Bloodsport
Privacy Policy
Last updated: 12 October 2026
1. About this Policy
1.1. This Privacy Policy (the "Policy") explains how personal data is processed when you visit the website https://uploot.gg (the "Website") or use the features available through it (the "Service").
1.2. The Website is operated by KrishDigital Solutions Limited ("Uploot", "we", "us", "our").
1.3. The Policy uses the terms of Regulation (EU) 2016/679 (the "GDPR"), including "personal data", "processing", "controller" and "recipient". For users in the United Kingdom, references in this Policy to the GDPR are to be read as references to the UK GDPR.
1.4. The Policy should be read together with the Terms of Service (https://uploot.gg/terms) and the Cookie Policy (https://uploot.gg/cookies).
1.5. In this Policy:
- "User" means a person who signs in to the Website through Steam;
- "Partner" means a person registered in our affiliate programme (the "Affiliate Programme");
- "Visitor" means a person who opens the Website without signing in.
2. Controller and contact for data matters
2.1. The controller of the personal data described in this Policy is KrishDigital Solutions Limited, registration number 72185282, registered in Hong Kong, with its registered address at Room 8, S-V, 6/F, Valiant Industrial Centre, 2-12 Au Pui Wan Street, Fo Tan, New Territories, Hong Kong.
2.2. Questions and requests about personal data are received at support@uploot.gg.
2.3. General support is available at support@uploot.gg, through the "Support" chat on the Website and through the contacts listed at https://uploot.gg/contact.
3. Personal data we collect and where it comes from
Users
3.1. We process the following data about Users.
| Data | Where it comes from |
|---|---|
| Steam ID, Steam nickname, avatar and Steam profile status | Steam, when you sign in, and the Steam Web API |
| Steam account level and hours played in games | Steam Web API, to check the tasks of the daily case |
| Steam trade link | entered by you in your profile |
| Contact e-mail (optional) and unsubscribe status | entered by you in your profile; the unsubscribe status comes from the mailing service |
| Inventory and history of case openings, upgrades, contracts, item sales, item withdrawals and deposits | generated on the Website |
| Balance and balance movements, including bonuses, event rewards and adjustments made by our staff with a stated reason | generated on the Website |
| Client seed, personal server seed and result records (Roll ID, seeds, sequence number) | the client seed is issued by the Website and can be changed by you in the seed settings; the rest is generated on the Website |
| Event points and position in the event leaderboard | generated on the Website |
| Result of the Telegram channel subscription check for a daily-case task | Telegram, after you authorise through Telegram |
| Technical visit data: IP address and approximate location, browser and operating system type and version, screen resolution, referring page, pages visited, time and duration of the visit | your device, during the visit |
| Cookies and similar data stored in your browser | your browser |
| Country determined from the IP address (ISO country code) | determined by us when the account is created, only for accounts created with a Partner tag |
| Partner tag, click ID, time of attachment to the Partner and a separate user ID used for the Affiliate Programme platform | the Partner link you followed and the cookie set from it; the user ID is generated by us |
| Account block status, its reason and withdrawal restriction | set by our staff |
| Messages you send to support | you |
3.2. Sign-in is available through Steam only. We do not create passwords and we do not receive your Steam password. Your account is created at the first sign-in by your Steam ID; your nickname and avatar are refreshed at each later sign-in.
3.3. For each deposit we keep the payment method, amount, bonus, promo code, status, validity period, payment attempts through payment providers, the payment link or payment details issued for the payment, and comments of our staff, including a record that a payment was charged back.
3.4. A card payment is made on the payment provider's page; card details are entered there and not on the Website. For a deposit with skins, the trade is carried out by the skin deposit provider, which reports the resulting amount to us.
Partners
3.5. The Affiliate Programme runs on the Tracknow platform. A Partner has no account on the Website; Partner data is held on that platform.
3.6. We process the following data about Partners:
- first and last name, e-mail address, password and company name given at registration;
- two-factor authentication settings, where the Partner enables them;
- the payout method and payout details given for payout requests;
- Partner links, clicks, accruals, payout requests and reports;
- information the Partner gives us about its traffic sources;
- technical data about the use of the Partner account on the platform;
- correspondence with us.
