Privacy & Data Protection

Privacy Policy

This Privacy Policy explains what personal information iBoost collects, why it is used, how it may be shared, how long it is retained and what choices are available to customers and website visitors.

Last updated: October 10, 2026 Version: 1.1
01

Only what is necessary

We collect information needed to operate accounts, fulfill orders, provide support and protect the service.

02

Temporary credentials

Game credentials are requested only when needed and should be removed from active systems after completion.

03

Your privacy rights

You may request access, correction, deletion and other available privacy actions through our support channel.

Data controller

Legal entity IBOOST GAMING LTDA
CNPJ 49.909.485/0001-64
Registered office Online Operations Only — Brazil
Privacy contact support@iboostgaming.com
01

Scope of this Privacy Policy

This Privacy Policy applies to the iBoost website, customer accounts, registration and login systems, service calculators, checkout initiation, order records, internal support, account-recovery features and other services operated by IBOOST GAMING LTDA under the iBoost brand.

This Policy also describes situations in which a customer voluntarily chooses to communicate through an external platform such as email, Discord, Telegram or WhatsApp.

External websites and platforms have their own privacy practices. iBoost does not control how those independent services process information outside iBoost’s systems.

02

Information we collect

Account registration information

To create and use an iBoost account, customers may be required to provide:

  • An email address.
  • A Discord or Telegram contact.
  • An account password.

The iBoost account password should be stored in protected, non-readable form using appropriate password-hashing mechanisms. iBoost does not need to know the customer’s original account password.

Optional profile information

Customers may optionally provide:

  • First and last name.
  • A telephone or WhatsApp number.
  • Additional communication preferences.

A telephone number is not required unless it becomes reasonably necessary for a specific requested communication or security feature.

Google sign-in

If a customer chooses to sign in using Google, Google authenticates the account and may provide iBoost with information authorized by the customer, such as name, email address, account identifier and profile image.

iBoost does not receive the customer’s Google password. Use of Google sign-in is also subject to Google’s own privacy terms and account controls.

Order and service information

When a customer configures or purchases a service, iBoost may collect:

  • Selected game, platform, region and server.
  • Selected service, options, quantity and objectives.
  • Order price, currency, status and timestamps.
  • Customer instructions and service preferences.
  • Game username, account ID or character name.
  • Steam ID, Battle.net identifier or similar ID.
  • Progress records and delivery evidence.
  • Messages, screenshots and files sent to support.

Contract and acceptance records

iBoost may retain a record of the order configuration, price, currency, legal-document versions, acceptance timestamp, payment reference, progress and delivery.

Order contracts and receipts must not intentionally include game passwords, full payment-card information or temporary two-factor authentication codes.

Completion review and closure records

Order records may also include the assigned Booster identifier, submission of completed work for review, evidence links and screenshots, notification timestamps, customer responses, complaints and their resolution, and the date and method of closure. A final completion document may include the evidence link and distinguish express customer confirmation, administrative confirmation and closure after the unanswered review period.

Non-response must not be recorded as an express confirmation, signature or message from the customer. Where receipt of a notice has not been verified, a record that the notice was sent is not presented as proof that it was read.

03

Information collected automatically

When the website or customer account is accessed, technical information may be collected automatically for operation, security, diagnostics and abuse prevention.

This information may include:

  • IP address and approximate network location.
  • Browser type, device type and operating system.
  • Date, time and duration of requests.
  • Login attempts and account-security events.
  • Pages, forms or technical endpoints accessed.
  • Session identifiers and essential cookies.
  • Error, performance and diagnostic information.
  • Fraud, firewall and automated-traffic indicators.

iBoost may use automated security and anti-abuse technologies to distinguish legitimate visitors from bots, prevent fraudulent registrations and protect login, account-recovery and support features.

Such protections may operate invisibly and may process technical information such as IP address, browser characteristics, device signals and request activity.

04

How we use personal information

iBoost may use personal information to:

  • Create, operate and secure customer accounts.
  • Authenticate users and recover account access.
  • Configure, accept and fulfill service orders.
  • Assign qualified professionals to orders.
  • Communicate about progress, access and delivery.
  • Process payments, refunds and payment disputes.
  • Generate contracts, receipts and order records.
  • Respond to questions, complaints and support requests.
  • Prevent fraud, bots, abuse and unauthorized access.
  • Maintain website stability and technical security.
  • Comply with accounting, legal and regulatory duties.
  • Establish, exercise or defend legal claims.
  • Improve services using aggregated, minimized or appropriately protected information.

iBoost does not intend to sell personal information as an independent commercial product.

