This notice applies to all individuals interacting with PowerPlay Corp worldwide, including customers, employees, contractors, and business partners. It is designed to comply with various privacy laws, including but not limited to:

• United States: CCPA, CPRA (California) and other applicable state laws.
• European Union & UK: General Data Protection Regulation (GDPR) and UK GDPR.
• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA).
• Other Jurisdictions: Privacy laws in countries where we operate.

We may collect and process the following types of personal data:

• Personal Identifiers: Name, contact details, date of birth, government-issued IDs.
• Account & Authentication Data: Login credentials, security settings.
• Financial Information: Payment details, transaction history, tax-related data.
• Employment & HR Data: For employees and contractors, including work history, compensation, and performance records.
• Technical Data: IP address, device type, browsing activity, and cookies.
• Marketing & Communication Preferences: Your interactions with our marketing communications.

Depending on the jurisdiction, we process personal data based on:

• Consent: When you provide explicit permission.
• Contractual Obligation: When processing is necessary to fulfill a contract.
• Legal Compliance: When required by law or regulation.
• Legitimate Interests: When necessary for business operations, fraud prevention, or security.

We use your personal data for the following purposes:

• Providing and improving our services, including reward programs and event management.
• Managing accounts, payments, and customer support.
• Ensuring platform security and preventing fraud.
• Complying with regulatory requirements and responding to legal requests.
• Personalizing content, marketing, and promotions.

We do not sell your personal data. However, we may share it with:

• Service Providers: Cloud hosting, payment processors, analytics providers.
• Business Partners: Organizations supporting our rewards fulfillment and event services.
• Legal & Compliance Authorities: When required by law or for regulatory obligations.
• Corporate Transactions: In case of mergers, acquisitions, or business restructuring.

If your personal data is transferred across borders, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) for data transfers from the EU.
• Compliance with regional data protection laws and frameworks.
• Encryption and secure storage to protect sensitive information.

Depending on your location, you may have rights regarding your personal data, including:

• Access & Correction: Request copies of your data and correct inaccuracies.
• Data Deletion: Request removal of personal data, subject to legal retention policies.
• Objection & Restriction: Limit certain types of processing.
• Opt-Out: Manage marketing preferences and cookie settings.