legal

Legal Stuff

LEGAL NOTICES & OFFICIAL DISCLAIMER

NOT AN OFFICIAL MINECRAFT PRODUCT OR SERVICE. NOT APPROVED BY OR ASSOCIATED WITH MOJANG OR MICROSOFT.

The Minecraft.gr community, website, Discord, and Minecraft server (“Rainbow” accessible via play.minecraft.gr) are independent entities and are in no way affiliated with, sponsored by, or endorsed by Mojang AB or Microsoft Corporation.

PRIVACY POLICY

Last Updated: August 9, 2026

1. Data Controller Identity & Scope

• Data Controller: Dimitrios Petropoulos (Individual / Sole Proprietor)
• Contact Email: [email protected]

Definitions:

• Platforms: All digital assets under the domain minecraft.gr (including play.minecraft.gr, store.minecraft.gr), our official Discord server, and physical event booths operated under the Minecraft.gr brand (e.g., Gameathlon).
• Services: Interactive Minecraft gaming servers, webstore transactions, community support forums, digital/physical promotional giveaways, and event activities.

Scope & Legal Framework:

This Privacy Policy outlines the practices of the Data Controller regarding the collection, processing, storage, and transfer of personal data across all Platforms and Services in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Greek Law 4624/2019.

2. Information We Collect In-Game & Legal Bases

We collect and process personal and technical data directly when you connect to and interact with our Minecraft server (“Rainbow” via play.minecraft.gr). Every category of collected data is tied to a specific legal basis under Article 6(1) of the GDPR.

Automated Processing Notice:

Our anti-cheat and moderation systems automatically log movement anomaly data and network packets to detect unfair advantages (e.g., fly, speed, or kill aura hacks). While temporary kicks or flags may occur automatically, any permanent ban or account restriction is subject to human administrative review upon submitting a support ticket.

3. Information We Collect via Web, Webstore & Discord

We collect personal data across our web platforms, e-commerce webstore, and community Discord server to process digital purchases, deliver customer support, and maintain site security.

Payment Processor Notice:

All financial transactions are handled securely by authorized third-party payment infrastructure providers (Tebex). These processors handle your raw payment details under their own respective privacy policies. The Data Controller only receives payment status webhooks, billing country codes, and transaction ID tokens necessary to execute order fulfillment and keep statutory accounting records.

4. Conventions, Giveaways & Commercial Partner Data Sharing

When you participate in promotions, contests, or physical event booths operated by Minecraft.gr (such as Gameathlon) or online platforms, we process your personal data to execute the event and, where explicitly chosen, to facilitate commercial partner marketing.

Giveaway Data Processing

• Data Collected: First Name, Last Name, Email Address, and Minecraft Username.
• Primary Purpose: Processing entry eligibility, selecting and notifying winners, and delivering physical or digital prizes.
• Legal Basis: Contract Performance (GDPR Art. 6(1)(b)) – Managing contest entry and prize delivery pursuant to giveaway terms.

Commercial Partner Sharing Framework

• Strict Explicit Opt-In: We never share your personal data with third-party commercial partners unless you affirmatively select an explicit, separate, and un-checked opt-in consent box (or provide explicit, logged verbal consent at physical booths) at the time of collection. Consent is entirely voluntary and is never a requirement to enter a giveaway or access our Services.
• Independent Data Controllers: Upon data transmission, Minecraft.gr and the designated commercial partner act as Independent Data Controllers. The partner processes your data under its own privacy policy and assumes independent legal liability under GDPR.
• Scope Limitation: Transferred data is strictly limited to First Name, Last Name, and Email Address.

International Data Transfers

For commercial partners located outside the European Economic Area (EEA), transfers are executed under Module 1 (Controller-to-Controller) of the European Commission’s Standard Contractual Clauses (Decision (EU) 2021/914). Governed by the laws of Greece, all international partner transfers fall under the jurisdiction of the Courts of Athens and the Hellenic Data Protection Authority (HDPA).

Authorized Commercial Partners Register 

Consent Logging & Verification (GDPR Art. 7)

In compliance with Article 7 of the GDPR and our contractual obligations, we maintain secure, tamper-proof digital logs of all consent actions. Logs record the exact timestamp, collection source (e.g., Gameathlon Booth 2026), unique device/IP identifier, and the specific version of the consent statement accepted.

Right to Withdraw Consent

You may withdraw promotional consent at any time without affecting prior processing legality by:

1. 1. Utilizing the one-click “Unsubscribe” link included in any email received from the commercial partner.

• Contacting us directly at [email protected] to request revocation of partner data sharing.

5. Data Retention Schedules & Automated Purging

We store personal data only for as long as strictly necessary to fulfill the operational, technical, and contractual purposes outlined in this policy, or as required to comply with statutory legal, tax, and regulatory audit obligations under European Union and Greek law.

