.gif)
Privacy Policy
How Power Plant Inc. collects, uses, and safeguards personal data across the Raise Engine marketing site, the operator dashboard, and the developer dashboard.
Published 7 October 2026
1. Introduction
This Privacy Policy explains how Power Plant Inc., a limited liability company incorporated under the laws of Saint Lucia ("Raise Engine", "we", "us", or "our"), collects, uses, discloses, and safeguards personal data in the course of operating the Raise Engine marketing site (raise-engine.com), the operator dashboard, and the developer dashboard (together, the "Services").
It applies to the personal data of website visitors, game creators, operators, aggregators, and other business users who interact with the Services. It does not apply to the personal data of players who play games through our operator customers. Each operator is the controller of its players' data and its own privacy policy applies; our handling of that data on the operator's behalf is governed by clause 9 of the Raise Portal Software License Agreement and clause 15 of the Creator Licence Terms.
By using the Services or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect personal data in the following categories. Not all categories apply to every user — what we collect depends on which part of the Services you interact with and whether you have registered for an account.
- Identification
- Name, email address, business or trading name, role within your organisation, country of residence, and (for business users) the entity you represent.
- Account credentials
- Username and password (passwords are stored hashed and salted; we never see or store your password in plain text), authentication tokens, multi-factor authentication state, and session metadata.
- Communications
- Records of correspondence with us — contact form submissions, support tickets, email exchanges, and product feedback. We retain these to provide support and improve the Services.
- Technical data
- IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and cookies (see section 8 below for details on cookies).
- Financial data
- For game creators: the cryptocurrency wallet address or account you nominate for Creator Fee payouts under the Creator Licence Terms. For operators: billing contact details and the wallet or bank account used to settle Monthly Fees under the Software License Agreement. We do not store full card numbers; payment card processing (where applicable) is handled by PCI-DSS compliant payment processors.
- KYC and identity verification
- Identity documents (passport, driver's licence, or other government-issued ID), proof of address, corporate registration documents, ultimate beneficial owner declarations, and any additional information required to satisfy our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations.
- Marketing preferences
- Where you have opted in to receive marketing communications, your subscription status, the channels you have consented to, and your engagement with our communications.
3. How We Use Information
We use personal data only for the purposes for which it was collected or for compatible purposes permitted by law. Specifically, we use personal data to:
- Provide, operate, and maintain the Services, including the marketing site, the operator dashboard, and the developer dashboard.
- Create and manage your account, authenticate your access, and protect against unauthorised use.
- Comply with legal, regulatory, and contractual obligations — including AML, KYC, sanctions screening, and gaming licensing requirements applicable to us, our Affiliates, and the Game Providers.
- Calculate, process, and settle Creator Fees (for game creators) and Monthly Fees (for operators), and produce reporting consistent with our agreements with you.
- Communicate with you about your account, transactions, security incidents, service changes, and any required legal notices.
- Investigate, detect, and prevent fraud, abuse, security incidents, and other activity that may be harmful to the Services or our users.
- Improve the Services through aggregate analytics, product research, and engineering work — using de-identified or aggregate data where reasonably practicable.
- Send you marketing communications about Raise Engine products and services, where you have given consent and not subsequently withdrawn it.
- Measure the effectiveness of our LinkedIn advertising, only where you have accepted marketing cookies (see section 8).
4. Legal Basis for Processing
Where applicable data protection law requires a lawful basis for processing personal data, we rely on the following bases:
- Contractual necessity
- Most account-related processing — creating and operating your account, providing the Services, processing payments — is necessary to perform our contract with you or to take steps at your request before entering into a contract.
- Legal obligation
- KYC, AML, sanctions screening, tax reporting, and responses to lawful requests from Regulatory Authorities are carried out to comply with legal obligations to which we are subject.
- Legitimate interests
- Security monitoring, fraud prevention, aggregate analytics, and improving the Services are carried out on the basis of our legitimate interests (or those of our Affiliates and partners), provided those interests are not overridden by your rights and freedoms.
- Consent
- Marketing communications, marketing cookies, and sharing data with LinkedIn for advertising measurement rely on your consent. You can withdraw consent at any time — see section 9 below.
