Koroboost Privacy Policy

KOROBOOST PRIVACY POLICY

Last Updated: January 1, 2026

KOROBOOST, operated byMagnera LP("Koroboost," "we," "us," or "our"), respects our Users' rights and is committed to protecting your privacy and keeping private data confidential. We take full responsibility for keeping your personal data ("Personal Data") confidential and secure. This Privacy Policy outlines how we collect, store, process, share, and protect your Personal Data in compliance with applicable laws—including the General Data Protection Regulation (GDPR). This Privacy Policy applies only to data collected on the Koroboost Website (koroboost.com) and its associated resources and does not extend to third-party websites linked from our Website.

By creating a Koroboost Account or using our Website and Services, you consent to the collection and use of your Personal Data as described herein and in our Terms and Conditions (hereinafter referred to as the "User Agreement").

If you have any questions, please contact our Customer Support atsupport@koroboost.com.

1. What Personal Data Do We Collect?

Koroboost collects Users' Personal Data on a voluntary basis and in strict compliance with current personal data protection legislation, including the GDPR. The following categories outline the types of data we may request at various stages of registration, during use of our Website, and during transaction processing:

Information necessary to create an Account: e-mail address or social media profiles;
Age;
Phone Number (where required by selected payment method);
Data received in the course of your use of the Koroboost Website and Services: device parameters and characteristics;
IP address and geographic location;
Cookie files submitted by your browser;
Hardware event data including malfunctions and activity on the Website, browser type, language settings, date and time of requests, and referring URLs;
Data received from service providers (for example, for email communications).

We store limited payment information provided by the User in the course of transactions on the Website solely to ensure transaction security and compliance, as outlined in our User Agreement. Payment Information includes only the payment amount, transaction date and number, and contact details necessary to identify a payment.

Koroboost securely stores certain limited payment information necessary to process your transactions efficiently and ensure regulatory compliance. This may include your name, surname, and payment card details (such as card number and expiry date). We store only the minimal data required for payment processing and strictly adhere to applicable security standards, including PCI DSS. We never store sensitive authentication data such as CVV codes.

In case a User loses access to their Koroboost Account or in the event of a dispute, Koroboost Customer Support is entitled to request a photocopy or scan of a government-issued ID (passport, driver's license, or ID card) to validate registration data or confirm rightful ownership of the Account.

Our Services are intended for individuals who are 18 (eighteen) years of age or older. If you are under 18 ("Minor"), you must obtain documented parental or legal guardian consent before accessing our Services. Should we become aware that Personal Data from a Minor has been collected without proper authorization, we will promptly delete that data.

2. How Do We Process Your Personal Data?

Koroboost processes your Personal Data strictly in accordance with applicable data protection laws, including the GDPR. Our processing activities rely on three principal legal bases: contractual obligations, User consent, and legitimate interests.

2.1. Processing Based on Contractual Obligations:

When you create a Koroboost Account and use our Services, we process your Personal Data to perform activities necessary for fulfilling our contractual obligations, including:

Account Registration and Maintenance: enabling your access to our Website and its full functionality;
Transaction Processing: facilitating secure payment processing and managing orders;
Customer Support: addressing inquiries, handling disputes, and providing assistance.

2.2. Processing Based on Your Consent:

Koroboost processes Personal Data for additional purposes beyond essential contractual requirements only with your explicit consent. These purposes include:

Communicating with you regarding our products, services, and promotional activities;
Delivering personalized advertising, including profiling conducted with trusted third-party partners;
Conducting market research, surveys, and other promotional activities;
Developing new marketing campaigns;
Any other specific purposes explicitly consented to by you.

You may withdraw your consent at any time by contacting Customer Support atsupport@koroboost.com.

2.3. Processing Based on Koroboost's Legitimate Interests:

Koroboost may process your Personal Data when necessary for legitimate business interests, provided these interests do not outweigh your privacy rights. Our legitimate interests include:

Collecting outstanding payments and enforcing contractual terms;
Improving user experience through analyzing website usage and interactions;
Maintaining records of orders and interactions;
Ensuring the security of our Website and preventing fraud and misuse;
Delivering targeted advertising based on browsing activities and interests.

You retain the right to object to data processing based on legitimate interests at any time by contacting Customer Support atsupport@koroboost.com.

2.4. Data Sharing with Third Parties:

Koroboost shares your Personal Data strictly as necessary to provide and improve our Services, always ensuring compliance with applicable data protection legislation, including the GDPR. We share data only based on explicit legal grounds such as performance of contractual obligations, compliance with legal requirements, legitimate interests, or your explicit consent.

Categories of third parties we share Personal Data with include:

Payment Systems and Processors:

Stripe:Facilitates secure card payment processing. Shared data includes name, email address, IP address, billing address, and transaction details. Stripe is PCI DSS compliant and GDPR compliant, utilizing Standard Contractual Clauses (SCCs) for international data transfers.
PayPal:Facilitates secure online payment processing. Shared data includes name, email address, and transaction details. PayPal operates under its own Privacy Policy and complies with GDPR requirements.
Cryptocurrency Payment Providers (NowPayments or equivalent):Facilitates cryptocurrency payment processing. Shared data is limited to transaction identifiers and wallet addresses necessary to complete and verify payments. No sensitive personal identifiers are transmitted beyond what is strictly required.

Analytics & Behavioral Tracking Providers:

Google Analytics (GA4):Collects anonymized, cookie-based browser data to analyze User interactions and Website traffic. Data collected includes anonymized IP addresses, session data, page views, and behavioral metrics. Google complies with GDPR, utilizing SCCs for international data transfers.
Facebook Pixel (Meta):Collects anonymized, cookie-based browser and interaction data for advertising performance analysis and retargeting. Data collected includes page views, events, and anonymized user behavior. Meta complies with GDPR standards using SCCs for international data transfers. No directly identifiable personal data beyond cookies and browser identifiers is transmitted.

Fraud Prevention & Risk Management:We may utilize fraud detection tools that analyze User identifiers, transaction data, device metadata, and IP addresses to detect and prevent fraudulent activity.

Law Enforcement and Regulatory Authorities:We may disclose Personal Data when legally required, upon receipt of valid legal requests and proper documentation.

Consent & Opt-out: Data sharing for marketing, advertising, or analytics purposes occurs strictly with your explicit consent, which you may withdraw at any time by contactingsupport@koroboost.com.

For detailed information on cookies used, please refer to our Cookie Policy.

2.5. Technical and Service Communications:

Koroboost sends technical and service communications (such as order confirmations, password resets, and policy updates) necessary for providing our Services and fulfilling our contractual obligations. Such communications do not require separate consent. Marketing communications will only be sent with your prior explicit consent, which you may withdraw at any time.

3. Cases in Which Koroboost Collects and Processes Personal Data

We collect your Personal Data in specific cases during your interaction with our Website and Services, including:

Website Visits:We automatically collect your IP address to prevent fraud, enhance security, and ensure proper Website functionality. This data is retained for up to 9 (nine) months.
Account Creation and Updates:When registering or updating your Account, we collect your email address, username, and social network profile (if registered via social login).
Chat Communications:Your messages exchanged via our support chat or order chat are stored to facilitate service delivery and ensure compliance with platform rules.
Order Placement:Generally, no additional Personal Data beyond Account registration is required for placing an Order. However, certain payment methods may require further information such as full name, billing address, country, city, and phone number.
Post-Purchase Information:Additional game-specific details (e.g., server name, character name,Battle.nettag, or in-game account credentials provided for boosting service delivery) are stored securely to enable efficient service delivery and are treated as strictly confidential. Koroboost will never use such credentials for any purpose other than the delivery of the ordered service.
Identity Verification, Fraud Prevention & KYC:Where required, we collect and process full name, date of birth, contact information, geolocation data (IP address), and government-issued identification documents to comply with applicable KYC, AML, and fraud prevention regulations.
Marketing & Analytics:With your explicit consent, we collect and transfer Personal Data to marketing and analytics partners, including Google Analytics (GA4) and Facebook Pixel, for website usage analysis and advertising campaign management.
Technical Infrastructure & Security:To ensure the stability, security, and performance of our technical infrastructure, we collect technical data including IP addresses, device and browser metadata, technical logs, and session details.
Booster-specific Data Collection:To register, verify, manage payouts, and deliver Booster services, Koroboost collects and processes Personal Data including full name, date of birth, contact information, copies of identification documents, and payment processing details. This data is processed strictly to fulfill contractual obligations and comply with regulatory requirements.

Controller Information:

All Personal Data of Users is legally stored and managed in compliance with applicable data processing legislation, including the GDPR.

Magnera LPis the controller for the storage and processing of Personal Data, registered at Office 29, Clifton House, Fitzwilliam Street Lower, Dublin 2, Ireland.

4. Storage and Processing of Personal Data

Your Personal Data is securely stored on Koroboost servers hosted at the Frankfurt Data Center, Germany, operated by Hetzner. We implement robust technical and organizational measures—including encryption, firewalls, and strict access controls—to protect your data from unauthorized access, disclosure, alteration, or destruction.

Personal Data may also be processed or transferred internationally depending on our third-party providers (including Stripe, PayPal, Google, and Meta). All international data transfers are protected using GDPR-compliant safeguards, including Standard Contractual Clauses (SCCs).

5. International Data Transfers

Your Personal Data may be transferred and processed outside your country of residence, potentially in countries with different data protection standards. Koroboost ensures that all international data transfers comply with GDPR, utilizing approved safeguards such as Standard Contractual Clauses (SCCs) to guarantee adequate protection. As Koroboost is registered and operates within Ireland, all data processing activities are subject to Irish and EU data protection law.

6. Publicly Available Data

To encourage interaction between Users, the following data may be publicly displayed on our Website:

Your username or display name;
Profile rating;
Reviews left by other Users;
Total number of completed orders and success rate.

Additional Points:

Any other data you provide in your personal profile or share with a Booster during an order remains private and is not subject to public display.
You are solely responsible for the Personal Data you choose to publish. Sharing sensitive contact details (such as phone numbers or email addresses) in public areas may result in Account restrictions, in accordance with our User Agreement.
We take steps to secure the privacy of all correspondence between Buyers and Boosters conducted via our Website. However, you should always exercise caution when sharing personal information.

7. Data Protection and Security Measures

Koroboost employs comprehensive security practices to protect your Personal Data in compliance with GDPR and applicable data protection laws. Our security framework includes:

Secure Data Storage:Data is stored securely and processed automatically on protected servers.
Restricted Data Access:Only authorized Koroboost personnel can access your data, strictly to provide and enhance our Services.
Technical Safeguards:Utilization of encryption, firewalls, and ongoing risk assessments.
Staff Training:Information security training for all employees with access to Personal Data.
Payment Security:Transactions occur exclusively via secure gateways operated by certified payment providers (Stripe, PayPal, and cryptocurrency processors). Koroboost does not store sensitive payment authentication data such as CVV codes.

8. Users' Rights Regarding Their Personal Data

In compliance with GDPR, you have the following rights regarding your Personal Data:

8.1. Right to Access:You may request information about what Personal Data we store and how we use it.

8.2. Right to Rectification:You may ask us to correct, update, or delete your Personal Data if inaccurate, incomplete, or outdated.

8.3. Right to Restriction of Processing:You may request that we restrict data processing, such as unsubscribing from marketing communications.

8.4. Right to Erasure ("Right to be Forgotten"):You may request complete deletion of your Personal Data. Please note that transaction history or data necessary for legal compliance may be retained. To exercise this right under Article 17 of the GDPR, please contact us atsupport@koroboost.comwith your full name, contact details, and a copy of your government-issued ID to verify your identity. We will respond within 1 (one) month of receiving your complete request.

8.5. Right to Data Portability:You may request a structured, machine-readable copy of your data for transfer to another service provider.

8.6. Right to Object:You may object to data processing for purposes including direct marketing, research, or analytics.

8.7. Right Against Automated Decision-Making:You have the right to oppose decisions based solely on automated processing, including profiling.

8.8. Right to Lodge a Complaint:If you believe your GDPR rights have been violated, you may file a complaint with the relevant supervisory authority (see Section 8.12 below).

8.9. Right to Managing Consent:You have the right to manage or withdraw your consent for processing activities at any time by contacting Customer Support atsupport@koroboost.com.

