Privacy Policy
Last updated: October 2026
1. Controller
The controller for the processing of your data is A and K Esports FZ-LLC, VUNE1249, Compass Building - Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates, email: support@cat3coins.com. An email to this address is all you need for any privacy request.
2. In short
We process only the data needed for ordering, delivery, payment and support. Your data is stored on servers in the European Union (Hetzner Online GmbH, data centres in Germany and Finland). Our team accesses it from the United Arab Emirates. We use no analytics or advertising cookies, do not sell data and send marketing only with your consent. As a company based in the UAE we are subject to the UAE data protection law (Federal Decree-Law No. 45/2021); for customers in the EU, the EEA, the United Kingdom and Switzerland we also comply with the GDPR, the UK GDPR and the Swiss FADP.
3. Visiting the website
When you visit the site, our server processes technically necessary data: IP address, time, page requested, browser type and operating system. The purpose is the secure operation of the site and the defence against attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We delete server logs after 14 days unless they are needed to investigate an attack.
4. Cookies
We use only technically necessary cookies: a session cookie for the connection to the shop and the order process (deleted when you close your browser) and a cookie for your language choice (12 months). These cookies do not require consent (Art. 5(3) ePrivacy Directive as implemented locally, Art. 6(1)(f) GDPR). We do not use analytics, tracking or advertising cookies, which is why we show no cookie banner.
5. Orders and performance of the contract
For your order we process: email address, name, billing country or billing address, platform, amount ordered, price, order number, payment status and the payment provider's transaction ID, plus the delivery log (timestamps and amount transferred). The purpose is the performance of the contract including delivery, invoicing, refunds and complaint handling (Art. 6(1)(b) GDPR). We keep order and invoice data for seven years after the end of the relevant tax year, as required by the record-keeping rules of the UAE (Art. 6(1)(c) GDPR). By checking location and billing address we make sure that we do not deliver to customers in the UAE.
6. Credentials for your EA account
For delivery via Comfort Trade we need the email address and password of your EA account and 3 backup codes. You enter these details only in the order form. We store them encrypted, only authorised staff have access, and we use them solely to transfer the ordered amount into your club via the EA SPORTS FC Web App. In doing so, your credentials are used towards Electronic Arts just as with your own login; EA is itself responsible for the processing in its systems. We do not change account settings and do not read any other data from your account. We delete the credentials no later than 24 hours after delivery is completed or cancelled. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). After delivery we recommend changing your password and generating new backup codes.
7. Payment via PayPal
Payments are processed by PayPal (depending on your place of residence PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, or another company of the PayPal group). PayPal is an independent controller for payment data; PayPal's privacy statement applies. We receive from PayPal your name, email address, billing country, transaction ID and payment status, but no account or card details. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).
8. Support and complaints
Requests to support@cat3coins.com are processed on our own mail server. Complaints receive a reference number. The purpose is handling your request and performing the contract (Art. 6(1)(b) and (f) GDPR). We delete support and complaint records 24 months after they are closed, unless a retention obligation applies.
9. Recipients and processors
We pass on data only as far as needed for processing. We do not share data for advertising purposes. Authorities receive data only where we are legally obliged to provide it.
10. Your rights
You have the right to access your data, to rectification, erasure and restriction of processing, to data portability, and the right to object to processing based on legitimate interests. You may withdraw any consent at any time with effect for the future. Write to support@cat3coins.com. You may also lodge a complaint with a data protection authority: in the EU with the authority of your country of residence, in the United Kingdom with the Information Commissioner's Office, in the UAE with the UAE Data Office.
11. Minors
Our offer is aimed at adults only. We do not knowingly process data of persons under 18 and do not accept orders from minors.
12. Security
The connection to the shop is encrypted with TLS. We store credentials encrypted and with restricted access; access is logged. No automated decision-making, including profiling, takes place.
13. Notice for customers in the United States
We collect the categories of data described in this policy, share them only with the service providers named here and do not sell personal information. Because we use no tracking, Do Not Track signals from your browser have no additional effect. You may request access to or deletion of your data via support@cat3coins.com. Changes to this policy are published here with a new effective date.
14. Changes
We update this policy when our processes or the legal situation change. The version published here with the date shown above applies.