Privacy Policy

Deamar Zaki Innovative, operator of Legends of Kartella, is the personal information controller under the Data Privacy Act of 2012 (RA 10173). Contact for any privacy question: a ticket on this website or in our Discord.

Your account. Username and password. The game server stores the password exactly as typed (the game requires this), so never reuse a password from another site.

Your email address, which is required to register. We use it for account recovery and for notices about your account. It is not used for marketing and is not shared.

Your date of birth, given once at registration. We use it to check you are 18 or over, which the game client also enforces.

Who referred you, if you named someone when you registered.

IP addresses. We record the IP you registered from, the IP of your last website and game login, and the IP attached to votes and to staff actions. This is how we catch shared accounts, vote farming and ban evasion.

Payments. The amount, the currency, the PayMongo payment reference, and what it credited. We do not receive or store your card number, CVV, wallet PIN or bank login — we never ask for them and they never touch our server.

Game protection. On PC, DK Game Protection reports a detected cheat, banned tool, debugger or unknown program changing the game, with screenshots of your whole screen. Exactly what it checks, sends and keeps is in section 2 of the Player Agreement.

Agreement acceptance. Which version of the Player Agreement you accepted, and when.

Support tickets. Whatever you write in them, and our replies.

Discord. If you link your Discord account, we store your Discord ID and tag so we can give you the right roles.

Game data. Characters, levels, guild, inventory and playtime — the ordinary contents of playing on the server.

To run your account and deliver what you bought. To answer support tickets. To enforce the rules — the IP records exist for exactly this. To keep an audit trail of every credit, which is what lets us settle a payment dispute in your favour when you are right.

We do not sell your data. We do not run advertising. We do not build a profile of you for anyone else's benefit.

PayMongo. Processes top-ups and receives your account name with each checkout. Your wallet or bank sees the payment under its own privacy policy. We receive the amount, the status and the payment reference.

OVHcloud. Hosts our server, and so the data on it, in Singapore.

Discord. Two separate things. If you link your account, we store your Discord ID and tag and give you roles. Separately, our staff channels receive automatic notices — a new registration posts the username and who referred them, a paid top-up posts the account name, amount and payment reference, and a game protection report posts its details and screenshots.

When staff open a support ticket in Discord, that thread shows the account's cash balance, premium status, main character name, level and class, and the account serial, so the ticket can be answered without leaving the channel. These channels are visible to staff only.

Brevo — sends verification and notification emails, so it handles your email address.

The public sees only one thing: when a known cheat tool is detected in game, our public Discord Bot/Cheat Detection channel may show your character name, the time and the tool's name (Player Agreement section 2). We do not share data with advertisers, data brokers or other servers.

Account and game data for as long as the account exists. Payment records for 5 years, because Philippine tax and accounting rules require it — this applies even after an account is deleted, and it is the one category we cannot erase on request.

Closed support tickets for 2 years. IP addresses on the website for 12 months: vote and staff-action IPs 12 months after they were recorded, your sign-up and login IPs until 12 months after your last website sign-in. The IP of your last game login is kept while your account exists. Game login history in the game server’s logs (account name, IP, login and logout times) has no automatic deletion yet. Abandoned checkout sessions for 90 days.

These are enforced by a scheduled job, not by hand, and each run records what it removed — so the period above is what actually happens rather than what we intend.

Game protection reports, ban records (including banned IP addresses) and virtual machine approvals are kept until staff remove them; there is no automatic deletion for these yet. Screenshots are kept on our server for 30 days, then deleted the next time the server clears expired reports, so there is no fixed deletion date yet (Player Agreement sections 2 and 5). The record of which agreement version you accepted is kept as proof of your consent, also after your account is deleted.

Under RA 10173 you can ask what we hold about you, correct anything wrong, object to how we use it, and ask for it to be deleted. Open a ticket on this website or in our Discord. We answer within 15 days.

Deleting your account removes your characters and Discord link. Closed tickets follow the 2 years above. Payment records are kept for the 5 years above, reduced to the amount, date and reference.

If you think we have mishandled your data you can complain to the National Privacy Commission. We would rather you told us first.

One cookie, holding your login session. No analytics cookies, no advertising cookies, no third-party trackers. Clearing it signs you out.

You must be 18 or over to register. We check the date of birth you give at signup and refuse anything younger; the game client enforces the same rule. If you believe a minor has an account, tell us and we will remove it.