1. Introduction

NEXUS CODE LLC (CNPJ: -), trading as NEXUS CODE LLC, operates EpicMu (www.epicmu.net). We are committed to protecting your personal data in accordance with the Brazilian General Data Protection Law (LGPD — Lei 13.709/2018) and other applicable regulations.

This Privacy Policy describes how we collect, use, store, and share your information when you use our website and game servers.

2. Data Controller

NEXUS CODE LLC

CNPJ: -

Data Protection Contact: contact@nexuscode.net

3. Data We Collect

3.1 Data You Provide

Account information: Username, email address, and password when you register on our game server.
Contact information: Name and email address when you submit support requests or contact forms.
Communication data: Messages sent through our support system, forums, or in-game chat.

3.2 Payment Data

Important: Payment data (credit card numbers, bank account details, and other sensitive financial information) is collected and processed directly by our third-party payment providers (Stripe, PayPal, PIX processors). We do not store this data on our servers. We only receive transaction confirmations (amount, date, status) necessary to deliver your purchased products.

3.3 Data Collected Automatically

Technical data: IP address, browser type, operating system, device information.
Usage data: Pages visited, time spent on pages, referral source.
Game data: In-game activity, character information, gameplay logs, and purchase history within our game servers.

4. Purpose & Legal Basis

We process your data for the following purposes, each with a corresponding legal basis under the LGPD:

Purpose	Legal Basis (LGPD Art. 7)
Creating game accounts and enabling gameplay	Performance of contract
Delivering purchased digital products	Performance of contract
Responding to support requests	Performance of contract
Preventing fraud and enforcing Terms of Service	Legitimate interest
Monitoring game server security and fair play	Legitimate interest
Improving our website and services	Legitimate interest
Complying with legal and regulatory obligations	Legal obligation
Sending promotional communications (opt-in only)	Consent

5. Data Sharing

We may share your personal data with the following categories of recipients:

Payment providers: Stripe, PayPal, and PIX processors — to securely process your payments. These providers act as independent data controllers for payment data.
Hosting providers: Cloud infrastructure providers that host our game servers and website.
Anti-fraud services: To verify transactions and prevent fraudulent activity.
Legal authorities: When required by law, court order, or to protect our legal rights.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Cookies & Tracking

Our website uses cookies and similar technologies:

Essential cookies: Required for the website to function (session management, authentication, security).
Analytics cookies: Help us understand how visitors interact with our website (page views, traffic sources).

You can manage cookie preferences through your browser settings or by using the cookie preferences link in our footer. Disabling certain cookies may affect website functionality.

7. Data Retention

Account data: Retained while your account is active and for 6 months after a deletion request, to allow for account recovery.
Transaction records: Retained for a minimum of 5 years as required by Brazilian tax legislation.
Game logs: Retained for up to 12 months for security and fair play enforcement.
Support correspondence: Retained for up to 24 months after resolution.

8. Your Rights (LGPD Art. 18)

Under the LGPD, you have the following rights regarding your personal data:

Confirmation & Access: Request confirmation of whether we process your data, and access to it.
Correction: Request correction of inaccurate or incomplete data.
Anonymization, blocking, or deletion: Request anonymization, blocking, or deletion of unnecessary or excessive data.
Portability: Request portability of your data to another service provider.
Deletion: Request deletion of data processed with your consent.
Information about sharing: Request information about which entities your data has been shared with.
Consent withdrawal: Withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at contact@nexuscode.net. We will respond within 15 business days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption for all data in transit
Access controls and authentication for server administration
Regular security reviews and monitoring
Secure password hashing for stored credentials

However, no method of transmission over the Internet is 100% secure. We encourage you to protect your account by using a strong password and not sharing your credentials.

10. International Data Transfers

Some of our service providers (hosting, payment processing) may be located outside of Brazil. In such cases, we ensure that adequate safeguards are in place as required by the LGPD, including contractual clauses that provide an equivalent level of data protection.

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately at contact@nexuscode.net so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes acceptance of the revised policy.

13. Contact & Data Protection Authority