www.collectduel.com (the “Collect Duel Website”, “Our Website”) and any related domains, subdomains and related pages.

This Privacy Policy explains how your personal information is collected, used and stored during and after your use of Our Website. Our Services are available to residents of the United States, excluding residents of the States of Connecticut, Louisiana, Michigan, Montana, Nevada, Iowa, Maine, New Jersey, Tennessee, and Washington (collectively, the “Excluded States”). We comply with all applicable federal and state privacy laws and regulations in the jurisdictions where our Services are offered.

1. Definitions

1.1 The following definitions apply to this Privacy Policy:

1. 1.1.1“Account” means your user account with us, which you sign up for at www.collectduel.com;
2. 1.1.2“Card(s)” means the digital collectible cards offered for purchase on Our Website, which may be viewed in your Collection, used to play the Games, and delivered to you as a downloadable digital image file by email following purchase;
3. 1.1.3“Covered Information” means information which allows a specific person to be contacted either physically or online, including, without limitation, first and last name, address, email address, phone number, and an identifier which allows a specific person to be contacted either physically or online;
4. 1.1.4“Confidentiality Incident” means any access, use, loss or communication of a User's personal information, including any information relating to a User which can directly or indirectly allow them to be identified, which is not authorized by law, or any loss or other breach of the protection of such information;
5. 1.1.5“Data Protection Officer” means a role within a company or organization whose responsibility is to ensure that the company or organization is correctly protecting individuals' personal data according to current legislation;
6. 1.1.6“Event Tagging” means tags that allow us to monitor certain events completed through our Website (e.g., purchases);
7. 1.1.7“Marketing Pixels” means pieces of code that allow us to gather information about anyone who visits our Website, including their engagement with our webpage;
8. 1.1.8“Mobile Device Identifiers” means the unique customer identifier on every mobile device which is used to distinguish a mobile device. This unique identifier can be used for the purposes of internet-based advertising;
9. 1.1.9“Participant” means a User who purchases Cards and/or participates in the Games using Cards;
10. 1.1.10“Service” means any of the services available through our Website;
11. 1.1.11“Website” means our website at https://collectduel.com;
12. 1.1.12“User” means a person who uses the Service.

2. What We Collect

2.1 We collect information about you in a number of ways. For example, we collect directly identifiable information, information that you provide to us and it includes:

1. 2.1.1Your email address, physical mailing address, mobile phone number (and any other phone number(s) provided);
2. 2.1.2Personal information such as your first name, last name, and age;
3. 2.1.3Account login details, including your unique username, unique password and any photos associated with your Account;
4. 2.1.4Transaction and purchase information, such as records of the Cards you have purchased, your billing address, and payment card details (which are collected and processed by our third-party payment processors);
5. 2.1.5Records of our delivery of Card Files to your email address, including transmission logs;
6. 2.1.6Information sent as part of an email, or any other method of customer support;
7. 2.1.7Information we obtain from a third party (such as Facebook or Google) regarding your connection to our services;
8. 2.1.8Your location information, including information provided by a device interacting with our platform, which we use to confirm that you are located in the Permitted Territory;
9. 2.1.9Activity and device information about your use of our products or services, including which content you view or use, when and for how long you access our products or services, how often you use our services, how you heard about our services, the specific hardware model you are using, the device type you are using, other unique device identifiers, and error and crash logs; and
10. 2.1.10Any documentation which we request to verify that you are eligible to have an Account.

2.2 We may also collect information which does not directly identify you, as well as information about groups of customers which does not directly identify you, including, but not limited to, your patterns of use of the Website or the zip code/postal code associated with your device.

3. Your Representations

3.1 By providing your information to us, you represent that any information you provide is true and accurate. You acknowledge that your contact information, including but not limited to your phone number and email address, is true and accurate. Further, you confirm that you are the subscriber to any telephone number that you provide to us.

4. How We Collect Information

4.1 User information is collected in a number of ways, including when a User accesses our Service, registers an Account, makes a purchase, answers a survey (including those sent from a related third party), and in connection with any other service, feature or resource offered by us.

4.2 By providing your telephone number(s) to us, you agree to being contacted at the number provided. Ways in which you may be contacted include pre-recorded voice messages, autodialed calls, SMS messages and emails from or on behalf of us related to:

4.2.1 The Documentation;

4.2.2 Your Account and your purchases, including the delivery of Card Files; and

4.2.3 Promotional matters from or on behalf of us, provided you have opted in or provided your express consent for pre-recorded voice messages, autodialed calls, emails and SMS or text messages.