Visitors
3.7. When you open the Website without signing in, we process:
- the technical visit data listed in Section 3.1;
- cookies and similar data stored in your browser, as described in the Cookie Policy;
- the Partner tag and click ID, if you arrived through a Partner link;
- UTM tags of the link you followed;
- settings remembered in your browser, such as the promo code from the welcome window.
3.8. The online counter on the Website counts open connections. No guest identifier, cookie or browser fingerprint is created for that count.
3.9. If you write in the support chat, we process the messages you send. We do not pass your account data into the chat.
3.10. If you subscribe to browser push notifications, the subscription is held by the push service and is not linked to your account.
What is required and what is optional
3.11. Steam sign-in data is required to create and use an account. A trade link is required to withdraw items to Steam. The contact e-mail, push notifications and the Telegram authorisation for a daily-case task are optional.
3.12. We do not ask for identity documents when you sign in. Where we ask you to confirm your age, your identity, your place of residence, your right to use a payment method or the origin of the funds or skins you use, as provided in the Terms of Service, we process the information and documents you provide in response and the result of the check ("verification data").
3.13. If we need other additional information from you, for example to review a payment that was not credited, a refund request or a request about your data, we tell you at the time what is needed and why.
4. Information visible to other people
4.1. Every User profile is open to everyone, including Visitors. The profile shows the avatar, nickname, on-site ID, the numbers of cases, contracts and upgrades, the total and the number of items withdrawn, the "Best drop", and the lists of items, upgrades and contracts.
4.2. Your trade link and your contact e-mail are not shown to other people.
4.3. Items received by Users appear in the live feed on the Website together with the User's avatar and nickname. The event leaderboard, including the podium of the first three places, shows a participant's place, nickname, avatar, points and reward.
4.4. Client seeds and the results of actions are public in verification records, so that anyone can verify any result, as described at https://uploot.gg/provably-fair. Do not use recognisable text, such as your nickname or name, as a client seed if you do not want your results to be linked to you.
4.5. Profiles are closed to indexing by search engines.
4.6. Your nickname and avatar are taken from Steam. To change them on the Website, change them in Steam and sign in again.
5. Purposes and legal bases
5.1. We process personal data for the purposes and on the legal bases set out below.
| Purpose | Data used | Legal basis |
|---|---|---|
| Creating your account and signing you in through Steam | Steam ID, nickname, avatar, profile status | Art. 6(1)(b) GDPR: performance of the contract under the Terms of Service |
| Providing the Service: case openings, upgrades, contracts, sale of items, inventory, balance and history | account data, operations history, balance movements, seeds and result records | Art. 6(1)(b) GDPR |
| Accepting deposits, applying bonuses and promo codes, handling refund requests and payment disputes | payment records, contact details you have given, balance movements | Art. 6(1)(b) GDPR; Art. 6(1)(c) GDPR where the law requires us to keep accounting records |
| Delivering withdrawn items to your Steam inventory | trade link, withdrawal records | Art. 6(1)(b) GDPR |
| Checking daily-case tasks, running events and crediting rewards | Steam nickname, avatar, account level, hours played, Telegram subscription check, event points | Art. 6(1)(b) GDPR |
| Showing public profiles, the live feed, the event leaderboard and verification records | nickname, avatar, on-site ID, public profile figures, client seed, result records | Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR: our legitimate interest in results that anyone can verify |
| Answering support requests and complaints | messages you send, account data, operations history | Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR: our legitimate interest in handling complaints |
| Keeping the Service secure, preventing fraud and abuse, enforcing the Terms of Service, including rules on multiple accounts, bots, reversed trades and charged-back payments | account data, technical visit data, payment records, withdrawal records, block status and reason | Art. 6(1)(f) GDPR: our legitimate interest in protecting the Service, Users and payment partners |