Automated Purging & Data Erasure Procedures

• Automated Rotation: Server connection and network traffic logs are automatically overwritten or purged every 90 days via scheduled backend cron jobs.
• Right to Erasure (GDPR Art. 17): Upon receiving a verified data erasure request at [email protected], all non-anonymized identifiers associated with your account will be removed from active databases within 30 days.
• Statutory Retention Exemptions: In accordance with GDPR Article 17(3), requests for data erasure cannot fulfill the deletion of e-commerce billing records (retained under tax compliance laws) or active ban records necessary to maintain network security.

6. Data Subject Rights, Technical Security & HDPA Complaints

Under Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019, you hold specific statutory rights regarding the processing of your personal data across our Platforms.

Your Data Subject Rights

• Right of Access (Art. 15): Request confirmation as to whether we process your personal data and obtain a copy of the stored data.
• Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete personal information.
• Right to Erasure / “Right to be Forgotten” (Art. 17): Request the permanent deletion of your personal data from our active databases.
• Right to Restriction of Processing (Art. 18): Request that we temporarily suspend processing your data under specific dispute conditions.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object at any time to data processing based on Legitimate Interest or direct promotional communications.

CRITICAL NOTICE: Operational Impact of Account Erasure

Consequence of Data Deletion on Server Access:

Requesting the deletion of your personal data under GDPR Article 17 requires the complete and irreversible purge of your Mojang UUID mapping, player profile (playerdata), in-game inventory, claims, currency, ranks, and store purchase entitlements from our databases.

Once an erasure request is executed, you will be permanently unable to log into or play on the Minecraft server (play.minecraft.gr) using that account. Rejoining the server in the future will create an entirely new, unlinked account without restoring previously owned virtual items, progress, or ranks.

Technical & Organizational Security Measures (GDPR Art. 32)

We implement industry-standard security protocols to safeguard your personal data against unauthorized access, destruction, or disclosure:

• Access Control & MFA: Commercial partner databases and server backend administration networks are protected by Multi-Factor Authentication (MFA) and strict role-based access controls.
• Encryption in Transit: All web traffic across minecraft.gr and store.minecraft.gr is encrypted using Transport Layer Security (TLS /  SSL).
• Database Isolation: Raw payment data is never handled on our servers; it is isolated directly within PCI-DSS compliant infrastructure operated by Tebex.

Right to Lodge a Complaint with the Supervisory Authority

If you believe that our processing of your personal data violates applicable data protection laws, you have the statutory right to lodge a formal complaint with the Hellenic Data Protection Authority (HDPA):

• Supervisory Authority: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα – ΑΠΔΠΧ)
• Postal Address: Kifissias 1-3, P.C. 115 23, Athens, Greece
• Telephone: +30 210 6475600
• Email: [email protected]
• Website: www.dpa.gr

7. Cookies, Minors, Statutory Refund Waiver & Contact

Cookies & Tracking Technologies

We use essential session cookies and performance tracking technologies across our website (minecraft.gr) and webstore (store.minecraft.gr).

• Essential Cookies: Strictly necessary for site navigation, secure authentication, user session management, and DDoS protection via Cloudflare. These do not require user consent under EU Directive 2002/58/EC.
• Non-Essential / Analytics Cookies: Used to analyze traffic volume and user interaction patterns (e.g., Google Analytics). These cookies are deployed only if you affirmatively consent via our website’s cookie consent banner upon your first visit. You can modify or revoke your cookie preferences at any time through your browser settings or our website footer link.

Minors & Age of Digital Consent (Greek Law 4624/2019)

In accordance with Article 21 of Greek Law 4624/2019 and Article 8 of the GDPR:

• Our Platforms and Services are not directed at individuals under 15 years of age.
• Processing personal data of a minor under 15 is lawful only if explicit consent is given or authorized by the minor’s parent or legal guardian.
• We do not knowingly collect personal data from children under 15. If we become aware that personal data from a minor under 15 has been collected without verifiable parental authorization, we will take immediate technical steps to permanently delete the account and associated records from active databases.

Statutory EU Right of Withdrawal Waiver & Finality of Purchases

All financial transactions processed through our webstore (store.minecraft.gr) represent payments for digital virtual items, cosmetic privileges, or service ranks associated with the Minecraft server (“Rainbow”).