To exercise any of these rights, contact us atsupport@koroboost.com. Koroboost responds to all valid GDPR-related requests within 30 (thirty) days, unless legally permitted extensions apply.

8.10.Koroboost reserves the right to refuse any request for data erasure or access that is manifestly unfounded or excessive, in accordance with Article 12(5) of the GDPR.

8.11. California Residents:Koroboost does not sell Personal Data to third parties as defined under the California Consumer Privacy Act (CCPA). To exercise your CCPA rights, please contact us atsupport@koroboost.com.

8.12.If you have concerns or complaints regarding Koroboost's compliance with personal data protection laws, you have the right to contact the Irish supervisory authority:

Data Protection Commission (DPC) — Ireland Website:https://www.dataprotection.ieEmail:info@dataprotection.iePhone: +353 (0)57 868 4800 Postal Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

9. Disclaimer Regarding External Content and Links

Koroboost is not affiliated with external resources linked to or referenced on our Platform and does not endorse their content or practices. Koroboost expressly disclaims any direct or indirect liability for any damages, data loss, or account data theft that may result from following external links or engaging with content on third-party sites. Users are strongly advised to exercise caution and review the privacy and security policies of any external sites they visit.

10. Data Breach Notification

In the event of a data breach or unauthorized access to Personal Data, Koroboost will promptly notify affected Users and the Data Protection Commission (Ireland) within 72 (seventy-two) hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. We will take immediate steps to investigate the incident, mitigate its effects, and prevent future breaches. Detailed information and recommendations will be provided to affected Users as soon as possible.

11. Account Security and Protection

To safeguard your Account, we recommend that you:

Use strong, unique passwords and change them regularly;
Enable two-factor authentication where available;
Keep your login credentials confidential;
Never share account credentials with anyone other than authorized Koroboost Boosters during active orders;
Immediately notify Customer Support atsupport@koroboost.comif you suspect any unauthorized activity.

While Koroboost employs robust security measures, you are also responsible for maintaining the security of your Account.

12. Advertising and Marketing Communications

With your explicit consent, Koroboost may use your Personal Data to deliver targeted advertising and promotional communications via channels including email, Google Ads, and Facebook Ads. You have the right to opt out of receiving such communications at any time by using the unsubscribe link in our emails or by contacting Customer Support atsupport@koroboost.com. Opting out will not affect your receipt of essential service-related notifications.

13. Cookies and Tracking Technologies

Koroboost uses cookies, web beacons, and similar tracking technologies—including Google Analytics (GA4) and Facebook Pixel—to improve service quality, analyze user behavior, and deliver personalized content and advertising. Cookies are small text files placed on your device that enable us to provide a seamless experience and save your settings. You may manage or disable cookies through your browser settings or via our cookie consent tool; however, doing so may affect the functionality of certain site features.

For more detailed information, please refer to our Cookie Policy.

14. Data Retention and Deletion

Your data is retained only for as long as necessary for business or legal purposes. Upon expiration of retention periods, data is securely deleted or anonymized. Koroboost retains your Personal Data for the following periods:

Account-related information: While your Account remains active, plus up to 12 (twelve) months after deactivation;
Transactional data: For a minimum period required by applicable laws, generally up to 5 (five) years;
Chat and communication data: Up to 3 (three) years after your last interaction.

15. Privacy Policy Changes

Koroboost reserves the right to modify or update this Privacy Policy at any time to reflect changes in our Services, practices, or legal requirements. Any material changes will become effective 30 (thirty) days after being posted on this page. We will communicate material changes via email and prominent notices on our Website. Your continued use of our Services after the effective date constitutes your acceptance of the revised terms.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Customer Support at:

Email:support@koroboost.com
Postal Address: Magnera LP, Office 29, Clifton House, Fitzwilliam Street Lower, Dublin 2, Ireland

If your concerns about personal data protection compliance are not addressed satisfactorily, you have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission (DPC) — Ireland Website:https://www.dataprotection.ieEmail:info@dataprotection.iePhone: +353 (0)57 868 4800

By using Koroboost's Website and Services, you acknowledge that you have read, understood, and agree to the collection and use of your Personal Data as described in this Privacy Policy.