Security

Our approach to security

Your players trust your game with their accounts and their progress. This page sets out how we protect that data, which standards we are certified against, and who to ask if anything here leaves a question open.

What we do, in practice.

The controls that sit behind the certification, described in plain terms rather than policy language.

  • Data encryption

    Player and game data is encrypted at rest and in transit, using TLS 1.2 or above whenever it moves between systems.

  • Corporate security

    Access controls, employee training, and regular security assessments protect company systems and the data held inside them.

  • Vulnerability management

    Regular system checks and threat monitoring surface potential weaknesses, and updates go out to close them.

  • DDoS and intrusion detection

    Monitoring tools watch for unauthorized access attempts and traffic floods in real time, so we can respond before players feel it.

Still have a security question?

Tell us what your review or procurement process needs and we will point you to the right document.