6. International Data Transfers
Power Plant Inc. is incorporated in Saint Lucia, and personal data processed in connection with the Services may be transferred to and processed in Saint Lucia. We also use service providers located in other jurisdictions — including the European Economic Area, the United Kingdom, and the United States — for cloud hosting, analytics, payment processing, and similar purposes.
Where personal data is transferred from a jurisdiction with applicable data protection law (such as the European Economic Area or the United Kingdom) to a jurisdiction without an adequacy decision, we put in place appropriate safeguards — including standard contractual clauses, transfer impact assessments, supplementary technical measures, or equivalent mechanisms permitted by applicable law.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, and to satisfy any legal, regulatory, accounting, or reporting obligations to which we are subject. In general:
- Account data is retained while the account is active and for a period of up to seven (7) years after account closure for tax, audit, dispute resolution, and contractual purposes.
- KYC and AML records are retained for the statutory retention period applicable to gaming and financial services in our operating jurisdictions — typically five (5) years from the end of the business relationship, or longer where required by law.
- Communications and support tickets are retained for up to three (3) years from last contact, unless longer retention is required for legal or compliance reasons.
- Marketing data is retained until you unsubscribe or withdraw consent, after which we retain only the minimum data needed to honour your suppression preference.
- Aggregated or anonymised data — which cannot reasonably be used to identify you — may be retained indefinitely for analytics and product development purposes.
9. Your Rights
Subject to applicable data protection law, you have the following rights in relation to the personal data we hold about you:
- Right of access — to obtain a copy of the personal data we hold about you and information about how it is processed.
- Right to rectification — to have inaccurate or incomplete personal data corrected.
- Right to erasure — to request deletion of personal data, subject to any legal or contractual obligations we have to retain it (for example, AML retention requirements).
- Right to restriction of processing — to request that we limit the processing of your personal data in certain circumstances.
- Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where this is technically feasible.
- Right to object — to object to processing carried out on the basis of legitimate interests, and to object at any time to processing of your personal data for direct marketing purposes.
- Right to withdraw consent — where we rely on consent as the lawful basis for processing, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint — with the supervisory authority in your jurisdiction. For Saint Lucia, this is the Office of the Data Protection Commissioner. EEA and UK residents may contact their local supervisory authority.
To exercise any of these rights, contact us at legal@raise-engine.com. We will respond within one (1) month of receiving a valid request, or sooner where required by applicable law. We may ask for additional information to verify your identity before acting on your request.
10. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. Measures include:
- TLS encryption for personal data in transit.
- Encryption at rest for sensitive data stores, including credentials and KYC documents.
- Role-based access controls and the principle of least privilege for our personnel.
- Logging and monitoring of access to personal data, with audit retention.
- Vendor due diligence and contractual data protection obligations for all third-party processors.
- Incident response procedures, including breach notification to affected individuals and the relevant supervisory authority within 72 hours where required by applicable law.
No security measures are perfect, and we cannot guarantee absolute security. If you believe your account has been compromised or you have detected a security incident, please contact us immediately at legal@raise-engine.com.
11. Children
The Services are intended for business users aged eighteen (18) years or older. We do not knowingly collect personal data from individuals under the age of eighteen. If we become aware that we have collected personal data from a minor, we will delete it as soon as reasonably practicable.
End-player age verification on the Licensed Platform is the responsibility of the operator under the operator's gaming licence and applicable gaming regulations.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable law. Material changes will be notified by email to account holders and posted on this page at least fourteen (14) days before they take effect. Non-material changes (such as clarifications or formatting updates) may be made without advance notice.
The "Published" date at the top of this page indicates when this policy was last updated. Your continued use of the Services after a policy update becomes effective constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, want to exercise any of your rights, or wish to raise a privacy concern, please contact us using the details below.
- Legal & Privacy
- legal@raise-engine.com
- Support
- support@raise-engine.com
- Data controller
- Power Plant Inc. (trading as Raise Engine), a company incorporated in Saint Lucia. Formal notices and data protection requests should be sent by email to legal@raise-engine.com.
- Supervisory authority
- You also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction. For Saint Lucia, the Office of the Data Protection Commissioner. For EEA and UK residents, your local supervisory authority.