Privacy Policy

1. Who processes your data

The data you provide to Tibia 2 is processed by the Tibia 2 team, under the Brazilian General Data Protection Law (Law 13.709/2018). For any privacy matter, write to us on our official Discord.

2. What we collect

Registration: e-mail and password. The password is stored as a hash — never as plain text — and the team cannot read it.

Game usage: character names, progress, deaths, in-game transactions, IP address and access logs. The IP and the logs exist for security: that is how we identify account theft and cheating.

Payment: the payment provider processes and stores the financial data. From them we only receive the transaction confirmation — we do not have your card number.

3. What we use it for

To create and maintain your account, deliver what you bought, provide support, investigate fraud and cheating, and notify you about changes to the service.

We do not sell your data and we do not use it for third-party advertising.

4. Legal basis

We process data to perform our contract with you (account and purchases), to comply with a legal obligation (access and tax records), and on legitimate interest in keeping the server secure and free of cheating.

5. Who we share it with

With the payment provider (to process the purchase) and with the infrastructure hosting the server and the website. Each receives only what its role requires.

We may also share it when the law or a court order requires it.

6. How long we keep it

Account data stays for as long as the account exists. Access logs are kept for the legal retention period. Payment data follows the applicable tax period.

After that, data is deleted or anonymised.

7. Your rights

At any time you may request: confirmation that we process your data, access to it, correction of anything wrong, portability, and deletion of the account and of the data we are not required to keep.

Request it on our official Discord. We answer within the period set by law. Account deletion is final: characters, items and coins do not come back.

8. Security

We use an encrypted connection on the website, passwords stored as hashes and restricted database access. No system is immune to incidents; if something happens that may affect you, we will report it as the law requires.

9. Minors

The service is not intended for children under 13. Between 13 and 18, use and purchases depend on a guardian's permission.

10. Cookies

The website uses cookies. The details are in the Cookie Policy.

11. Changes to this policy

If we change how we handle data, we update this page and announce it in the news.