BG EN
Registration
Main navigation

Privacy Policy

EVOWOW Privacy Policy

This Policy explains how EVOWOW collects, uses, stores, and protects personal data when you use the website, game server, and related services.

1. Data Controller

EVORIUM Ltd.
4 V. Levski St.
Veliko Tarnovo, Bulgaria

For privacy questions or to exercise your rights, use the Privacy request category in Feedback.

2. Personal Data We Process

  • Account data: username and email address.
  • Authentication data: the SRP6 verifier/hash; passwords are not stored in plain text.
  • Network and technical data: registration and login IP addresses, login history, and website/server logs.
  • Game data: accounts, characters, game progress, and normal game logs.
  • Support data: information voluntarily submitted through Feedback.
  • Transaction data: internal/provider references, beneficiary username, credited or spent points, purchase status, and delivery records. EVOWOW does not store card or bank-account details.
  • Optional analytics data: website usage information processed through Google Analytics only after consent.

3. Purposes and Legal Bases

Data is processed to provide accounts and gameplay, deliver requested transactions, secure the service, prevent abuse, provide support, comply with legal obligations, and establish or defend legal claims. The applicable bases include performance of the relationship with the user, legitimate interests in service security, legal obligations, and consent where consent is required.

4. Payments and External Payers

PayPal and SMS providers process payments under their own terms and privacy policies. EVOWOW's current SMS offering is limited to Bulgarian mobile services and Bulgarian mobile numbers, although the provider may support other countries independently. An SMS is billed to the telephone subscription that sent it, while the submitted username identifies the beneficiary EVOWOW account. EVOWOW does not infer that the beneficiary owns the telephone or made the payment.

5. Cookies, Cloudflare, and Google Analytics

Technical cookies are used for essential operation, security, language, and user choices. Cloudflare Turnstile may process IP addresses and technical information for anti-bot protection.

Google Analytics is optional and is not loaded until you consent. You may refuse or change your choice at any time through Privacy settings. Refusing analytics does not restrict normal use of EVOWOW.

6. Recipients and International Processing

EVOWOW does not sell personal data or provide it to advertisers. Data may be processed by hosting and infrastructure providers, Cloudflare, Google Analytics after consent, PayPal, and SMS payment providers. It may be disclosed to competent authorities where legally required or permitted.

Main infrastructure is in the European Union. Where a provider processes data outside the EEA, an applicable transfer mechanism such as an adequacy decision or Standard Contractual Clauses must be used where required.

7. Retention

  • Accounts, characters, Donate Points, and game progress are retained for the account lifetime. Inactivity alone does not close an account or expire these records.
  • Normalized PayPal and SMS accounting evidence is provisionally retained for ten years from 1 January following the relevant accounting period.
  • Shop, Character Service, and referral history is retained for the account lifetime and five years after account closure.
  • Raw login, IP, security, Nginx, and expired-ban evidence is retained for no more than two years. Archived security and Nginx logs expire after six months. An active permanent ban is retained while it remains enforced.
  • Privacy-request cases and correspondence are retained for five years after closure. Ordinary Feedback correspondence is retained for two years after the last message.
  • Encrypted database backups used for disaster recovery expire after 90 days. Completed erasures and anonymizations must be reapplied before a restored backup returns to service.
  • Detailed Google Analytics data is retained for fourteen months without extending the period when a user returns.

Anonymous aggregate statistics may remain when reidentification is not reasonably possible. A validated legal or regulatory obligation or legal claim may place only the relevant records on a reviewed legal hold. A hold does not extend retention for unrelated records.

8. Your Rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, objection, portability, or withdrawal of consent. Use Feedback to submit a request. Reasonable identity verification may be required. You may complain to:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd.
1592 Sofia, Bulgaria
Email: kzld@cpdp.bg
https://cpdp.bg/

9. Children’s Data

Independent registration is intended for users aged at least 14. Real-money payment must be initiated by an adult payer who is at least 18 and authorized to use the payment method. The payer may differ from the beneficiary account holder.

10. Changes

Material changes will be announced on the website and identified by a new version.

Version 2026-09-10.2