4.3 We may communicate in the ways described above even though a phone number is registered on a state or federal do-not-call list. We are not responsible for any charges incurred by Users from their telephone provider(s) for texts or calls received from or on behalf of us.

4.4 You may opt out of these messages by contacting us at [email protected] or by using the unsubscribe feature in the message.

4.5 We may also collect information from Users through telephone, video or correspondence, including email, instant messaging, physical mail, SMS and/or social media platforms. Telephone and video calls with us may be recorded for the purposes of training, quality control and compliance. By partaking in any such call with us as described above, you consent to such recording.

4.6 We use a variety of technologies embedded in our Website or in our applications on third-party sites and platforms, including cookies, pixels, tags and application program interfaces (“API”). For example, in order to enhance your user experience, we use industry-standard identifiers, such as cookies or similar technologies. A cookie is a small text file saved locally on your computer or mobile device when you visit our Website. This small text file may include a unique identifier, making it possible to distinguish your device from another device. Examples of similar identifying technologies that we may use are:

1. 4.6.1Marketing Pixels;
2. 4.6.2Mobile Device Identifiers (we may, at times, share your Mobile Device Identifiers with advertisers); and
3. 4.6.3Event Tagging.

4.7 Analytical tools may also be used to collect information, including when you visit our Website or use our applications or services on third-party sites or platforms.

5. How We Use Your Information

5.1 We may use your information for the purposes set out in this Privacy Policy. Your information may also be accessed by other companies within our group of companies when acting on our behalf as a data processor, as outlined in this Privacy Policy.

5.2 We retain all customer information collected by means described in this Privacy Policy as long as required by this Privacy Policy or as long as is permitted by law. We may share your information with our group of companies or third-party companies providing a service to customers directly or indirectly through us. We may use and/or share your information:

1. 5.2.1To provide services as requested by you, including the establishment and maintenance of your Account, the processing of your purchases, the delivery of Card Files to your email address, and routine security checks to ensure the security of your information;
2. 5.2.2To provide you with the best customer service experience possible. Information provided and/or collected from you will help us in responding to any customer service requests, including re-sending Card Files. Feedback provided by you may be used to improve our products and services;
3. 5.2.3In processing your purchases, to comply with due diligence requirements, including those related to fraud prevention and the verification of payment details. We do not share any payment information with third parties except our payment processors, to the extent necessary to provide transactional services;
4. 5.2.4To verify that you are located in the Permitted Territory and are otherwise eligible to use the Services;
5. 5.2.5In aggregated form, to best understand our users in order to deliver the most tailored user experience possible;
6. 5.2.6To contact you about our service, we may contact you by email, live chat, telephone, SMS, physical mail or social media in order to manage Promotions that you elect to enter;
7. 5.2.7In sending you important notices regarding matters such as changes to any of our policies; and
8. 5.2.8In complying with all our legal and/or regulatory obligations.

6. Your Rights Over Your Information

6.1 By law, you have a number of rights concerning the information about you that we collect and store securely. Please contact our us at [email protected] if you wish to exercise any of the rights outlined in this Section 6 or in Section 10.

6.2 You have the right to access personal information about you that we securely store, the right to object to the processing of your personal information, and the right to withdraw any consent given through this Privacy Policy.

6.3 The rights and disclosures described in this Privacy Policy are intended to provide you with, at a minimum, all rights and protections required by applicable law, as amended from time to time. Any reference in this Privacy Policy to a statute or regulation includes that statute or regulation as amended, together with any successor legislation and implementing regulations. If applicable law grants you rights or protections beyond those described in this Privacy Policy, nothing in this Privacy Policy limits, restricts, or waives those rights or protections, and in the event of any conflict between this Privacy Policy and applicable law, applicable law shall prevail.

7. How We Protect Your Information

7.1 Keeping your personal information secure is our top priority. Through the use of physical, electronic and operational protocols we are able to protect your personal information. We use industry-standard practices for data collection, data storage, and data processing to protect your information against unauthorized access, manipulation, disclosure or destruction. We regularly review our security practices and update them as needed.

8. How Long We Keep Your Information

8.1 We may retain your information as long as we require in order to fulfill the practices outlined in this Privacy Policy, in accordance with our commercial needs, or as permitted by law.