• Waiver of 14-Day Right of Withdrawal: Pursuant to Article 16(m) of EU Consumer Rights Directive 2011/83/EU and Greek Consumer Protection Law 2251/1994, by completing a purchase and requesting the immediate delivery/execution of digital content, you expressly consent to immediate performance of the contract and acknowledge that you lose your statutory 14-day right of withdrawal (cancellation/refund) once digital access or item delivery commences.
• Finality of Sales: All transactions are final. Dissatisfaction with virtual items, server performance variations, technical lag, or server operational shutdowns do not entitle the user to a refund or chargeback.
• Administrative Sanctions: If your account is banned, muted, or suspended for violating our Server Rules, you forfeit access to all purchased virtual items, ranks, and services without entitlement to compensation or monetary refund.

Changes & Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy to reflect operational shifts, technical updates, or statutory legislative changes. Significant policy modifications will be announced across our website (minecraft.gr) and our official Discord community server. Your continued access to our Platforms or Services following published changes constitutes acknowledgment of the revised terms.

3. How We Use Your Information

• To manage and improve the Server’s functionality and player experience.
• To provide support and respond to inquiries.
• To ensure compliance with our Terms of Service.
• To analyze gameplay trends and server performance.
• To communicate updates, events, or changes to the Server.
• To generate anonymized statistics for internal analysis and potential sharing with partners.

3.1 Commercial Partner Data Sharing & Promotions

When you enter a giveaway, contest, or promotional event hosted by Minecraft.gr (online or at physical conventions), we do not share your personal data with third-party commercial partners unless you grant explicit, separate, and affirmative opt-in consent at the time of entry. Granting consent to share data with partners is completely voluntary and is never a prerequisite for participating in our events or accessing our Platforms.

1. Independent Data Controller Relationship

Where separate consent is granted, Minecraft.gr and the designated commercial partner act as Independent Data Controllers. The partner processes your data under its own privacy policy once received. For partners located outside the European Economic Area (EEA), data transfers are safeguarded under European Commission Standard Contractual Clauses (Module 1 Controller-to-Controller) or applicable EU Adequacy Decisions.

1. Scope of Shared Data

Data transferred to commercial partners is strictly limited to:

• First Name
• Last Name
• Email Address

1. Official Commercial Partners Register

Depending on the specific campaign or booth opt-in you select, your data may be shared with the following authorized partners:

1. Consent Records & Withdrawal

Pursuant to GDPR Article 7, we maintain secure digital records of all consent choices (including timestamps, specific opt-in text, and collection source). You may withdraw your consent or opt out of partner communications at any time by:

1. Clicking the “Unsubscribe” link included in any email sent by the commercial partner.
2. Contacting us directly at [email protected] to request partner data transmission revocation.

4. Sharing Your Information

We do not sell or share your personal information with third parties, except in the following circumstances:

• Service Providers: Trusted third parties that assist with hosting, analytics, or technical support.
• Legal Requirements: When required by law or to protect the rights, property, or safety of the server, its players, or others.
• Anonymized Data: Aggregated, anonymized statistics derived from surveys or gameplay data may be shared with potential partners or stakeholders.
• Consent: If you give explicit consent for specific sharing.

5. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or destruction. However, no online platform can guarantee absolute security.

6. Your Rights

• Access to the information we hold about you.
• Request correction or deletion of your data.
• Restrict or object to certain types of data processing.
• Withdraw consent where applicable.

To exercise these rights, please contact us at [email protected] 

7. Cookies and Tracking Technologies

We may use cookies or similar technologies to enhance your experience on the Server website or related platforms. These tools help us understand usage patterns and improve our services.

8. Third-Party Links

Our website or community forums may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their policies.

9. Minors & Age Limit

In accordance with Article 21 of Greek Law 4624/2019, our Platforms are not directed at individuals under 15 years of age without verifiable parental consent. We do not knowingly collect personal data from minors under 15. If we confirm collection of data from a minor under 15 without legal guardian authorization, it will be deleted immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the Server website or in-game announcements. Your continued use of the Server after such changes indicates your acceptance of the updated policy.

11. Refund Policy & Statutory Right of Withdrawal

All transactions processed through store.minecraft.gr are payments for digital virtual items or services.

Waiver of Right of Withdrawal: Pursuant to EU Directive 2011/83/EU and Greek Consumer Protection Law 2251/1994, by completing a purchase and requesting immediate execution/delivery of the digital content, you expressly consent to the immediate performance of the contract and acknowledge that you lose your statutory 14-day right of withdrawal (cancellation/refund) once access to the virtual item or service is granted.

• Finality: All sales are final. Technical lag, dissatisfaction, server performance variations, or server operational shutdowns do not grant entitlement to a refund.
• Rule Infringements: In-game bans, mutes, or administrative sanctions resulting from rule breaches forfeit access to purchased items without entitlement to compensation or refund.

Parental Consent: If you are a minor, you must obtain the consent of a parent or legal guardian before making any purchases on the Server. The Server administrators are not responsible for any disputes arising from purchases made without proper consent.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:[email protected].