Privacy Policy

1. Information We Collect

• Email address and username (on registration)
• Age confirmations: that you are 16 or older (at sign-up) and 18 or older (before your first NGGold purchase)
• Transaction and trade history within the Platform
• IP address and browser information (security and fraud prevention). At sign-up we also store one-way hashes of your network range, a random identifier for your browser and a normalised form of your email address. They cannot be turned back into the originals and are used only to detect multiple accounts run by one person, including for founder credit.
• Item listing content and screenshots uploaded
• Payment information — collected and processed by Xsolla, not stored by us

1b. Community & Forum Data

NeedOrGreed.GG operates as a forum-based community platform. Content posted publicly by users — including post descriptions, replies, price check posts, witness statements, reviews, and profile information — is stored on our platform and may be visible to other users. Users should not post personal information, contact details, or sensitive data in public listing threads or comments.

When both parties confirm a trade, a public record showing the two display names, the item or post title, the forum and the confirmation time appears in the Recently Confirmed Trades feed and contributes to each member's public reputation. No email address, balance, message content or other account data is included.

Public forum content may be retained for the duration of the platform's operation for community continuity purposes. Users may request removal of their own posts by contacting support. Moderated or removed content may be retained in administrative logs for compliance and conduct investigation purposes.

2. How We Use Your Information

• To operate and maintain your account
• To apply the age requirements (16+ for an account, 18+ for NGGold purchases)
• To process NGGold credits and trade coordination
• To detect and prevent fraud, money laundering, and abuse
• To comply with AUSTRAC AML/CTF obligations and applicable law
• To communicate Platform updates and support responses

3. Record Retention

Rail and Construction Services Pty Ltd shall retain all transaction records, account data, and related information for a minimum of seven (7) years in accordance with Australian AML/CTF legislation and AUSTRAC requirements. Xsolla retains payment records independently under their own regulatory obligations.

4. Xsolla Data Processing

5. Data Storage & Security

Account data is stored securely using Google Firebase (Firestore and Authentication), hosted in the United States. By using the Platform, you consent to this transfer in accordance with applicable data protection laws.

NeedOrGreed.GG implements field-level Firestore security rules that enforce the following protections:

• Platform credit balances (NGGold) can only be modified by authorised server-side Cloud Functions — no client-side modification is possible
• Account records (email address, balances, two-factor status, transfer history) are readable only by the account holder and authorised server processes
• Other members see only a public profile: display name, reputation, trade count, trust tier, verified status, presence and join date
• Offer and order records enforce immutability of financial amounts after creation
• All Cloud Functions that access item data or AI services require valid Firebase Authentication tokens
• Transaction records are server-write-only and cannot be modified or deleted by clients
• Payment callbacks are signature-verified and idempotent; NGGold amounts are set from a server-side price table, never from the payment payload
• Balances are reconciled nightly against the transaction ledger; unexplained discrepancies freeze the account pending review
• Where an account is frozen pending investigation (Terms s.13a), the account's content, messages and records are preserved for the investigation and retained under Section 3, even if the account is later closed

6. Third-Party Services

• Xsolla — payment processing and tax compliance (Merchant of Record); all NGGold balance updates are performed server-side via Xsolla webhook integration
• Google Firebase — database, authentication, file storage, Cloud Functions
• Anthropic Claude API — AI item scanning (image data processed temporarily, not retained); requests require valid user authentication

7. Data Sharing

We do not sell or rent personal data. Data is shared only as required to operate the Platform or comply with legal obligations including AUSTRAC reporting. Xsolla may share data with financial regulators as required under their MoR obligations.

8. AML/CTF Monitoring

The Platform monitors transactions for suspicious activity as required under Australian AML/CTF law. Suspicious matters shall be reported to AUSTRAC within required timeframes. Users consent to this monitoring by using the Platform.

9. Your Rights

You may request deletion of your account by contacting support@needorgreed.gg. Transaction records shall be retained for 7 years regardless of account deletion requests, as required by law.

10. Cookies

The Platform uses session storage to maintain login state only. No tracking or advertising cookies are used.

11. Contact

support@needorgreed.gg