| Checking age, identity, place of residence, the right to use a payment method and the origin of funds or skins, where we ask for it under the Terms of Service | verification data, account data, payment records | Art. 6(1)(f) GDPR: our legitimate interest in preventing fraud and unlawful use of the Service; Art. 6(1)(c) GDPR where the law requires the check |
| Sending mailings to your contact e-mail | contact e-mail, unsubscribe status | Art. 6(1)(a) GDPR: your consent, which you may withdraw at any time |
| Sending notices under the Terms of Service, including the notice that precedes closure of an inactive account | contact e-mail | Art. 6(1)(b) GDPR |
| Sending browser push notifications | push subscription | Art. 6(1)(a) GDPR: your consent |
| Analysing Website traffic and traffic sources | technical visit data, cookies, UTM tags | Art. 6(1)(a) GDPR: your consent given in the cookie settings, where consent is required |
| Accounting for Users referred by Partners and calculating Partner accruals | Partner tag, click ID, time of attachment, user ID for the platform, country from IP, account status, amounts and dates of deposits, bonuses, item withdrawals and chargebacks | Art. 6(1)(f) GDPR: our legitimate interest in running the Affiliate Programme and settling with Partners correctly |
| Running the Affiliate Programme for Partners: registration, access, accruals and payouts | Partner data listed in Section 3.6 | Art. 6(1)(b) GDPR: performance of the agreement with the Partner; Art. 6(1)(c) GDPR where the law requires us to keep accounting records |
| Website counters and aggregated statistics | operations history in aggregated form | Art. 6(1)(f) GDPR: our legitimate interest in understanding and presenting the use of the Service |
| Responding to lawful requests of authorities; establishing, exercising and defending legal claims | data relevant to the request or claim | Art. 6(1)(c) GDPR; Art. 6(1)(f) GDPR: our legitimate interest in protecting our rights |
5.2. Where we rely on legitimate interests, you may object to the processing as described in Section 11.
5.3. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before it.
5.4. We do not use personal data for purposes incompatible with those listed above without informing you first.
6. Mailings and push notifications
6.1. The contact e-mail in your profile is optional. If you add it, we use it to send you mailings about the Service and notices under the Terms of Service, including the notice referred to in Section 10.6.
6.2. Mailings are sent through a third-party mailing service. When you save the address, we pass it to that service; when you remove it, we delete it there.
6.3. We do not ask you to confirm ownership of the address. Enter only an address that belongs to you.
6.4. Every mailing contains an unsubscribe link. An unsubscribe remains in force even if the same address is saved in the profile again.
6.5. Browser push notifications are offered through a third-party push service. A subscription is created only after you accept both the prompt of that service and the prompt of your browser. The subscription is not linked to your account, and we do not send push notifications about events in your account. You can unsubscribe in your browser settings.
7. Affiliate Programme and referred Users
7.1. If you arrive at the Website through a Partner link, the Partner tag and click ID are stored in cookies described in the Cookie Policy. If you then create an account by signing in through Steam for the first time, the account is attached to that Partner. The attachment is permanent.
7.2. An account created without a Partner tag is not attached to any Partner, and no data about it is passed to the Affiliate Programme platform.
7.3. For an attached account we pass the following to Tracknow: the user ID created for the platform, the Partner tag, the click ID, the time the account was created, the country determined from the IP address, the account status, and the amounts and dates of deposits, bonuses, item withdrawals and chargebacks.
7.4. We do not pass to Tracknow your Steam ID, nickname, avatar, e-mail address, IP address or trade link.
7.5. When a Partner link is clicked, Tracknow itself records the IP address and browser of the person who clicked. That click record is linked to the User's account through the click ID.
7.6. The country is determined from the IP address once, when the account is created, and only for accounts created with a Partner tag. It is used to account for the User in the Affiliate Programme.
7.7. Partners see the results of their links in the reports of the platform. Those reports are built from the data listed in Section 7.3 and the click records described in Section 7.5.
