Privacy Policy

DuckSkins.com is operated and owned by HEXALOOT SERVICES LTD (Reg. No: HE480765) Address: 30 Kosta Anaxagora, 2014, Nicosia, Cyprus

Warning! Please read this Privacy Policy carefully before using duckskins.com and its software.

This Privacy Policy explains how HEXALOOT SERVICES LTD, operating duckskins.com, collects, uses, stores, protects, and discloses personal data when you access or use duckskins.com, log in through Steam, use your account, make purchases, open cases, receive skins, contact support, or otherwise interact with the Service.

By using duckskins.com, registering, authorizing through Steam, or continuing to use the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Terms and Definitions

In this Privacy Policy, unless otherwise expressly provided, the following terms shall have the following meanings:

"Service" means the website duckskins.com, its software, features, user account system, case-opening functionality, skin delivery functionality, support tools, and related services.

"Company", "DuckSkins", "we", "us", or "our" means HEXALOOT SERVICES LTD, located at Kosta Anaxagora 30, 2014, Nicosia, Cyprus, operating the website duckskins.com.

"User", "you", or "your" means an individual who accesses or uses the Service, has a Steam account, logs in via Steam, or enters into an agreement with the Company.

"Steam" means the online service offered by Valve Corporation, which may be used by Users to authorize access to the Service and receive inventory items.

"Personal Data" means any information relating to an identified or identifiable individual.

"Inventory" or "Skins" means virtual items associated with Steam and/or supported games, which may be delivered to the User’s Steam inventory in accordance with the Service rules and applicable third-party platform terms.

2. Data Controller

For the purposes of applicable data protection laws, HEXALOOT SERVICES LTD is the controller of the Personal Data processed through the Service.

Contact details:

HEXALOOT SERVICES LTD
Kosta Anaxagora 30,
2014, Nicosia, Cyprus
Email: [email protected]

3. Personal Data We Collect

We may collect and process the following categories of Personal Data:

• Steam account information, including Steam ID, Steam profile name, avatar, profile URL, and publicly available Steam account information;
• Account information created or stored on duckskins.com, including user ID, account balance, transaction history, case-opening history, skin delivery history, bonus history, and support history;
• Technical information, including IP address, browser type, device type, operating system, language settings, referral URLs, pages viewed, session information, log files, and approximate location derived from IP address;
• Payment-related information, including payment method type, transaction identifiers, payment status, fraud-prevention indicators, and limited billing-related details provided by payment processors;
• Communication data, including messages sent to our support team, email correspondence, dispute information, and feedback;
• Security and anti-abuse data, including login records, device identifiers, risk signals, duplicate account indicators, suspicious activity logs, and records of violations of our Terms of Service;
• Cookie and analytics data, including information collected through cookies, pixels, local storage, and similar technologies.

We do not intentionally collect special categories of Personal Data unless required by law or voluntarily provided by the User in connection with a support request or dispute.

4. Steam Login and Third-Party Authorization

Access to certain parts of the Service may be carried out by clicking the "Log in via Steam" button. When you authorize through Steam, you may be redirected to a Steam website or interface controlled by Valve Corporation.

We do not receive or store your Steam password. Your Steam login credentials are entered directly through Steam and are subject to Steam’s own terms and privacy practices.

After successful Steam authorization, we may receive your Steam ID and public Steam profile information for the purpose of creating and managing your DuckSkins account, verifying your identity within the Service, and delivering skins to your Steam inventory.

5. How We Use Personal Data

We process Personal Data for the following purposes:

• To provide, operate, maintain, and improve the Service;
• To create, manage, and secure User accounts;
• To enable Steam authorization and connect the User’s Steam account with the Service;
• To process payments, top-ups, internal website credits, case openings, bonuses, promotions, and skin deliveries;
• To deliver skins to the User’s Steam inventory;
• To provide customer support and respond to inquiries, complaints, and disputes;
• To detect, prevent, investigate, and respond to fraud, abuse, multi-accounting, unauthorized access, chargebacks, payment misuse, technical manipulation, and other prohibited conduct;
• To comply with legal, regulatory, tax, accounting, payment, security, and law-enforcement obligations;
• To send service-related notices, including account, security, transaction, support, and policy updates;
• To send marketing communications, news, discounts, and promotional information where permitted by law or where the User has consented;
• To analyze usage trends, monitor performance, fix technical issues, and improve the user experience.

6. Legal Bases for Processing

Where applicable data protection laws, including the General Data Protection Regulation (GDPR), require a legal basis for processing, we rely on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to provide the Service, manage your account, process transactions, and deliver skins;
• Legal obligation: where processing is necessary to comply with applicable laws, accounting rules, tax rules, payment obligations, regulatory requests, or lawful requests from authorities;
• Legitimate interests: where processing is necessary for security, fraud prevention, service improvement, dispute handling, enforcement of our Terms of Service, and protection of our business, Users, and systems;
• Consent: where we rely on your consent for specific activities, such as certain cookies, analytics, or marketing communications, where required by law.

7. Payments and Internal Website Credits

When you top up your DuckSkins account or make a payment, payment-related information may be processed by third-party payment service providers. DuckSkins does not store full payment card numbers or full payment credentials unless expressly stated otherwise and permitted by applicable law.

Credits received on duckskins.com are limited-use internal website credits that may be used only for products and services available on the Service. Such credits are not equivalent to real money, fiat currency, cryptocurrency, or any other monetary value and are not eligible for withdrawal, cash-out, exchange, conversion, redemption, or refund except where expressly required by applicable law.

