Privacy Policy

PRIVACY POLICY

Last updated: 20/01/2026

This Privacy Policy (also referred to as a Privacy Notice) explains how personal data is collected, used, stored, shared, and protected when you access or use the website operated under the trading name Epinworlds (the “Website”).

This Policy is issued in accordance with Regulation (EU) 2016/679 (GDPR) and the UK GDPR.

1. Data Controller and Contact Details

The data controller responsible for the processing of personal data is:

ASELLTD LTD
International House, 14 King Street
Leeds, United Kingdom, LS1 2HL
Registered in England and Wales

Email: info@epinworlds.com

Epinworlds is a trading name of ASELLTD LTD.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through www.epinworlds.com and related services.

It does not apply to third-party websites, platforms, or services that may be accessed via external links, including third-party payment platforms or game publishers. Such third parties act as independent data controllers under their own privacy policies.

3. Categories of Personal Data We Process

We process different categories of personal data depending on how you interact with the Website.

3.1 Personal Information (PI)

Information relating to an identified or identifiable individual, including:

• email address;

• IP address;

• device and browser information;

• account identifiers;

• transaction references.

3.2 Personally Identifiable Information (PII)

Information that can directly identify an individual, including:

• full name;

• billing address (where applicable);

• account login credentials;

• order history linked to an account.

3.3 Sensitive Information

We do not intentionally collect or process special categories of personal data (also referred to as sensitive data), such as health data, biometric data, racial or ethnic origin, or similar information.

If such data is incidentally provided (for example, within customer support communications), it will be processed only where strictly necessary and in accordance with applicable data protection laws.

4. How We Collect Personal Data

Personal data may be collected through:

• account registration forms;

• checkout and order processes;

• customer support communications (email or contact forms);

• cookies and similar tracking technologies;

• automated logging of technical and usage data.

Details on cookies and tracking technologies are provided in our Cookies Policy.

5. Purposes of Processing and Legal Bases

We process personal data for the following purposes:

Purpose	Legal Basis
Account creation and management	Performance of a contract
Processing orders and delivering digital products	Performance of a contract
Customer support and communications	Performance of a contract
Fraud prevention and security monitoring	Legitimate interests
Compliance with legal and regulatory obligations	Legal obligation
Website analytics and performance	Legitimate interests
Marketing communications (where applicable)	Consent

6. Payment Processing

Payments on the Website are processed by third-party Payment Service Providers (PSPs).

ASELLTD LTD:

• does not collect or store full payment card details;

• relies on PSPs that are required to comply with PCI DSS and applicable payment regulations.

Payment data is processed in accordance with the privacy policies of the relevant PSPs.

7. Sharing of Personal Data

Personal data may be shared with the following categories of recipients:

• payment service providers and payment intermediaries;

• fraud prevention and security service providers;

• hosting and IT infrastructure providers;

• customer support and communication service providers;

• public authorities or regulators, where required by law.

We do not sell personal data to third parties.

8. International Data Transfers

Where personal data is transferred or processed outside the United Kingdom or the European Economic Area, such transfers are carried out only where permitted by applicable data protection laws.

In such cases, ASELLTD LTD ensures that appropriate safeguards are in place, including approved contractual protections (such as Standard Contractual Clauses) and appropriate technical and organisational security measures.

Personal data is transferred only to service providers that have been assessed as providing an adequate level of data protection.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements.

Retention periods vary depending on the nature of the data and applicable obligations.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

However, no internet-based system can guarantee absolute security.

11. User Rights

You have the right to:

• access your personal data;

• request correction of inaccurate data;

• request deletion of your data;

• restrict or object to processing;

• request data portability;

• withdraw consent at any time (where processing is based on consent);

• lodge a complaint with a competent supervisory authority.

Requests may be submitted to info@epinworlds.com.

12. Marketing Communications and Non-Discrimination

You may choose not to receive marketing communications at any time.

Refusing consent for marketing purposes will not affect your access to the Website or Services, and you will not be discriminated against for exercising this choice.

13. Children’s Data

The Website and Services are not intended for individuals under the age of 18.
We do not knowingly collect personal data from minors.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes.

The version published on the Website at the time of use will apply.

15. Contact Information

For privacy-related enquiries or to exercise your rights, please contact:

info@epinworlds.com