8. Recipients of personal data
8.1. We disclose personal data only to the recipients and for the reasons set out below.
| Recipient | Data | Reason |
|---|---|---|
| Steam (Valve Corporation) | Steam ID, when we request your profile data from Steam | sign-in through Steam, profile data, checks of daily-case tasks |
| Skin marketplace market.csgo.com | trade link | buying the item you withdraw and having it delivered to your Steam inventory by the seller |
| Skin deposit provider SkinsBack | data needed to identify your deposit and carry out the trade | deposits with skins |
| Card and crypto-asset payment providers | contact details you have given and payment data; in a payment dispute, information about the deposit and the use of the balance | processing the payment, preventing fraud and resolving payment disputes |
| Identity verification service provider, where one is used | verification data | carrying out a check on our behalf |
| Affiliate Programme platform Tracknow | for referred Users, the data listed in Section 7.3; for Partners, the data listed in Section 3.6 | running the Affiliate Programme |
| Google Analytics | traffic data in anonymised form | traffic analytics |
| Mailing service | contact e-mail | sending mailings |
| Support chat service | messages you send in the chat | support |
| Push service | push subscription, without account data | browser push notifications |
| Telegram | data exchanged when you authorise through Telegram or contact us there | subscription check for a daily-case task; support contact |
| Hosting and infrastructure providers | data stored and transmitted when the Website operates | operating the Website |
| Professional advisers | data relevant to the matter | legal, accounting and audit services |
| Courts, authorities and regulators | data covered by a lawful request | compliance with the law; protection of rights |
| A successor to the business | data needed to continue the Service | reorganisation or transfer of the business |
8.2. Some recipients, such as Valve, payment providers and Telegram, also process your data for their own purposes under their own terms and privacy policies.
8.3. Other people can see the information described in Section 4.
9. Transfers outside the European Economic Area and the United Kingdom
9.1. Some recipients listed in Section 8 are established outside the European Economic Area (the "EEA") and the United Kingdom or process data there.
9.2. Where personal data is transferred outside the EEA or, for users in the United Kingdom, outside the United Kingdom, the transfer relies on one of the following:
- a decision of the European Commission or, for the United Kingdom, of the competent UK authority that the destination ensures an adequate level of protection;
- standard contractual clauses adopted by the European Commission or the equivalent UK transfer terms, with additional measures where needed;
- another transfer mechanism permitted by the GDPR or the UK GDPR.
9.3. You may ask for information about the safeguards applied to a particular transfer by writing to support@uploot.gg.
10. Retention
10.1. We keep personal data while your account exists or for as long as it is needed for the Service to operate.
10.2. After an account is closed, personal data is deleted, blocked from further use or anonymised. Records needed to keep the history of operations complete are not deleted at once.
10.3. The period for which a particular record is kept is determined by the following criteria:
- whether the account is still open;
- whether an operation is still in progress, such as a pending deposit, a withdrawal under Steam trade protection, a block review or an appeal;
- whether a law that applies to us requires the record to be kept, for example accounting and tax rules;
- whether the record may be needed to establish, exercise or defend a legal claim within the applicable limitation period;
- for data processed on consent, whether the consent has been withdrawn.
10.4. After an account is closed:
- if the account had a Partner tag, the fields passed to the Affiliate Programme platform and the records of the account's operations are kept with the status "closed", without the Steam ID, nickname, avatar, e-mail address and trade link;
- the client seed used by the account remains reserved and cannot be taken by another User;
- the counters on the Website are not reduced; they contain totals only;
- if you sign in again with the same Steam account, a new account is created.
10.5. The contact e-mail is kept until you remove it from your profile or the account is closed. The unsubscribe status is kept so that mailings are not resumed.
10.6. Inactive accounts are not closed automatically. Under the Terms of Service, an account is inactive if you have not signed in to it and no action has been carried out on it for more than 180 days. We may close an inactive account after giving you at least 14 days' notice at the contact e-mail address saved in your profile.
10.7. Partner data is kept while the Partner takes part in the Affiliate Programme and afterwards for as long as the criteria in Section 10.3 require.
10.8. Verification data is kept while the check and any related review are in progress and afterwards for as long as the criteria in Section 10.3 require, which may be after the account is closed.
10.9. Lifetimes of cookies are set out in the Cookie Policy.
11. Your rights
11.1. You have the right to:
- obtain confirmation of whether we process your personal data and receive a copy of it;
- receive the data you provided in a structured, commonly used and machine-readable format, and have it transmitted to another controller where this is technically feasible;
- have inaccurate or incomplete data corrected;
- have your data deleted where the GDPR provides for it;
- have processing restricted where the GDPR provides for it;
- object to processing based on our legitimate interests, on grounds relating to your situation;
- object at any time to the use of your data for direct marketing, including profiling related to it;
- withdraw consent at any time, where processing is based on consent;
- opt out of marketing messages.
