Privacy policy

Last revised: 21 August 2026

18+ This Service is only for persons aged 18 or older.

AI / chat We may use AI tools to help review chat whenever we determine that moderation review is appropriate. They assist human moderators and are not the sole basis for a significant decision.

This Privacy Policy explains how HNG Group AS, Norway (“HNG Group AS”, “we”, “us” or “our”), collects, uses, stores and otherwise processes personal data when you use our websites, games, online services and related services (collectively, the “Service”).

HNG Group AS is the data controller for the processing of personal data described in this Privacy Policy unless otherwise stated.

We process personal data in accordance with the Norwegian Personal Data Act (personopplysningsloven), the General Data Protection Regulation (GDPR) and other applicable Norwegian and EEA legislation.

This Privacy Policy does not itself constitute consent to processing. Where processing requires your consent, we will request that consent separately.

1. DATA CONTROLLER

The data controller is:

HNG Group AS
Ulefoss, Norway
Email: privacy@hng-group.com

2. PERSONAL DATA WE COLLECT

Depending on how you use the Service, we may collect the following categories of personal data:

Account and contact information

This may include:

  • email address;
  • first and last name, where provided;
  • username and account identifiers;
  • address, country or region, where required;
  • information associated with third-party gaming platforms used with the Service.

Game and service information

When you use our games and services, we may process information including:

  • account and character identifiers;
  • game progress;
  • game activity and events;
  • multiplayer activity;
  • game statistics;
  • virtual items and virtual currency;
  • transaction history;
  • server activity;
  • reports and moderation information;
  • information necessary to detect cheating, abuse, fraud or violations of our Terms of Service.

Technical and usage information

We may automatically collect technical information including:

  • IP address;
  • device type;
  • operating system;
  • browser or client version;
  • login times;
  • server connections;
  • diagnostic information;
  • crash information;
  • security logs; and
  • other technical information necessary to operate, secure and improve the Service.

Communications

If you contact customer support or otherwise communicate with us, we may process the contents of your communication and information necessary to respond to your request.

Chat moderation and AI-assisted review

We may review chat and other user content whenever we determine that moderation review is appropriate, including to investigate possible breaches of our Terms of Service or to protect the Service and its users. We may review relevant communications, account identifiers and contextual information and may use automated tools, including artificial intelligence, to help identify and review relevant content. These tools assist our moderation team. Significant account sanctions are subject to human review and are not based solely on automated tools.

Payment information

When you purchase digital products or services, payments may be processed by third-party payment providers.

We may receive information concerning the transaction, such as the payment status, transaction identifier, amount, currency and purchased product.

We do not necessarily receive or store complete payment-card information when the payment is processed directly by a payment provider.

3. WHY WE PROCESS PERSONAL DATA

We may process personal data for the following purposes:

  • creating and administering user accounts;
  • providing and operating the Service;
  • providing multiplayer and online functionality;
  • processing purchases and providing purchased digital products;
  • maintaining game progress and statistics;
  • providing customer support;
  • communicating important information concerning accounts or the Service;
  • maintaining the security and integrity of the Service;
  • preventing and investigating fraud, cheating, abuse and unauthorized access;
  • enforcing our Terms of Service;
  • diagnosing technical problems;
  • improving and developing the Service;
  • complying with legal obligations; and
  • sending marketing communications where permitted by applicable law.

4. LEGAL BASIS FOR PROCESSING

Under the GDPR, our processing of personal data must have a legal basis.

Depending on the circumstances, we rely on one or more of the following:

Performance of a contract — where processing is necessary to provide the Service or products you have requested.

Legal obligation — where processing is necessary to comply with obligations imposed on HNG Group AS by law.

Legitimate interests — where processing is necessary for legitimate interests such as securing the Service, preventing fraud and cheating, operating our infrastructure, handling abuse and improving our services, provided those interests are not overridden by your rights and interests.

Consent — where we have specifically requested your consent for a particular processing activity. You may withdraw your consent at any time.

5. COOKIES AND SIMILAR TECHNOLOGIES

Our websites may use cookies and similar technologies.

Cookies that are strictly necessary for providing a service requested by the user may be used where permitted by applicable law.

For cookies and similar technologies that require consent under the Norwegian Electronic Communications Act (ekomloven) and applicable data protection law, we will request your consent before they are used.

Where consent is required, you may refuse consent or withdraw your consent at any time through the cookie settings made available on our Website.

Refusing optional cookies will not prevent access to functionality that does not depend on those cookies.

6. ANALYTICS AND ADVERTISING

Where applicable, we may use analytics services to understand how the Service is used and to improve its performance.

Analytics, advertising cookies or similar tracking technologies that require consent will only be activated after the required consent has been obtained.

Where personal data is used for direct marketing, you have the right to object to such processing at any time.

7. SHARING PERSONAL DATA

We may disclose personal data to service providers that assist us in operating the Service, including providers of:

  • hosting and server infrastructure;
  • payment processing;
  • customer support;
  • security and anti-fraud services;
  • analytics;
  • email and communications infrastructure; and
  • other technical services.

Service providers acting as processors may process personal data only in accordance with our instructions and applicable data protection requirements.

We may also disclose information where necessary to comply with applicable law, enforce our legal rights, investigate fraud or security incidents, or protect users and the Service.

If HNG Group AS undergoes a merger, acquisition, restructuring or sale of all or part of its business, relevant personal data may be transferred as part of that transaction subject to applicable data protection law.

8. INTERNATIONAL TRANSFERS

HNG Group AS is established in Norway.

Some of our service providers may process personal data outside Norway or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer has a lawful basis under Chapter V of the GDPR.

Depending on the destination and recipient, this may include:

  • an adequacy decision adopted by the European Commission;
  • the European Commission's Standard Contractual Clauses (SCCs);
  • another transfer mechanism permitted under the GDPR; and
  • supplementary safeguards where required.

9. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Retention periods may vary depending on the type of information and the reason it is processed.

For example, certain transaction and accounting information may need to be retained to comply with Norwegian legal obligations, while technical logs may be retained for shorter periods unless they are required for security, fraud prevention or dispute resolution.

When personal data is no longer required, it will be deleted or anonymized unless continued retention is required or permitted by law.

10. SECURITY

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

No online system can guarantee absolute security, but we regularly assess the measures appropriate to the nature and risks of our processing.

12. YOUR DATA PROTECTION RIGHTS

Subject to the conditions and limitations established by the GDPR, you may have the right to:

  • obtain confirmation of whether we process your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • object at any time to processing for direct marketing;
  • receive certain personal data in a structured, commonly used and machine-readable format and request data portability;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Certain rights are subject to exceptions under applicable law. For example, we may be required to retain information despite a deletion request where retention is required by law.

13. EXERCISING YOUR RIGHTS

You may exercise your data protection rights by contacting:

privacy@hng-group.com

We may request information reasonably necessary to verify your identity before fulfilling a request.

We will respond within the time limits required by applicable data protection law.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

14. THIRD-PARTY SERVICES

The Service may contain links to or integrations with services operated by third parties.

When you interact directly with a third-party service, that party may process personal data as an independent data controller under its own privacy policy.

We encourage you to review the privacy information provided by those services.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy when our processing activities, services or legal obligations change.

The current version will be published on our Website together with the date on which it was last updated.

Where required by law, we will provide additional notice of material changes.

16. CONTACT US

Questions concerning this Privacy Policy or the processing of your personal data can be directed to:

HNG Group AS
Ulefoss, Norway
Email: privacy@hng-group.com

To exercise your data protection rights, please email privacy@hng-group.com.