Privacy Policy

Victory Road ("we", "us") operates this events and ticketing platform. We are based in Spain and process personal data in accordance with the EU General Data Protection Regulation (GDPR). For any privacy matter, contact us at events@victoryroadvgc.com.

• Account data — email address, password (stored by our authentication provider, never by us), first name and last names, country, and optionally your Discord and X usernames.
• Player ID — your Bandai ID, used to register you correctly for sanctioned tournaments.
• Purchase data — the tickets you buy, order numbers, prices paid, refunds, and discount codes used. Card details are handled entirely by our payment provider; we never see or store your card number.
• Event participation data — your ticket's QR code and when it was scanned at the venue, plus queue and waitlist activity (when you joined, your position).
• Emails we send you — we log transactional emails (ticket confirmations, refund confirmations, waitlist notifications) so we can help you if one goes missing.

• To perform our contract with you — selling you tickets, admitting you to events, processing refunds, running fair queues and waitlists.
• To meet legal obligations — invoicing, tax and accounting records.
• Legitimate interest — preventing fraud and abuse (for example bot protection on high-demand sales) and keeping an audit trail of changes to your bookings.

We do not sell your personal data, and we do not use it for third-party advertising.

We rely on a small set of processors to run the platform:

• Clerk — account creation and sign-in.
• Stripe — payments and refunds.
• Resend — transactional email delivery.
• Our hosting and database providers, which store the data described above.

Each processor only receives the data it needs for its role and is bound by its own GDPR commitments. Some processors are established outside the EU; where that is the case, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision.

Account data is kept while your account exists. Purchase and refund records are kept as long as tax law requires. Queue, waitlist and scan logs are kept for the operational lifetime of the event and our audit trail. You can ask us to delete your account and associated data at any time — we will keep only what we are legally required to retain.

Under the GDPR you can request access to, correction of, or deletion of your personal data; ask for a portable copy; restrict or object to certain processing; and lodge a complaint with your supervisory authority (in Spain, the AEPD). Write to events@victoryroadvgc.com and we will respond within one month.

We use only the cookies and browser storage needed to run the site: keeping you signed in, remembering your place in a purchase queue, and protecting sales from bots. We do not use advertising or cross-site tracking cookies.

If we change this policy in a meaningful way we will update the date at the top and, where the change is significant, notify you by email.