11.2. Some rights can be used directly:
- add or remove the contact e-mail and change the trade link in your profile;
- unsubscribe through the link in any mailing;
- switch off push notifications in your browser settings;
- change your cookie choices in the cookie settings on the Website.
11.3. For any other request, write to support@uploot.gg or contact support through the "Support" chat. A request to close your account is made the same way.
11.4. We reply within 30 days of receiving the request. Where the law allows a longer period for complex or numerous requests, we tell you about the extension and its reasons within those 30 days.
11.5. We may ask for information needed to confirm that the request comes from the account holder.
11.6. Requests are handled free of charge. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or decline it, and we explain why.
11.7. The right to deletion is not absolute. We may keep data that we are required to keep by law, that is needed for legal claims, or that falls under Sections 10.2 and 10.4.
11.8. The Affiliate Programme platform has no function that lets us delete a User's record there. If you ask for your data to be deleted on that platform as well, we forward your request to the platform.
11.9. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State where you live, where you work or where you believe the infringement took place. If you live in the United Kingdom, that authority is the Information Commissioner's Office. We ask you to contact us first so that we can try to resolve the matter.
12. Automated decisions and profiling
12.1. We do not make decisions about you that are based solely on automated processing and that produce legal effects for you or affect you in a similarly significant way.
12.2. Account blocks and withdrawal restrictions are applied by our staff. A block can be appealed through support as described in the Terms of Service.
12.3. The result of opening a case does not depend on your actions, your history, your balance or the amount you have spent. The method is described at https://uploot.gg/provably-fair.
13. Minors
13.1. The Service is only for persons who are at least 18 years old, or of the age of majority in the place where they live if that age is higher. When you sign in, you confirm that you are over 18.
13.2. We do not knowingly collect personal data of persons under 18.
13.3. If we learn that personal data of a person under 18 has been collected, we take steps to delete it and handle the account as provided in the Terms of Service.
13.4. If you believe that a person under 18 is using the Service, please write to support@uploot.gg.
14. Security
14.1. We apply technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. These include:
- encrypted connections between your browser and the Website;
- sign-in through Steam, so that no password for the Website exists and your Steam password does not reach us;
- access to the administration panel for staff only, each under an individual account, with permissions assigned by role;
- storage of integration keys on the server, so that they do not appear on Website pages;
- verification of the signature on confirmations received from payment providers.
14.2. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14.3. If a personal data breach occurs, we act as required by applicable data protection law, including notifying the supervisory authority and the persons affected where the law requires it.
14.4. Our staff never send you friend requests on Steam. If you suspect that your account or data has been compromised, contact support without delay.
15. Cookies
15.1. The Website uses cookies and similar technologies. Strictly necessary cookies are always active; functional, analytics, marketing, social network and third-party service cookies can be switched on or off in the cookie settings.
15.2. The categories, the cookies used, their lifetimes and the way to change your choice are described in the Cookie Policy at https://uploot.gg/cookies.
16. Third-party services and links
16.1. The Website relies on Steam and contains links to third-party services, including Steam, Telegram, the Affiliate Programme platform and our pages on social networks.
16.2. The open verifier is a static page hosted outside the Website. Its calculations run in your browser.
16.3. Third-party services process personal data under their own terms and privacy policies. We are not responsible for their practices and encourage you to read their policies.
17. Changes to this Policy
17.1. We may update this Policy when the Service, our processing of personal data or the applicable law changes.
17.2. The current version is published at https://uploot.gg/privacy. The date at the top shows when it was last updated.
17.3. We give notice of material changes on the Website before they take effect.
18. Contact
18.1. Controller: KrishDigital Solutions Limited, registration number 72185282, Room 8, S-V, 6/F, Valiant Industrial Centre, 2-12 Au Pui Wan Street, Fo Tan, New Territories, Hong Kong, Hong Kong.
18.2. Personal data matters: support@uploot.gg.
18.3. Support: support@uploot.gg and the "Support" chat on the Website.
18.4. Other contacts: https://uploot.gg/contact.