Marketing messages will not be sent unless the customer has made an appropriate choice to receive them or another valid legal basis applies. Order, security and account communications are not marketing messages.

We use completion and communication records to notify customers, provide access to delivery evidence, manage the 15-calendar-day completion review procedure described in the Terms & Conditions, investigate complaints and maintain an accurate closure history. The Privacy Policy describes this data processing; it does not itself obtain agreement to the contractual closure procedure or waive customer rights.

05

Legal bases for processing

Depending on the information and purpose, iBoost may process personal data based on:

  • Contract performance: to create accounts, process orders, provide services, communicate with customers and deliver results.
  • Pre-contractual requests: to answer questions, prepare custom quotes and review service feasibility.
  • Legal and regulatory obligations: to maintain required business, payment, tax and compliance records.
  • Legitimate interests: to secure the website, prevent fraud, maintain evidence, improve operations and protect legal rights, subject to applicable balancing requirements.
  • Consent: where required for optional marketing, non-essential cookies, certain third-party technologies or other optional activities.
  • Exercise of legal rights: to investigate, establish, exercise or defend claims, refunds, fraud reports and payment disputes.

Withdrawal of consent does not affect processing that is necessary under another lawful basis, including contract, legal obligations or the defense of rights.

06

Payments processed by Stripe

Payments are processed using Stripe. The customer may be redirected to a secure Stripe-hosted checkout page to complete the transaction.

iBoost does not receive or store the customer’s full payment-card number or card security code. Those details are submitted directly to the payment processor.

Stripe may process information including:

  • Name and contact information.
  • Billing and payment-method information.
  • IP address and device information.
  • Transaction amount, currency and date.
  • Merchant and purchase information.
  • Payment, refund and dispute status.
  • Fraud-prevention and authentication signals.

iBoost may receive limited transaction information needed to confirm payment, link the payment to an order, issue refunds, maintain accounting records and respond to disputes.

Stripe independently processes certain information under its own privacy policy and financial compliance obligations. Customers should review the Stripe Privacy Policy .

07

Game credentials and temporary access

Some services may require temporary access to a game or platform account. Depending on the selected service, the customer may voluntarily provide:

  • Game or platform login information.
  • A temporary password.
  • Character, account or platform identifiers.
  • Temporary authentication assistance or 2FA codes.

Credentials should be collected only when reasonably necessary and made available only to the administrator, assigned professional or authorized partner who requires access to perform the order.

Temporary authentication codes are intended for immediate use and should not be intentionally retained after the relevant authentication session.

Active copies of game credentials should be deleted, removed or securely obscured after the service is completed and the access is no longer required.

Customers are strongly encouraged to use an appropriate temporary password and change it immediately after service completion.

Credentials sent through Discord, Telegram, WhatsApp or email may also be retained by the selected external platform. For greater control, customers should use the official iBoost support channel whenever possible.

Residual encrypted or access-restricted copies may remain temporarily in rotating backups until those backups are replaced through the normal backup cycle. Such copies are not intended for ordinary operational use.

08

Support and external communication channels

The default support channel is the internal iBoost messaging system. Support conversations may contain customer questions, service instructions, order updates, screenshots and other information voluntarily provided.

Customers may request or choose communication through external channels such as:

  • Email.
  • Discord.
  • Telegram.
  • WhatsApp.

When a customer chooses an external channel, the provider of that platform may independently collect, store and process account, message, device and usage information under its own terms and privacy policy.

iBoost cannot control the external provider’s retention periods, backups, security procedures or independent use of information.

Customers should avoid sending unnecessary personal information and should never send payment-card details through support messages.

Separate order and support conversations

The order chat is used by the customer, assigned Booster and authorized administration to coordinate delivery. Support Chat remains a separate administrative conversation. Assignment to an order does not authorize a Booster to access the customer's unrelated support conversations. Authorized administration may review relevant messages for service quality, safety and dispute handling.

Booster access to an order conversation may be removed after reassignment or closure. A replacement Booster should receive only the information necessary for the remaining service, rather than automatic access to the previous Booster's conversation history. Removing participant access does not necessarily delete records retained for a justified administrative or legal purpose.

External coordination with an assigned Booster, including Discord, requires authorization from iBoost administration. Important agreements, delivery evidence and complaints should remain documented with iBoost. A customer's choice of channel does not authorize a Booster to reuse contact information for private sales or unrelated purposes.

Evidence hosted outside iBoost

Completion evidence may be supplied through an external image-hosting link, such as Imgur. That provider processes uploaded content and associated technical information under its own privacy practices. Opening a link may disclose connection and device information to the provider. A link is not necessarily private merely because it is not listed publicly; anyone who obtains it may be able to view the content.

Upload only evidence needed to demonstrate the service. Remove passwords, authentication codes, recovery information, payment details, unrelated conversations and unnecessary personal identifiers before uploading. Do not use public evidence links to submit identity-verification documents. Contact support if evidence contains sensitive information or an alternative submission method is needed.

09

How information may be shared

iBoost may share limited personal information only when reasonably necessary with the following categories:

  • Hosting and email infrastructure providers that operate website, database, server and email systems.
  • Payment processors and financial partners that process payments, refunds, authentication, fraud prevention and disputes.
  • Security and anti-abuse providers that protect accounts, forms, networks and website access.
  • Backup and disaster-recovery providers that maintain protected infrastructure copies.
  • Assigned professionals and verified partners who need limited information to perform an accepted order.
  • Authentication providers when the customer voluntarily chooses social login.
  • Communication platforms selected by the customer for external support.
  • Professional advisers such as accountants, auditors or legal advisers when reasonably necessary.
  • Public authorities when disclosure is legally required or necessary to protect rights and safety.

Assigned professionals should receive only the information required for the specific order. They are not authorized to use customer information for unrelated purposes.

iBoost may also disclose information when reasonably necessary to investigate fraud, respond to payment disputes, enforce agreements or defend legal rights.

Completion evidence and relevant order messages may be accessed by the customer, authorized administration and the currently assigned professional where necessary. Identity-verification documents and payout information must not be exposed to customers or unrelated Boosters. Relevant delivery and closure records may be provided to payment processors or authorized advisers when necessary to investigate a refund, chargeback or legal claim, subject to purpose and access limitations.

10

International data transfers

iBoost serves customers internationally and may work with providers, professionals and partners located in different countries.

As a result, personal information may be processed or accessed outside the customer’s country, including for:

  • Payment processing.
  • Hosting and technical infrastructure.
  • Account security and fraud prevention.
  • External communications.
  • Order assignment and fulfillment.
  • Customer support.

Where required, iBoost will use appropriate contractual, organizational or legal safeguards for international transfers.

Access by an assigned professional should be limited to the information necessary to perform the relevant order.

11

Cookies and similar technologies

iBoost may use cookies and similar technologies to operate login sessions, remember preferences, maintain security and support the checkout process.

Essential technologies

Essential cookies or local-storage items may be used for:

  • Customer login and session continuity.
  • Security and fraud prevention.
  • Currency and language preferences.
  • Form functionality and error prevention.
  • Checkout and order continuity.

These technologies may be necessary for the website to function and may not always be optional.

Analytics and marketing

iBoost may introduce analytics, performance or advertising tools in the future. Where required, non-essential tools will be controlled through a consent interface that allows visitors to:

  • Accept optional technologies.
  • Reject non-essential technologies.
  • Manage preferences by category.

The Privacy Policy and cookie information should be updated before a new optional analytics or advertising provider is activated.

Embedded content

Embedded content, including video players, may connect to third-party services and receive technical information such as IP address, browser details and interaction data.

Where required, optional embedded content may be delayed until the visitor provides the relevant consent.

12

Data security

iBoost uses reasonable technical and organizational safeguards designed to reduce unauthorized access, loss, misuse, alteration and disclosure.

Safeguards may include:

  • Encrypted connections.
  • Protected account authentication.
  • Password hashing.
  • Access restrictions and role separation.
  • Firewalls and automated abuse detection.
  • Security logging and login monitoring.
  • Protected backups and recovery procedures.
  • Restricted credential access.
  • Updates and vulnerability-management procedures.

No internet transmission, storage system or account-access method can be guaranteed completely secure.

Customers are responsible for protecting their iBoost password, avoiding password reuse and reporting suspected unauthorized access promptly.

Security incidents involving personal information will be assessed and handled according to applicable legal notification and remediation requirements.

13

Data retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, including contractual, security, accounting, fraud-prevention and legal purposes.

Active account information
While the account remains active, unless earlier deletion is requested and no legal exception requires continued retention.
Inactive customer accounts
May be deleted after more than 12 months of inactivity when there is no active order, unresolved dispute or legal need to preserve the account.
Order contracts and payment records
Generally retained for up to five years after order completion, or longer when required by law, accounting duties or an unresolved dispute.
Order and support conversations
Generally retained for up to five years when they form part of the order history or dispute evidence. Temporary credentials should be removed earlier.
Game credentials
Retained only while reasonably necessary to perform the service and removed from active systems after completion.
Temporary 2FA codes
Used only for the relevant authentication session and not intentionally retained afterward.
Security and technical logs
Generally retained for up to 180 days, unless a longer period is reasonably necessary for an investigation, dispute or security incident.
Rotating backups
Generally replaced through a normal cycle of approximately 30 to 90 days, subject to technical and provider configurations.
Optional marketing information
Until consent is withdrawn, the communication is no longer appropriate or the information is no longer necessary.

Information may be retained for a longer period where necessary to comply with law, prevent fraud, resolve a dispute or establish, exercise or defend legal claims.

When retention is no longer justified, information should be deleted, anonymized or securely isolated according to applicable requirements and technical limitations.

Review periods are not deletion periods

The 15-calendar-day completion review period is an operational period, not a promise to delete order records after 15 days. Evidence links, completion notices, review responses, complaint records and final completion documents follow the retention criteria for order and dispute records above. Only relevant information should be kept; administrative closure does not justify indefinite retention.

A complaint, payment dispute or legal preservation requirement may justify retaining the relevant records until that need is resolved. These records should then be deleted, anonymized or restricted when retention is no longer justified. Deleting an iBoost record does not necessarily remove an independently hosted screenshot or the external provider's backups; external-host removal requests may require contacting that provider.

14

Your privacy rights

Depending on applicable law, customers and visitors may request:

  • Confirmation that personal data is processed.
  • Access to their personal information.
  • Correction of incomplete or inaccurate information.
  • Deletion, anonymization or restriction of unnecessary information.
  • Information about relevant data sharing.
  • Withdrawal of consent for optional processing.
  • Objection to certain processing activities.
  • Portability where legally and technically applicable.
  • Review of certain automated decisions, if applicable.

A deletion request does not require iBoost to remove records that must be retained for legal obligations, payment disputes, fraud prevention or the establishment, exercise or defense of legal rights.

iBoost may request information reasonably necessary to verify the requester’s identity before disclosing, correcting or deleting account information.

Requests may be submitted to support@iboostgaming.com .

You may request correction of inaccurate completion or closure records and ask for review of applicable automated processing through official support. Reporting a delivery problem is a separate service complaint; specify your order number and the delivery issue so that administration can record it for review. A privacy request does not replace a refund request, and the operational completion period does not limit the exercise of applicable privacy rights.

15

Account closure and deletion

Customers may request closure of their iBoost account through the official support channel.

After a verified request, iBoost will remove or anonymize ordinary account information that is no longer necessary, subject to:

  • Active or incomplete orders.
  • Pending refunds or payment disputes.
  • Fraud and security investigations.
  • Accounting or legal record requirements.
  • The establishment or defense of legal rights.

Closing an account does not automatically erase every order record, contract or payment reference that iBoost must lawfully preserve.

Accounts that remain inactive for more than one year may be deleted or anonymized when no continuing purpose requires retention. Where reasonably possible, iBoost may notify the customer before deletion.

16

Younger users and parental permission

A person who has not reached the legal age to enter into a binding contract must obtain permission from a parent or legal guardian before creating an account, placing an order or providing personal information.

By accepting the applicable Terms and proceeding with a purchase, a younger user represents that the required parental or legal-guardian permission has been obtained.

Parents or legal guardians may contact iBoost to request information, correction or deletion relating to a younger user, subject to appropriate identity and authority verification.

iBoost does not intentionally request more information from children or adolescents than is reasonably necessary to provide the requested service.

If iBoost learns that personal information was provided without legally required permission, it may restrict the account and delete the information, except where limited retention is necessary for protection, legal compliance or dispute handling.

17

Changes to this Privacy Policy

iBoost may update this Privacy Policy when services, providers, legal requirements or data-processing activities change.

The updated version and its revision date will be published on this page. Material changes may also be communicated through email, the customer account or another appropriate channel.

If a new activity legally requires consent, iBoost will request that consent before beginning the optional processing.

18

Contact and privacy requests

Privacy questions, account-deletion requests, data-access requests and security reports may be submitted using:

  • Controller: IBOOST GAMING LTDA
  • CNPJ: 49.909.485/0001-64
  • Registered office: Online Operations Only — Brazil
  • Email: support@iboostgaming.com

To protect customer information, iBoost may request reasonable verification before responding to requests involving account access, disclosure or deletion.