Privacy Policy

1. Introduction & Scope of Policy

Next Level Arcadia (referred to herein as "Next Level Arcadia", "the Platform", "we", "us", or "our"), operated by Arcadia Media ("Company"), is committed to safeguarding the digital privacy, data security, and fundamental personal data rights of all individuals who access our website located at https://nextlevelarcadia.com and its associated web directories.

This Privacy Policy establishes the legal and technical basis on which any personal data collected from you, or provided by you to us, will be processed, stored, and protected. This policy is formulated in strict compliance with the European Union General Data Protection Regulation (EU GDPR 2016/679), the United Kingdom General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), Google Publisher Policies, and Google Consent Mode v2 frameworks.

2. Data Controller Information

For the purposes of applicable data protection legislation, the Data Controller responsible for your personal data is:

3. Categories of Data Collected

We adhere to the principle of data minimization, collecting only information strictly necessary to provide high-performance gaming strategy publications, maintain system security, and analyze reader engagement:

A. Information You Voluntarily Provide

When you interact with our direct communication channels — such as submitting an inquiry through our Contact Portal or communicating with our editorial staff — we collect your name, email address, inquiry category, message subject, and the textual content of your correspondence. This information is utilized exclusively to respond to your specific editorial feedback or technical correction.

B. Automatically Collected Technical Telemetry

When you navigate through our portal, our web hosting servers automatically record standard HTTP server access logs. This technical telemetry includes:

• Internet Protocol (IP) address (which is automatically truncated and anonymized in server logs);
• Uniform Resource Identifier (URI) requests and referring URLs;
• Browser user-agent string, operating system version, and device classification;
• Date and timestamp of each server transaction;
• HTTP response status codes and byte volume transferred.

4. Third-Party Advertising & Google AdSense Disclosure

Next Level Arcadia utilizes Google AdSense, a certified advertising network operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to deliver non-intrusive contextual and interest-based advertisements across designated placeholder zones on our website.

Google and its certified third-party vendor partners utilize cookies and digital device identifiers to serve advertisements based on your prior visits to Next Level Arcadia and other websites across the internet. In particular, Google uses the DoubleClick advertising cookie to enable Google and its network partners to serve ads tailored to your browsing history.

You may opt out of personalized advertising by visiting Google Ads Settings (https://adssettings.google.com) or through the Network Advertising Initiative opt-out portal (https://optout.networkadvertising.org). Furthermore, European and California residents can control ad personalization directly through our interactive Cookie Consent Management tool.

5. Google Consent Mode v2 & Technical Implementation

In strict adherence to Google mandatory 2024+ European Economic Area (EEA) requirements, Next Level Arcadia implements Google Consent Mode v2. Consent Mode v2 operates as an API layer that communicates your privacy consent choices directly to Google tags and advertising services before any advertising scripts execute.

When you initially load any page on Next Level Arcadia, the following consent parameters are set to an immutable default state of 'denied' prior to user interaction:

• ad_storage: 'denied' (controls the storage of advertising cookies on your terminal);
• ad_user_data: 'denied' (controls the transmission of user data to Google for online advertising purposes);
• ad_personalization: 'denied' (controls whether Google can serve personalized remarketing ads);
• analytics_storage: 'denied' (controls the storage of analytics and metric cookies).

Only upon your explicit affirmative action (clicking "Accept All" or enabling specific categories within our Cookie Preferences modal) does our client-side JavaScript dispatch a gtag('consent', 'update') signal granting permission for specific data categories. If you decline consent or select "Reject Non-Essential", no advertising cookies are written to your local device, and advertising slots display strictly non-personalized contextual gaming ads.

6. Web Analytics & Performance Telemetry

We utilize Google Analytics 4 (GA4) to evaluate aggregate readership metrics, measuring page load durations, scroll depth, and navigation pathways across our strategy curriculum. Under our strict Consent Mode v2 implementation, if analytics consent is not granted, GA4 operates in cookieless ping mode, transmitting non-identifying structural pings without reading or writing persistent client identifiers.