8.2 In the event that you or we close your Account, we may retain your Account information in order to resolve any further disputes or provide clarifications in regard to your Account, or as long as permitted by law. If you request that your personal information be permanently deleted or erased, we will require your written authorization to do so. Notwithstanding the foregoing, we may be required by law to retain certain information, including transaction records and Card File delivery records.

9. Sharing Your Information

9.1 We may share your information within our group of companies or with a third party who will provide services to you on our behalf (for example, including, but not limited to, payment processors, email delivery providers, and hosting providers). We may also share your information with other third parties in order to stay compliant with our legal obligations. We will only share the minimum amount of your information required to fulfill these purposes.

9.2 We may also share your personal information in connection with the sale, merger, acquisition (or similar transaction) of the company to a third party and/or the transfer of substantially all of the assets of the company to a third party.

9.3 Our Website may contain links to third-party websites. Those websites have their own privacy policies, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policy of any third-party website you visit.

10. Information for U.S. State Residents

10.1 Our Services are restricted to individuals who are at least eighteen (18) years of age and have attained the age of majority in their jurisdiction. Accordingly, we will never knowingly collect or maintain information from minors. If you believe that a minor may have provided us with personal information and you would like for us to delete that information, please contact us at [email protected].

State Consumer Privacy Rights

10.2 Depending on your state of residence, you may have the right to request that we disclose what personal information we collect from you, to correct inaccurate personal information, to delete that information, and, subject to certain restrictions, to opt out of the sale or sharing of your personal information.

10.3 You may exercise your privacy rights by contacting the Data Protection Officer by opening a ticket with our customer support at [email protected]. We will verify your identity when you request to exercise your rights. Logging into your Account may be sufficient; however, if we have reason to suspect that your Account has been compromised, or if we cannot otherwise verify your identity, we may request additional documentation.

10.4 You have the right to designate an agent to exercise your rights on your behalf. Your agent must verify authorization to make a request on your behalf by providing us with a signed written authorization or a copy of a power of attorney.

10.5 Where permitted under applicable state law, you have the right to request, up to two times in a 12-month period, that we disclose the categories of your personal information that we collect, use, and share, including the specific pieces of personal information we have collected from you and which information is shared with third parties for direct marketing purposes.

10.6 You have the right to request that we delete personal information that we collect from you. Some information may be exempt from such requests under California law.

10.7 You will not be denied access to the Services, or provided with a modified version of the Services, if you choose to exercise these rights.

10.8 We may sell or share information that directly identifies you, such as your name, telephone number, mailing address or email address, for cross-context behavioral advertising purposes, where permitted by applicable law. You may opt out of the sale or sharing of your personal information. If you would like to opt out, please contact the Data Protection Officer via [email protected].

10.9 You have the right to be informed as to how we respond to “Do Not Track” settings. We do not currently take actions to respond to “Do Not Track” settings and instead we adhere to the standards set out in this Privacy Policy.

California Collection Notice

The disclosures in this section are provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), and apply specifically to California residents; other states in which we operate may not require this same disclosure format. We may share the information described below with third parties for the following purposes: (i) with our group companies for the purposes described in this Privacy Policy; (ii) with vendors and partners we engage in order to provide you with the Services; (iii) if required to do so by applicable law or legal process; and (iv) if necessary to exercise, establish, or defend our legal rights.

We will maintain records of all Confidentiality Incidents in the form and for as long as required by applicable law.

State Data Security and Breach Notification10.10 Depending on your state of residence, you may have rights under applicable state data security and breach notification laws with respect to your personal information. We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of the personal information we collect. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

11. Changes to This Privacy Policy

11.1 This Privacy Policy may be updated from time to time to reflect changes in the law and changes to our customer data handling practices and internal policies. We will notify you of any material changes and, where required by law, we will obtain your consent. Notice of any material change (or changes) to this Privacy Policy may be made by posting such change (or changes) to the Collect Duel Website.

11.2 Any changes to the Privacy Policy will become effective when the updated Privacy Policy is posted on our Website.

11.3 Users are responsible for staying up to date on the changes to our Privacy Policy posted on our Website. We recommend checking this page regularly for updates. We will post the “date updated” at the top of the Privacy Policy.

11.4 This Privacy Policy is effective as of the “date updated” which appears at the top of this webpage, and supersedes and replaces any and all privacy policies previously in effect.

12. Contacting Us

12.1 If you have questions regarding this Privacy Policy or how we use or handle your personal information, please contact us at [email protected].