8. Skin Withdrawals and No Cash-Out

Only skin withdrawals are available on the Service. The Service does not support, offer, or permit withdrawals in fiat currency, cryptocurrency, or any other cash-equivalent form.

Withdrawn skins are delivered solely to the User’s Steam inventory. Skins cannot be exchanged, redeemed, sold, or converted into real money, fiat currency, cryptocurrency, or any other monetary value through the Service.

Any attempt to use the Service for cash-out, money conversion, real-money trading, cryptocurrency withdrawal, or other prohibited financial activity may result in account restriction, suspension, or termination.

9. Cookies and Similar Technologies

We may use cookies, local storage, pixels, tags, and similar technologies to operate the Service, keep Users logged in, remember preferences, improve security, prevent fraud, analyze usage, and improve performance.

Some cookies are necessary for the Service to function correctly. Other cookies, such as analytics or marketing cookies, may require your consent depending on applicable law.

You may control cookies through your browser settings. However, disabling certain cookies may affect the availability or functionality of the Service.

10. Sharing of Personal Data

We may share Personal Data with the following categories of recipients where necessary:

• Payment processors and payment service providers;
• Hosting providers, cloud service providers, database providers, and infrastructure providers;
• Security, fraud-prevention, anti-abuse, analytics, and monitoring service providers;
• Customer support and communication service providers;
• Professional advisers, including lawyers, auditors, accountants, insurers, and compliance consultants;
• Valve Corporation, Steam, or related third-party platforms where necessary for Steam authorization, skin delivery, or compliance with applicable platform terms;
• Law enforcement, regulators, courts, government authorities, or other third parties where disclosure is required by law or necessary to protect our rights, Users, systems, or the public;
• Successors or potential successors in connection with a merger, acquisition, restructuring, sale of assets, financing, or transfer of business.

We do not sell Personal Data to third parties.

11. International Data Transfers

Because the Service is available online, your Personal Data may be processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your jurisdiction.

Where required by applicable law, we will use appropriate safeguards for international transfers of Personal Data, such as contractual protections, adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

12. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain account records, process transactions, prevent fraud, resolve disputes, enforce our Terms of Service, comply with legal obligations, and protect our legitimate interests.

The retention period may vary depending on the type of data, the purpose of processing, legal requirements, payment and tax obligations, fraud-prevention needs, dispute limitation periods, and account status.

When Personal Data is no longer required, we will delete, anonymize, or securely restrict access to it, unless continued retention is required or permitted by law.

13. Security

We implement reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

However, no online service, website, database, or transmission method is completely secure. Users are responsible for keeping their Steam account, DuckSkins account, email account, passwords, devices, and authentication credentials secure.

If you suspect unauthorized access to your account or any security issue, you should contact us immediately at [email protected].

14. User Rights

Subject to applicable law, including GDPR where applicable, you may have the following rights in relation to your Personal Data:

• The right to access your Personal Data;
• The right to request correction of inaccurate or incomplete Personal Data;
• The right to request deletion of Personal Data;
• The right to request restriction of processing;
• The right to object to certain processing activities;
• The right to data portability;
• The right to withdraw consent where processing is based on consent;
• The right to lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us at [email protected]. We may need to verify your identity before responding to your request.

Some rights may be limited where we need to retain data for legal, security, fraud-prevention, dispute-resolution, accounting, or legitimate business purposes.

15. Marketing Communications

We may use your email address or other contact details to send service-related messages, security notices, policy updates, support messages, and transaction confirmations.

Where permitted by law, we may also send news, discounts, bonuses, promotions, and marketing communications. You may opt out of marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us at [email protected].

Even if you opt out of marketing communications, we may still send non-marketing messages related to your account, transactions, security, support, or legal notices.

16. Children and Age Restrictions

The Service is not intended for persons under the age of eighteen (18). No person under the age of eighteen (18) may use the Service.

We do not knowingly collect Personal Data from individuals under the age of eighteen (18). If we become aware that a person under eighteen (18) has provided Personal Data or used the Service, we may delete the data and restrict or terminate the account.

17. Third-Party Websites and Services

The Service may contain links to third-party websites or services that are not owned or controlled by HEXALOOT SERVICES LTD, including Steam and payment service providers.

HEXALOOT SERVICES LTD is not responsible for the privacy practices, content, terms, or policies of third-party websites or services. Users should review the privacy policies and terms of any third-party websites or services they use.

18. Fraud Prevention and Enforcement

We may process account, technical, payment, device, transaction, and activity data to detect and prevent fraud, abuse, unauthorized access, chargebacks, payment misuse, multi-accounting, automated access, exploitation of bonuses, manipulation of the Service, and violations of our Terms of Service.

Where suspicious or prohibited activity is detected, we may restrict, suspend, or terminate access to the Service, withhold certain functionality, investigate the activity, retain relevant records, and share information with payment processors, security providers, legal advisers, law enforcement, regulators, or affected third parties where permitted or required by law.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, legal requirements, technical requirements, business practices, or data processing activities.

When we make changes, we may update the "Last Updated" date, post the revised Privacy Policy on the Service, or provide additional notice where required by law.

Continued use of the Service after the updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.

20. Contact Us

If you have any questions, requests, complaints, or concerns about this Privacy Policy or the processing of your Personal Data, you may contact us at:

HEXALOOT SERVICES LTD
Kosta Anaxagora 30,
2014, Nicosia, Cyprus
Email: [email protected]

Last Updated: 12.06.2026