Privacy Policy

1. Who processes your data

Data controller

SILICON DIGITAL SARL

Registered office

Angle Bd Abdelmoumen et Rue Soumaya, Résidence Shehrazade 3, 4ᵉ étage, n° 20, Palmiers, Casablanca, Maroc

Privacy contact

[email protected]

Trade register

580075

Any question about this policy or about exercising your rights can be sent to [email protected]. We reply within one month at the latest.

2. Scope and our two roles

VenAdmin is software sold to professionals who run video game and entertainment centers. That creates two distinct regimes, which should not be confused:

We are the data controller

for data about site visitors, people who contact us, and account holders and their users (managers, cashiers, technicians). We decide why and how that data is processed. That is the subject of this policy.

We are a processor

for the data our customers record in the Service about their own players: identity, phone number, prepaid time balance, spending history, loyalty points. The venue decides what it collects and why; we host it and process it on the venue's instructions.

This policy does not cover third-party sites we may link to, which have their own practices.

3. Data we collect

We collect no special-category data (health, opinions, origin, biometrics) and never ask for any. No card details pass through or are stored on our servers: subscriptions are paid by bank transfer, outside the Service.

4. Purposes and legal bases

Where processing rests on our legitimate interest, we have checked that it does not disproportionately affect your rights. You may object at any time (see « Your rights »).

5. Cookies and analytics

The site uses cookies that are strictly necessary to its operation, which do not require consent:

• a language preference cookie, remembering whether you read the site in French, English or Arabic;
• in the application, a session cookie that keeps you signed in and a token protecting against forged requests.

With your agreement, we use Google Analytics 4 to measure site traffic: pages viewed, referring page, device and browser type, country. It sets the following cookies:

Google Analytics 4 neither logs nor stores IP addresses: they are used only to derive an approximate country and are then discarded. We enable no Google advertising, no remarketing and no ad signals, and we cross-reference these measurements with no other source. Google acts here as a processor (see « Recipients and processors »).

These cookies are only set once you have accepted. Until you answer the banner shown on your first visit, or if you decline, the measurement script is not loaded at all and no request is sent to Google.

The home page offers a video tutorial hosted by YouTube (Google). The player is not loaded when the page is displayed: no request is sent to YouTube until you click « Play the video ». It then opens in privacy-enhanced mode (youtube-nocookie.com). Once playback starts, YouTube may set its own cookies and process browsing data under its own privacy policy.

Apart from the YouTube player, which only you can start, no advertising cookie, no social network pixel and no profiling tool is loaded on this site. You can delete all of these cookies from your browser; the language preference will be forgotten and the application session will end.

6. Retention periods

Player data recorded by a venue is kept for as long as that venue decides, and at the latest until its account is deleted, under the rules above.

7. Recipients and processors

We sell no data and disclose none to third parties for commercial purposes. The only recipients are our technical providers, bound by contract and allowed to process data solely for the service concerned:

Data may also be shared with our professional advisers (lawyer, accountant) bound by professional secrecy, or with an administrative or judicial authority where the law requires it. If the business were sold, data would transfer to the buyer under the same commitments, and you would be informed beforehand.

8. International transfers

Some of our providers are established outside Morocco, notably in the European Union, the United Kingdom and the United States. Your data may therefore be transferred to those countries.

These transfers are covered by appropriate safeguards: European Commission standard contractual clauses, contractual security and confidentiality commitments and, where applicable, recognised certification mechanisms. For processing subject to Moroccan law 09-08, transfers are carried out in accordance with the requirements of the CNDP, the Moroccan data protection authority.

A copy of the safeguards in place can be requested at [email protected].

9. Security

We implement technical and organisational measures proportionate to the risk, including:

• strict data isolation between venues, enforced by the database itself and not only by application code;
• encryption of communications in transit (HTTPS);
• passwords and PIN codes stored as irreversible hashes, never in clear text;
• role and permission management, with minimal access by default;
• audit logging of sensitive actions (payments, deletions, permission changes);
• regular backups and monitoring of administrator access;
• production system access limited to the people who need it.

No system is infallible. In the event of a data breach likely to create a risk for the people concerned, we notify the competent authority and, where the risk is high, the individuals and the customer venue concerned, within the timeframes set by regulation.

10. Your rights

Subject to the conditions set by the applicable regulation, you have the right to:

• access the data we hold about you and obtain a copy;
• have inaccurate or incomplete data corrected;
• request erasure of your data, except where we must keep it;
• request restriction of processing you contest;
• receive your data in a structured, machine-readable format and have it transferred;
• object to processing based on our legitimate interest, and to any marketing;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand;
• give instructions about what happens to your data after your death.

These rights are exercised at [email protected]. We may ask for proof of identity in case of reasonable doubt. We reply within one month, extendable by two months for complex requests, in which case you are informed.

A reminder: for data a venue records about its players, the request must go to the venue. If it reaches us directly, we forward it without delay and assist the venue in handling it.

11. Deleting your account

Account deletion is requested from within the Service or by email to [email protected]. We confirm the request before carrying it out, because it cannot be undone.

After confirmation, data remains exportable for 30 days and is then deleted from live systems. It subsequently disappears from backups as they rotate. Only data we are legally required to keep remains, principally invoicing records.

12. Minors

The Service is aimed at professionals. We do not create accounts for minors and do not knowingly collect their data through our own forms.

A venue may record minor players. As data controller, it is then for the venue to obtain the required parental authorisations and to comply with the rules applicable to admitting minors to its premises.

13. Changes to this policy

This policy may be updated to reflect changes to the Service, to our providers or to regulation. The last-updated date is shown at the top of the page.

Any material change, in particular a new purpose or a new processor, is brought to your attention by email or within the Service before it takes effect.

14. Contact

Personal data and rights requests

[email protected]

Support

[email protected]

Postal address

SILICON DIGITAL SARL - Angle Bd Abdelmoumen et Rue Soumaya, Résidence Shehrazade 3, 4ᵉ étage, n° 20, Palmiers, Casablanca, Maroc