Security Policy
TLS Protocol
The COMPANY recognizes the importance of the security of Personal Data and electronic transactions and has taken all necessary measures, using the most advanced and modern methods, to ensure the highest possible level of security. All information related to users’ personal data is treated as confidential. The www.gameofmoneyforum.com (hereinafter the “Site”) uses the TLS protocol with 128-bit encryption for secure online commercial transactions. This encryp…
The TLS (Transport Layer Security) protocol is the successor to the widely used SSL and is now the global internet standard for ensuring proper encrypted communication between websites and users. It allows for the secure transfer of encrypted data between users and web servers. A TLS/SSL encrypted communication requires that all information sent between a User and a server be encrypted by the sending software and decrypted by the receiving software in cooperation with a globally accepted certificate aut…
All of the above are part of the information security process maintained by the COMPANY, which is PCI DSS certified, a standard aimed at organizations that handle sensitive information such as credit card and ID data.
According to this standard, for which the COMPANY is certified annually, all sensitive information must be managed with a focus on transaction security both in processes and IT systems. Specifically, the process generally requires the following:
| Control Objectives | PCI DSS Standard Requirements |
| Secure Network | Application of firewall protection for user data security Configuration and use of rolling access passwords |
| User Protection | Protection of stored customer data Encryption of sensitive data transmission and transactions when communicating via public networks (internet) |
| Vulnerability Management Process | Strict use and regular updating of antivirus systems on all vulnerable systems Development and management of secure systems |
| Strong Access Control Measures | Restriction of access to customer information only to authorized personnel Granting specific rights and IDs to authorized personnel Restriction of physical access to sensitive billing information |
| Regular Network Monitoring | Monitoring and detection of all network-level accesses Regular security audits of processes and systems |
| Maintain Data Security Policy | Creation and maintenance of a unified data security policy across both processes and systems |
User Identification
The credentials used for User identification are twofold: the Login ID (Username) and the Personal Secret Security Code (Password). Each time the User enters their credentials, they gain access to their personal account. This process is secured by encrypting data both during transmission over the internet and on the COMPANY’s servers. The User also has the ability to change their Personal Secret Security Code (Password) as often as they wish. After the desired code is entered, it is enco…
For this reason, only the User knows their password and is solely responsible for maintaining its confidentiality. The COMPANY cannot access the User’s secret code, but can only reset it. In case of loss or disclosure of the password, the User must immediately notify the COMPANY; otherwise, the COMPANY bears no responsibility for unauthorized use. The e-shop gameofmoneyforum.com of the COMPANY does not disclose or share any personal data or User information. Personal data is used exclusiv…
Personal Data Protection
When a User visits the Site or makes purchases, certain personal information (name, occupation, email address, home address, landline, mobile number, etc.) must be provided. This information, which relates to Personal Data, will be automatically processed and stored in automated files previously reported to the competent Authority, for which the COMPANY is the Data Controller in accordance with Law 2472/1997. The User guarantees and is responsible for the truth, accurac…
The COMPANY has legally established protective measures within its facilities, systems, and records and guarantees the confidentiality of Personal Data. However, it may disclose Personal Data or any other information it holds to competent public authorities if required by applicable law.
Furthermore, the COMPANY reserves the right to inform its suppliers with statistical sales reports, which will never include personal data capable of identifying individuals.
Purpose: The collection and automated processing of Personal Data aims to record the contractual relationship with the COMPANY, control, improvement, and adaptation to preferences regarding products and services, and to send, by electronic or traditional means, administrative, technological, organizational, and/or commercial information about the COMPANY’s products and services.
User Consent: The User consents and agrees to the processing of their personal data for smooth and efficient transactions between the parties, thereby explicitly authorizing the collection and processing of Personal Data as described above. The COMPANY may also transfer Personal Data to companies or individual businesses established in Greece or other EU countries to provide services related to the above purposes, including but not limited to direct marketing or advertising. The User expressly consents t…
Right of Access/Objection: The User has the right to access, correct, delete, or object to the processing of their data at any time. Additionally, the User’s consent may be revoked at any time.
Use of Personal Data for Promotional Purposes: The COMPANY offers Users and customers the option to be informed about new products and other offers, payment arrangements, etc., via advertising or informational messages sent to their email, postal address, or phone. The COMPANY will not misuse this service, and Users always have the option to unsubscribe from receiving such communications. Furthermore, the COMPANY may use the User’s browsing history on its Site for promotional actions on external websites…
“Recognizing the importance of electronic payment security, EveryPay is a licensed Payment Institution by the Bank of Greece (Decision No. 280/3/23-7-2018 GG B 3010/25-7-2018), and securely manages card payment transactions in accordance with the regulatory framework of the PCI DSS security standards. All EveryPay services are performed through secure connections with 256-bit SSL certificates. EveryPay also supports the 3D Secure service, an additional security layer for VISA, MasterCard, and America…