7. Legal Grounds for Processing (GDPR Article 6)

Next Level Arcadia processes personal data under the following lawful bases established under GDPR Article 6:

• Consent (Art. 6(1)(a)): For the deployment of non-essential analytics cookies, personalized advertising, and optional preference tracking.
• Legitimate Interests (Art. 6(1)(f)): For maintaining server security, mitigating denial-of-service attacks, debugging server errors, and delivering requested web content.
• Contractual Necessity (Art. 6(1)(b)): For responding to direct communication, correspondence, and technical inquiries initiated by the user.

8. Your Rights Under the General Data Protection Regulation (GDPR)

If you reside within the European Economic Area (EEA) or the United Kingdom, you possess comprehensive statutory data protection rights under Articles 15 through 22 of the GDPR:

• Right of Access (Article 15): You have the right to request a complete copy of any personal data we hold concerning your person.
• Right to Rectification (Article 16): You have the right to request the immediate correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17 — "Right to be Forgotten"): You have the right to demand the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing (Article 18): You have the right to restrict our processing of your personal data under contested accuracy conditions.
• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21): You have the absolute right to object at any time to the processing of your personal data for direct marketing purposes.
• Right to Lodge a Complaint: You have the right to file a formal complaint with your national Data Protection Supervisory Authority.

9. Notice to California Residents (CCPA / CPRA Disclosures)

Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020, California consumers are entitled to specific disclosures regarding the collection, use, and disclosure of personal information:

We Do Not Sell Personal Information: Next Level Arcadia does not sell your personal information for monetary compensation. To the extent that third-party advertising cookies utilized by Google AdSense constitute a "sale" or "sharing" under CPRA definitions for cross-context behavioral advertising, you have the right to opt out by clicking "Reject Non-Essential" on our cookie banner or using the Global Privacy Control (GPC) signal.

California Privacy Rights: California residents possess the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate information, and the right to non-discrimination for exercising these statutory rights.

10. Data Retention & International Data Transfers

Server access logs containing truncated IP addresses are automatically purged after 30 calendar days. Direct correspondence submitted via our contact portal is retained for a maximum duration of 12 months for editorial continuity and subsequently destroyed.

When data is processed by international service providers (such as Google LLC), transfers outside the European Economic Area are safeguarded through Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent data protection standards regardless of physical server geography.

11. Child Online Privacy Protection Act (COPPA) Compliance

Next Level Arcadia is directed toward competitive tournament players, esports professionals, and adult gaming enthusiasts. We do not knowingly solicit or collect personal information from children under the age of 16. If we discover that personal data from an individual under 16 has been collected without verified parental consent, we take immediate technical steps to delete such records from our databases.

13. IAB Europe Transparency and Consent Framework (TCF v2.3) Compliance

Next Level Arcadia actively supports and adheres to the specifications and policies of the IAB Europe Transparency and Consent Framework (TCF v2.3). The TCF v2.3 establishes an industry-wide technical architecture designed to facilitate standardized GDPR and ePrivacy Directive compliance across digital publishing ecosystems.

Under TCF v2.3 protocols, our Consent Management Platform (CMP) generates a standardized Transparency and Consent (TC) String. This cryptographic string encapsulates your granular consent preferences across all standardized IAB purposes, special features, and certified vendor networks. The TC String is stored locally in standard IAB localStorage keys (euconsent-v2) and broadcast across the programmatic advertising bidstream via the standard __tcfapi interface.

This standardized signaling ensures that third-party ad exchanges, supply-side platforms (SSPs), and demand-side platforms (DSPs) automatically recognize your consent choices, preventing ad bidding auctions from processing personal identifiers whenever consent has been withheld or revoked.

14. Data Security & Encryption Architecture

Arcadia Media enforces defense-in-depth technical and organizational security measures to protect user data against unauthorized access, destruction, loss, alteration, or disclosure. All web traffic to and from Next Level Arcadia is encrypted in transit utilizing Transport Layer Security (TLS 1.3) with modern cryptographic cipher suites.

Our server configurations implement HTTP Strict Transport Security (HSTS) with preloading directives, enforce SameSite attribute isolation on all functional cookies, and maintain strict access control lists on all administrative directories. We conduct recurring vulnerability assessments to maintain the highest standard of system integrity.

12. Contact Data Protection Officer

To exercise any statutory data privacy rights or submit questions regarding this policy, contact our Data Protection Officer at:

Email: [email protected]
Mailing Address: Arcadia Media Data Protection Division, West Java, Indonesia.