Last Updated: 01/08/2026
This Privacy Policy explains how DSTRUCT (“we”, “us”, “our”) collects, uses, stores, and protects information in connection with Overbots (“the Game”).
We are committed to transparency and to handling your data responsibly. We collect only what is necessary for the Game to function, and we never sell your personal data to third parties.
If you have questions or requests regarding your data, contact us at privacy@overbotsgame.com
1. Who This Policy Applies To
This policy applies to all players of Overbots, regardless of the platform through which they access the Game (Steam, Xbox, Epic Games, or any other supported platform).
If you are under 13, you may not use the Game. If you are between 13 and 18, please review this policy with a parent or guardian.
2. Legal Basis for Processing (UK/EU Players)
Where the UK GDPR or EU GDPR applies, we process your data under the following legal bases:
| Purpose | Legal Basis |
| Authenticating your identity | Legitimate interests (enabling you to access the Game) |
| Storing gameplay stats and progression | Contract performance (providing the Game service) |
| Processing in-game purchases | Contract performance |
| Storing your display name override | Consent (you choose to set this) |
| Investigating abuse and bans | Legitimate interests (protecting other players) |
| Complying with legal obligations | Legal obligation |
3. What Data We Collect and Why
3.1 Platform Identity
When you launch the Game, we receive an authentication token from your platform provider (Steam, Xbox, Epic, etc). This token is used to verify your identity and generate a stable anonymous identifier called a Product User ID (PUID), provided by Epic Online Services (EOS).
We do not receive or store your platform password. We do not store your platform username on our servers unless you choose to use it as your in-game display name, in which case it is stored only as part of your profile data (see 3.3 below).
3.2 Gameplay Statistics
We store the following gameplay data linked to your PUID:
- Win count, loss count, and matches played
- In-game currency (Overbucks) balance
- Cosmetic items owned and equipped
- Event pass tier and experience points
- Permanent upgrades collected
This data is required to provide core game functionality — without it we cannot save your progress.
3.3 Profile Data
If you choose to set a custom display name override within the Game, we store:
- Your chosen display name
This is optional. If you do not set an override, only your platform username (fetched at runtime from your platform session) is displayed in-game, and it is not stored by us.
3.4 Technical Data
We may temporarily log the following for the purpose of operating and securing the Game:
- IP addresses (for fraud detection, anti-cheat, and abuse prevention)
- Connection timestamps
- Server-side game event logs (for debugging and anti-cheat)
IP logs are retained for no longer than 30 days unless required for an active investigation.
3.5 Communications
If you contact us directly (e.g. for a support request or data deletion query), we will retain the content of that communication and any contact information you provide in order to respond. We do not use support communications for marketing.
4. What We Do Not Collect
We do not collect:
- Your real name
- Your email address (unless you contact us directly)
- Your date of birth
- Your payment card details (all payments go through platform stores — we never see payment information)
- Your location beyond what is used for server routing
- Any sensitive personal data as defined by GDPR Article 9
5. How We Use Your Data
We use the data described above solely to:
- Authenticate you and maintain your session
- Save and restore your gameplay progress, stats, and cosmetics
- Process in-game purchases and maintain your currency balance
- Detect and prevent cheating, abuse, and fraud
- Investigate and action reports and appeals
- Maintain and improve the Game
- Comply with legal obligations
We do not use your data for advertising, profiling, or to sell to third parties.
6. Third-Party Services
6.1 Epic Online Services (EOS)
We use Epic Online Services, provided by Epic Games, Inc., for:
- Authentication and identity management
- Player Data Storage (stats, currency, customization)
- Lobby and matchmaking services
Data processed by EOS is subject to Epic Games’ Privacy Policy: https://www.epicgames.com/site/en-US/privacypolicy
Epic Games acts as a data processor on our behalf for Player Data Storage. A Data Processing Agreement is in place with Epic Games as required by GDPR.
