Privacy Policy

Last Updated: 1st October 2026 • Compliance Standard: UK GDPR / DPA 2018 • Controller ID: SPH-LDN-2026

1. Identity of the Data Controller

Under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the designated Data Controller responsible for the processing of your personal data on sigilplayhub.com is:

2. Information We Collect

We adhere to strict data minimization principles. We only collect information strictly required to deliver our social simulation services:

• Account Information: When you register an account, we collect your self-selected username, electronic mail address, and a one-way irreversibly hashed representation of your password (generated via PHP BCrypt). We never possess or store plaintext passwords.
• Player Progress Records: Virtual Sigil Shards balance, VIP status level, experience points (XP), quest completion flags, and the timestamp of your most recent Fortune Wheel spin.
• Technical & Telemetry Data: IP address (anonymized/truncated), browser type, screen resolution, operating system, and session timestamps used exclusively for cybersecurity monitoring and load distribution.
• Communications Data: Inquiries, bug reports, and messages voluntarily transmitted to our support concierge at 20 Fenchurch Street, London.

3. Legal Bases for Processing (UK GDPR Art. 6)

We process your personal information strictly under recognized statutory legal bases:

• Performance of Contract (Art. 6(1)(b)): Providing access to your player sanctuary, tracking virtual tokens, fulfilling daily spin limits, and executing game session state.
• Legitimate Interests (Art. 6(1)(f)): Protecting our portal against automated bots, distributed denial-of-service (DDoS) exploits, and credential stuffing attacks; optimizing server load across UK networks.
• Consent (Art. 6(1)(a)): Non-essential analytical cookies gathered via our Google Consent Mode v2 banner, which you can freely grant, deny, or revoke at any time.

4. Cryptographic Storage & Data Security

All account records are stored in hardened, restricted-access server directories protected by web server security policies (Deny from all) and concurrency locks (flock). All communications between your client device and our London infrastructure are encrypted using transport layer security (TLS 1.3 / 256-Bit SSL).

5. Data Sharing & Third Parties

We do not sell, rent, monetise, or trade your personal information to third parties. Third-party iframe game containers (such as Play'n GO demo sandboxes) operate within isolated sandboxes. We do not transmit your account credentials or email addresses to external game developers.

6. Your Statutory Rights Under UK GDPR

As a resident of the United Kingdom or European Economic Area, you hold extensive statutory rights regarding your personal data:

• Right of Access (Art. 15): You may request a complete copy of all personal records stored regarding your profile.
• Right to Rectification (Art. 16): You may update or correct inaccurate profile details.
• Right to Erasure / “Right to be Forgotten” (Art. 17): You may instruct us to permanently purge your account and delete your records from our storage.
• Right to Restriction of Processing (Art. 18): You may restrict the processing of your data under specific conditions.
• Right to Data Portability (Art. 20): You may receive your data in a structured, commonly used, machine-readable JSON format.
• Right to Object (Art. 21): You may object at any time to processing based on legitimate interests.

To exercise any of these rights, simply email our Data Protection Officer at privacy@sigilplayhub.com. We fulfill verifiable requests within thirty (30) days without charge.

7. Right to Lodge a Complaint with the Supervisory Authority

If you believe our processing of your personal data infringes applicable data protection statutes, you maintain the legal right to lodge a complaint with the UK supervisory authority:

8. Inquiries & Data Protection Officer Contact

For any inquiries concerning this Privacy Policy or our security protocols: