This Privacy Policy explains how Jabal Digital (“we”, “our”, “us”), a company registered in Lebanon and the operator of csheat.com, collects, processes, stores, and shares personal data.

We are dedicated to meeting all applicable data protection requirements, including relevant laws in Lebanon, the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and any other applicable privacy regulations. Depending on your place of residence or incorporation, additional data protection laws may apply to you.

In this Privacy Policy, “Personal Information” has the same meaning as “personal data” under the GDPR and UK GDPR. This refers to any information relating to an identified or identifiable natural person (the “data subject”). An identifiable natural person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Personal Data means any data, whether true or not, about an individual who can be identified (i) from that data alone, or (ii) from that data combined with other information to which we have or are likely to have access.

By using csheat.com, you confirm that you have read, understood, and agreed to this Policy.

Certain categories of personal information we collect are considered sensitive (such as biometric data or financial account details). csheat.com will obtain your explicit consent before collecting any sensitive personal information.

You are responsible for ensuring that all personal data you provide to us is accurate, complete, up-to-date, and not misleading. Failure to keep your information accurate and current may result in our inability to provide you with the products and services you have requested.

To update or correct your personal data, please contact us using the information in the “contact us” section on this page.

If you provide us with personal data relating to any other individual, you confirm that you have obtained all necessary consents from those individuals as required by law, and you agree to provide us with proof of such consents upon request.

1. Data Collection and Nature

To provide and improve our services, we may collect, store, and process the following personal data:

• Identification and Contact Data: full legal name, aliases, gender, date of birth, nationality, residential or postal address, government-issued ID details (e.g. identity card, passport, or driver's license), email address, phone number, and social media or messaging handles.
• Account & Authentication Data: username, password, third-party account credentials (such as Steam or Discord login details), and account activity.
• Financial & Transaction Data: payment card details, bank account information, digital wallet addresses, public cryptographic keys, digital asset holdings, transaction history, and trade records.
• Technical & Usage Data: IP address, geographical location, device identifiers, mobile device ID, browser type and version, operating system, internet service provider, referrer websites, pages visited, time and date of visits, time spent on pages, features used, and other diagnostic or interaction data.
• Communications & Profile Data: customer support interactions, chat logs, correspondence, feedback, survey responses, community forum posts, and other personal opinions shared with us.

This information is automatically collected when you access or interact with csheat.com, register or update your account, make a purchase, post on the platform, or interact with other users. We may also receive personal data from our affiliates, service providers, and marketing or analytics partners (including during name screening and biometric verification as part of our KYC process). This may include photographs, video, voice recordings, and recordings of video calls. Additionally, to the extent permitted by law, we may obtain contact, address, or demographic information about you from commercially available sources. We and our partners use technologies such as cookies, beacons, tags, and scripts to analyze trends, track user activity, administer the platform, and gather demographic information. These tools help us deliver and improve our services, store your preferences, assess the effectiveness of our marketing campaigns, and show you more relevant content on other websites. We may receive both individual and aggregated reports based on this data.

2. Purpose of Use

• Account registration and management, including identity verification, “Know Your Customer” (KYC), customer due diligence, and ongoing account administration.
• Provision of our services, particularly in-game item trading, marketplace operations, escrow services, and related platform features.
• Processing payments and payouts with our partner payment operators who are tasked in receiving buyer payments, disbursing funds to sellers, calculating and remitting applicable taxes (including VAT), and handling chargebacks, refunds, and transaction disputes.
• Compliance with legal and regulatory obligations, including anti-money laundering (AML), counter-terrorist financing (CTF), and requirements from applicable laws, regulators, or authorities.
• Fraud detection, prevention, security, and risk management, including anti-scam, anti-counterfeiting, and cybersecurity checks.
• Service improvement and development, such as research, analytics, troubleshooting, technical maintenance, bug fixes, and enhancing our products and features.
• Marketing and communications (only where we have your consent or where otherwise permitted), including promotional messages, updates about our services, push notifications regarding transactions, and personalized offers.
• Customer support and community management, including responding to queries, complaints, feedback, and facilitating interactions between users.
• Protecting our rights and interests, such as enforcing our terms, protecting our platform, managing legal risks, and seeking professional advice (legal, tax, or otherwise).
• Financial, regulatory, and internal reporting, including audit, record-keeping, and risk management purposes.

We may also use your personal data for any other purposes that are compatible with the above or as set out in the terms and conditions governing your use of csheat.com.

These activities are carried out based on our legitimate business interests, contractual necessity, legal obligations, or your consent (where required).

3. Our Browser Extension

We may provide a browser extension to enhance certain marketplace features on csheat.com, such as trade tracking, trade verification, and seamless account or session connectivity with supported platforms.

The extension is designed exclusively to help users monitor and verify trades within csheat.com and Steam-connected workflows.

If you decide to install and use the browser extension, we will collect and process only the minimum data required to deliver these features. This may include:

• Account and session status related to our services (e.g., whether you are logged in);
• Trade-related information needed to identify, display, and update active trades and verification processes;
• Limited Steam page data and Steam session/authentication state strictly necessary for Steam-connected trading features;
• Local extension data stored in your browser, such as connection status, cached session details, and active trade records.

This data is used solely for the following purposes:

• Detecting your account and session status;
• Enabling trade tracking and verification features;
• Displaying the extension interface on supported pages;
• Synchronizing trade and connection status with csheat.com services;
• Maintaining proper extension functionality across browser sessions.

The browser extension collects only the information necessary for these functions. It does not collect unrelated browsing history, content from other websites, keystrokes, passwords, payment details, or private communications.

Data gathered through the extension is not sold or shared with any third parties. It is used exclusively by us to operate, maintain, and improve trade tracking and related features on the platform.

The extension may communicate with our servers (including real-time services) to retrieve or update trade status, verification status, and connection information. It does not download or run any remote code — all executable code is included in the extension package during installation or updates.

To function properly, the extension may request standard browser permissions such as host access, cookie access, scripting access, storage access, and background processing. These permissions are used only for the stated purposes of trade tracking, verification, and session management.

You can stop this data processing at any time by disabling or uninstalling the browser extension. Once removed, the extension will no longer access browser data, and we may no longer be able to provide full access to certain features, including trade tracking, trade verification, and Steam-connected marketplace functions.

4. Transfer of Personal Data

We may transfer, store, and process your personal data in jurisdictions outside your country of residence, including outside the European Economic Area (EEA) and the United Kingdom. In such cases, your personal data may be processed in countries where data protection laws differ from those in your jurisdiction.

Some of these countries are covered by adequacy decisions issued by the European Commission and/or the UK Government (as applicable). These countries are recognized as providing an adequate level of data protection under GDPR and UK GDPR, allowing transfers under Article 45 of the GDPR.

For transfers to countries that do not benefit from an adequacy decision (“Restricted Countries”), we ensure appropriate safeguards are in place to protect your personal data. We will either:

• Enter into appropriate data transfer agreements based on the Standard Contractual Clauses approved by the European Commission, the UK Information Commissioner's Office, or other authorized bodies (as applicable); or
• Rely on other valid transfer mechanisms permitted under the GDPR and UK GDPR.

We take all reasonably necessary steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy. This includes implementing appropriate technical and organizational security measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

By using csheat.com and submitting your personal data, you acknowledge and agree to the international transfer of your information as described in this section.

5. Cookies and Tracking Technologies

csheat.com uses cookies and similar tracking technologies. A cookie is a small text file placed on your computer or mobile device when you visit our website or use our services. It may contain an anonymous unique identifier. These technologies collect information about your visit and usage, including your IP address, how you arrived at our site, your navigation within the platform, browser type and version, device type and operating system, internet service provider, referring and exit pages, date and time of access, clicks, ads viewed, and how you interact with our services.

We use cookies and other tracking technologies for the following purposes:

• To enable and facilitate your sessions on the platform;
• To remember your preferences and settings;
• To provide personalized features, content, and services;
• To display relevant advertisements and promotions;
• To analyze usage, compile statistics, and improve our services.

Examples of cookies we use include:

• Authentication Cookies - to sign you in and verify your identity;
• Session Cookies - to operate the website and maintain your session;
• Preference Cookies - to remember your chosen settings;
• Security Cookies - to protect the platform and detect fraudulent activity;
• Third-Party Cookies - from our service providers to integrate external functionality.

We and our service providers or business partners may also automatically collect additional information (where permitted by law), such as:

• Device details (operating system type and version, manufacturer, model, screen resolution, device identifier);
• Browser information;
• General location data (city, state, or region);
• Your activity on the platform (pages viewed, duration and frequency of use, searches, interactions with other users, and settings).

This information may be collected over time and across different websites and applications by our partners. You can control cookies through your browser settings. You may block or delete cookies; however, if you do so, some features and functions of csheat.com may not work properly.

6. Our Jurisdiction and Offshore policy

This Privacy Policy and your use of csheat.com shall be governed by and construed in accordance with the laws of the Republic of Lebanon, without regard to its conflict of laws principles.

We take commercially reasonable measures to protect your personal data in accordance with this Privacy Policy, whether processed inside or outside Lebanon. By accessing or using our services, you acknowledge and agree that your personal data may be transferred to, stored, and processed in countries outside Lebanon, which may have different data protection laws than those in your jurisdiction.

Any dispute, claim, or controversy arising out of or in connection with this Privacy Policy (including its existence, validity, or termination) shall be finally resolved by arbitration under the rules of the Lebanese Arbitration Centre (or any mutually agreed arbitration institution) in accordance with applicable Lebanese law. The seat of arbitration shall be Beirut, Lebanon. The language of the arbitration shall be Arabic. The arbitral award shall be final and binding on the parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.

This includes retaining your information for the duration of your active account on csheat.com and for as long as it remains necessary for our legitimate business or legal purposes. Such purposes may include facilitating digital asset transfers, handling trade verifications or disputes, responding to queries or complaints, preventing fraud and financial crime, and complying with regulatory or legal obligations.

For example, we may retain certain transaction records for at least five years to meet our obligations under applicable laws, including anti-money laundering (AML) requirements.

Once your personal data is no longer needed for these purposes, we will either securely delete it from our systems or anonymize it so that you can no longer be identified from it.

We limit the collection and retention of your personal data to what is reasonably necessary to provide our services and comply with legal requirements.

8. Data Breach

If we become aware of a personal data breach — such as any unauthorized access, accidental loss, or unlawful disclosure of personal data — we will promptly assess the potential risks to your rights and freedoms.

If the breach is likely to result in a high risk to you (whether physical, financial, or non-material), we will notify the relevant data protection authority without undue delay and, where possible, within 72 hours of becoming aware of the incident. If we are unable to notify within 72 hours, we will document the reasons for the delay and provide the notification as soon as practicable.

Where required by applicable law, we will also inform the affected individuals directly. In such cases, we will provide clear details about the breach, the measures we are taking to address it, and practical steps you can take to protect yourself.

9. Amendments to This Policy

We reserve the right to update or modify this Privacy Policy from time to time. We may do so to reflect any changes in how we collect, use, or process your personal data, or to ensure compliance with new or amended laws and regulations.

Any updates will be posted on csheat.com. When we make material changes, we will also update the “Last Updated” date at the top of this Policy and, where appropriate, provide a prominent notice on the website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of csheat.com after any changes have been posted will constitute your acceptance of the updated Policy. All interactions, transactions, and dealings with us are governed by the version of the Policy in effect at the time.

10. Children's Privacy

Our platform, application, and services are not directed at or intended for use by children. We do not knowingly collect, use, or maintain personal data from children under the age of 18, or under the applicable minimum age threshold in your jurisdiction (for example, under 16 in the United States).

If we become aware that we have unintentionally collected personal information from a child without appropriate parental consent, we will promptly delete that information, unless we are legally required to retain it.

If you are a parent or legal guardian and believe we may have collected your child's personal data, please contact us using the information in the “contact us” section on this page.