6.2 Platform Providers
Where you access the Game through Steam, Xbox, or another platform, that platform’s privacy policy governs the data they collect about you. We receive only the minimum data necessary to authenticate your session.
- Valve (Steam): https://store.steampowered.com/privacy_agreement
- Microsoft (Xbox): https://privacy.microsoft.com
- Epic Games (Epic Launcher): https://www.epicgames.com/site/en-US/privacypolicy
6.3 Hosting Infrastructure
The Game’s backend services (where applicable) are hosted on Amazon Web Services (AWS) infrastructure located in eu-central-1 (Frankfurt). AWS acts as a data processor and is subject to standard contractual clauses under GDPR.
7. Data Retention
| Data Type | Retention Period |
| Gameplay stats and progression | Until account deletion is requested |
| Currency balance and cosmetics | Until account deletion is requested |
| Display name override | Until changed or account deletion requested |
| IP logs | 30 days |
| Support communications | 2 years from last contact |
| Server event logs | 90 days |
After the relevant retention period, data is permanently deleted from our systems and from EOS Player Data Storage.
8.1 Right of Access
You may request a copy of all personal data we hold about you. Contact us at privacy@overbotsgame.com with the subject line “Data Access Request”. We will respond within 30 days.
8.2 Right to Rectification
If any data we hold about you is inaccurate, you may request that we correct it.
8.3 Right to Erasure (“Right to be Forgotten”)
You may request deletion of all personal data we hold about you. You can initiate this directly in the Game via Settings → Delete My Data, or by contacting us at privacy@overbotsgame.com.
Deletion is permanent and irreversible. All gameplay progress, currency, cosmetics, and stats will be lost. We will complete deletion requests within 30 days.
Note: We may retain certain data for longer where we have a legal obligation to do so (for example, records of fraud investigations).
8.4 Right to Restriction
You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about accuracy is resolved.
8.5 Right to Object
You may object to processing carried out under legitimate interests. We will assess whether our legitimate interests override your objection on a case-by-case basis.
8.6 Right to Data Portability
You may request your data in a machine-readable format where processing is based on consent or contract performance.
8.7 Right to Lodge a Complaint
If you are in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk
If you are in the EU, you have the right to lodge a complaint with your local Data Protection Authority. A list of EU authorities is available at https://edpb.europa.eu/about-edpb/board/members_en
9. International Data Transfers
Where data is transferred outside the UK or European Economic Area (EEA) — for example to Epic Games servers in the United States — we ensure that appropriate safeguards are in place, including Standard Contractual Clauses as approved by the European Commission.
10. Security
We take the security of your data seriously. Measures we employ include:
- All data in transit is encrypted using TLS 1.2 or higher
- All data at rest in EOS Player Data Storage is encrypted using AES-256
- Access to backend systems is restricted to authorised personnel only
- Server infrastructure is protected by firewall rules limiting exposure to the public internet
- We conduct periodic reviews of our security posture
No system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected players without undue delay.
11. Children’s Privacy
The Game is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, contact us at privacy@overbotsgame.com and we will delete that data promptly.
If you are between 13 and 18, you should review this policy with a parent or guardian before playing.
12. Cookies and Website
This Privacy Policy covers the Game itself. Our website at https://overbotsgame.com uses a separate cookie policy, which is displayed via the cookie consent banner on your first visit to the site. The website does not require account login and does not link website cookies to your in-game PUID.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will provide notice via an in-game notification and by updating the “Last Updated” date at the top of this document. We encourage you to review this policy periodically.
Continued use of the Game after the effective date of changes constitutes acceptance of the updated policy.
14. Contact and Data Controller Details
Data Controller: DSTRUCT
Privacy Contact: privacy@overbotsgame.com
For UK GDPR purposes, DSTRUCT is the data controller.
If you are in the EU and we are required to appoint an EU Representative under Article 27 GDPR, details of that representative will be listed here.
This document was last reviewed on 01/08/2026.