Privacy Policy

1. Information We Collect

• Email address and username (on registration)
• Age confirmation (18+ verification at registration)
• Transaction and trade history within the Platform
• IP address and browser information (security and fraud prevention)
• Item listing content and screenshots uploaded
• Payment information — collected and processed by Xsolla, not stored by us

1b. Community & Forum Data

NeedOrGreed.GG operates as a forum-based community platform. Content posted publicly by users — including listing descriptions, thread comments, price check posts, ISO posts, reviews, and profile information — is stored on our platform and may be visible to other users. Users should not post personal information, contact details, or sensitive data in public listing threads or comments.

Public forum content may be retained for the duration of the platform's operation for community continuity purposes. Users may request removal of their own posts by contacting support. Moderated or removed content may be retained in administrative logs for compliance and conduct investigation purposes.

2. How We Use Your Information

• To operate and maintain your account
• To verify the 18+ age requirement
• To process NGGold credits and trade coordination
• To detect and prevent fraud, money laundering, and abuse
• To comply with AUSTRAC AML/CTF obligations and applicable law
• To communicate Platform updates and support responses

3. Record Retention

Rail and Construction Services Pty Ltd shall retain all transaction records, account data, and related information for a minimum of seven (7) years in accordance with Australian AML/CTF legislation and AUSTRAC requirements. Xsolla retains payment records independently under their own regulatory obligations.

4. Xsolla Data Processing

5. Data Storage & Security

Account data is stored securely using Google Firebase (Firestore and Authentication), hosted in the United States. By using the Platform, you consent to this transfer in accordance with applicable data protection laws.

NeedOrGreed.GG implements field-level Firestore security rules that enforce the following protections:

• Platform credit balances (NGGold) can only be modified by authorised server-side Cloud Functions — no client-side modification is possible
• Users may only read and update their own account data; other users' financial fields are fully protected
• Offer and order records enforce immutability of financial amounts after creation
• All Cloud Functions that access item data or AI services require valid Firebase Authentication tokens
• Transaction records are server-write-only and cannot be modified or deleted by clients

6. Third-Party Services

• Xsolla — payment processing and tax compliance (Merchant of Record); all NGGold balance updates are performed server-side via Xsolla webhook integration
• Google Firebase — database, authentication, file storage, Cloud Functions
• Anthropic Claude API — AI item scanning (image data processed temporarily, not retained); requests require valid user authentication

7. Data Sharing

We do not sell or rent personal data. Data is shared only as required to operate the Platform or comply with legal obligations including AUSTRAC reporting. Xsolla may share data with financial regulators as required under their MoR obligations.

8. AML/CTF Monitoring

The Platform monitors transactions for suspicious activity as required under Australian AML/CTF law. Suspicious matters shall be reported to AUSTRAC within required timeframes. Users consent to this monitoring by using the Platform.

9. Your Rights

You may request deletion of your account by contacting support@needorgreed.gg. Transaction records shall be retained for 7 years regardless of account deletion requests, as required by law.

10. Cookies

The Platform uses session storage to maintain login state only. No tracking or advertising cookies are used.

11. Contact

support@needorgreed.gg