The data controller
Processing of personal data on UpLoot is carried out by KrishDigital Solutions Limited, registration number 72185282, at Room 8, S-V, 6/F, Valiant Industrial Centre, 2-12 Au Pui Wan Street, Fo Tan, New Territories, Hong Kong. Any query about data protection can be addressed to the stated point of contact, which acknowledges receipt and replies within the periods set out in the applicable law.
Data collected by UpLoot
In the course of providing the service, UpLoot may collect several categories of data:
- Your Steam identifier and associated public information.
- Your trade link, needed to deliver skins.
- Information about deposits, withdrawals and upgrade history.
- Technical connection data.
Purposes and lawful bases
Data is processed for defined purposes: creating and running the account, carrying out operations, preventing fraud, meeting legal obligations and improving the UpLoot service. Each processing activity rests on an appropriate lawful basis, such as performance of a contract, compliance with a legal obligation or the legitimate interests of the controller.
Retention periods
Data is kept only for as long as necessary for its purpose, then deleted or anonymised. The table below summarises the periods for the main categories.
| Category | Purpose | Retention period |
|---|---|---|
| Account data | Running the account | The life of the account, then three years |
| Transaction data | Accounting obligations | Up to five years |
| Technical data | Security and statistics | Up to thirteen months |
Recipients and processors
Data may be shared with technical providers involved in hosting, payment handling and the delivery of skins. These processors have access only to the data strictly needed for their task and are bound by confidentiality and security obligations consistent with the UK GDPR. UpLoot does not sell personal data.
Transfers outside the UK
Where a transfer of data outside the United Kingdom is necessary, UpLoot ensures an appropriate framework through suitable safeguards, such as standard contractual clauses or another mechanism recognised under the applicable data protection law.
Your rights
Under the applicable law, every UpLoot user has rights over their data: the right of access, rectification, erasure, restriction, objection and portability. A request can be made to the stated point of contact. A user may also lodge a complaint with the Information Commissioner's Office, the authority responsible for data protection.
Cookies and tracking
UpLoot uses cookies that are necessary for the service to work and, where applicable, statistical cookies that require consent. These elements maintain the connection, remember certain preferences and analyse use of the service. Details of the tracking technologies used appear in the cookie policy.
Security of Steam transactions
Skin-related transactions rely on the trade link and the Steam API key. UpLoot recommends keeping this key confidential and enabling the protections offered by Steam, so as to limit unauthorised access to the account and inventory. These technical elements serve only to deliver skins and are not passed to third parties for commercial purposes.
Security and minors
UpLoot applies technical and organisational measures intended to protect data against unauthorised access, loss or alteration. As the service is reserved for people over the age of eighteen, the data of minors is not knowingly collected; were that to happen, it would be deleted as quickly as possible.
Consent and its withdrawal
Where processing rests on consent, for instance for statistical cookies, that consent is given freely and may be withdrawn at any time, without affecting operations carried out beforehand. Withdrawing consent is as simple as giving it, and UpLoot provides the means to change your choice easily. Other processing, based on a contract or a legal obligation, continues regardless of that choice, since it is necessary for the service to run.
Reporting a data breach
In the event of a data breach likely to create a risk to users' rights, UpLoot applies procedures allowing it to respond in good time. Where the law requires, the competent authority is informed, and affected users are notified if the risk is high. This approach complements the preventive measures and reflects the same logic of protecting the data entrusted to the platform.
Changes to this policy
This policy may be updated to reflect developments in the UpLoot service or in the law. The version published on the site at the time of reading applies, and it is advisable to check it from time to time.
