Privacy Policy

1.Who we are and scope

The MHX Launcher and all games distributed through it — currently Perfect Gear, as well as any made available in the future —, together the "Services", are developed and operated by MHX Tecnologia, registered under CNPJ no. 57.779.608/0001-83, headquartered in São Paulo - SP, Brazil ("MHX" or "we").

For the purposes of the Brazilian General Data Protection Law (LGPD — Law no. 13,709/2018), MHX is the controller of your personal data. Questions, requests and contact with the Data Protection Officer should be sent to: [email protected]

2.Data we collect

Data you provide:

Nickname;

E-mail address (a child's account may use the legal guardian's e-mail);

Date of birth, to identify the age group and apply the protections set out in the Terms of Use.

Data collected automatically while you use the Services:

Basic technical data (low risk — technical information that virtually every online game collects):

IP (Internet Protocol) address and access logs (date and time of each login and each time you enter a game);

Operating system and its version, system architecture, system and game language, and time zone;

Hardware configuration: processor model and number of cores, graphics card model, video memory, graphics driver version, graphics API in use (such as DirectX or Vulkan), total RAM, monitor resolution and refresh rate, and free space on the disk where the game is installed;

Technical session, performance and crash data;

Match and in-game transaction history.

Device identifiers (used exclusively for security):

Disk serial number, motherboard unique identifier (UUID), network adapter physical address (MAC) and graphics card model identification.

These identifiers make it possible to recognize the same device over time. They help us protect your account against unauthorized access, identify the use of cheating software and of accounts created to evade sanctions, and keep matches fair for everyone. We do not describe these mechanisms in detail, so as not to make them easier to bypass. This data is not used for advertising or shared for commercial purposes.

To avoid storing the same information repeatedly, on each access we record only the date, the time and the information that has changed since the previous access.

Passwords are stored exclusively in encrypted form, never as readable text. We do not collect your full name, tax ID, physical address, precise location or sensitive personal data. Card and payment data are handled directly by the payment provider — MHX has no access to them and does not store them.

3.Purposes and legal bases

We process your data only for the purposes below, each supported by a legal basis under the LGPD:

Creating and maintaining the account, providing the games and delivering purchased items — performance of a contract (Art. 7, V);

Protecting the account and preventing fraud, cheating and abusive behavior, including analyzing IP and hardware data to identify devices associated with violations and prevent banned users from creating new accounts — legitimate interest (Art. 7, IX) and regular exercise of rights (Art. 7, VI);

Providing support and resolving disputes — performance of a contract and regular exercise of rights (Art. 7, V and VI);

Ensuring stability and improving the Services — legitimate interest (Art. 7, IX);

Sending communications about the account, security and changes to the Terms of Use and this Policy — performance of a contract (Art. 7, V);

Complying with legal and regulatory obligations, such as keeping the access logs required by the Brazilian Civil Rights Framework for the Internet (Law no. 12,965/2014, Art. 15) and tax obligations — compliance with a legal obligation (Art. 7, II).

Data of children and adolescents is always processed in their best interest (Art. 14 of the LGPD). We do not sell personal data, do not share it for third-party advertising and do not use it for consumer profiling.

Anti-cheat systems may flag behavior automatically. You may request a review of any decision made solely on the basis of automated processing (Art. 20 of the LGPD).

4.Sharing and international transfer

Your data is shared only with:

Server hosting and infrastructure providers;

E-mail delivery providers;

Payment providers, at the time of a purchase;

Public authorities, when required by law or court order.

These partners act as processors, handling data only according to our instructions and under confidentiality and security obligations.

Some providers may keep servers outside Brazil. In such cases, the international transfer complies with Art. 33 of the LGPD and is carried out with adequate protection safeguards.

5.Retention and deletion

We keep your data while your account is active. After the account is deleted, the data is deleted or anonymized, except:

Access logs, kept for at least 6 months (Civil Rights Framework for the Internet, Art. 15);

Purchase records, kept for the period required by tax and consumer protection laws (up to 5 years);

IP and hardware data linked to violations, kept for as long as necessary to apply and enforce the sanction and to defend any legal proceedings (Arts. 7, VI and IX, and 16 of the LGPD).

6.Your rights (LGPD — Art. 18)

You may, at any time and free of charge:

Confirm whether your data is processed and access it;

Correct incomplete, inaccurate or outdated data;

Request the anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law;

Request the portability of your data;

Request the deletion of data processed on the basis of consent;

Be informed about whom your data is shared with, and about the possibility of not giving consent and its consequences;

Revoke your consent;

Object to processing carried out in breach of the law;

Request a review of automated decisions.

For children and adolescents, these rights may also be exercised by the legal guardian. Send your request to [email protected] — we will respond within 15 days (Art. 19, II, of the LGPD). We may ask for information confirming your identity before fulfilling the request, to protect your account. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).

7.Security

We use encryption in transit (TLS) and at rest, internal access control and continuous monitoring. In the event of a security incident that may cause relevant risk or harm to data subjects, we will notify the ANPD and those affected, as required by Art. 48 of the LGPD.