Privacy Statement
Last updated: May 29, 2026
This Privacy Statement explains how Rocket Science Corporation (UK) Ltd and its affiliates ("Multiplay", "we", "our" or "us") collect, use, disclose and protect your personal data when you use our services, and how to exercise your rights.
This Privacy Statement applies to personal data that we collect through our website at multiplay.dev, our platform dashboard, and any other related websites or services that link to this statement (collectively, the "Services"), as well as personal data that we collect from our customers, suppliers, and other individuals through any other form of interaction, whether online or offline.
If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at privacy@rocketscience.gg.
Who Do We Collect Personal Data From?
We collect and process personal data from the following categories of individuals:
Customers and their authorized representatives — individuals who enter into agreements with us for the provision of our Services, including those who manage accounts, sign service order forms, or act as primary contacts.
End Users — customers of our customers and end users of their services and applications, whose data may be processed through our infrastructure on behalf of our customers.
Website visitors — individuals who visit our websites or interact with our online content.
Prospective customers and business contacts — individuals who express an interest in obtaining information about our products and services, or who engage with us through sales, marketing, or events.
Job applicants — individuals who apply for employment with us.
What Personal Data Do We Collect?
We collect personal data through two distinct channels: our public portal and our platform services.
Portal (Website)
When you visit our websites — including multiplay.dev, docs.multiplay.dev, and any other websites that link to this Privacy Statement — we may collect the following:
Information you provide to us, such as when you submit a contact form, request information about our services, or otherwise communicate with us. This may include your name, email address, phone number, job title, and contact preferences.
Information we collect automatically, which does not reveal your specific identity but may include device and usage information:
Log and Usage Data — service-related, diagnostic, usage, and performance information our servers automatically collect when you access our websites, which we record in log files. This may include your IP address, device information, browser type, and information about your activity on the site.
Device Data — information about the device you use to access our websites, which may include your IP address, device and application identification numbers, browser type, hardware model, operating system, and system configuration information.
Location Data — information about your device's location, which can be either precise or imprecise based on your IP address. You can opt out of allowing us to collect this information by disabling your Location setting on your device.
Platform (Services)
When you use our infrastructure hosting and orchestration platform — including the dashboard, APIs, and CLI tooling — we collect the following:
Customer account information provided during onboarding and account management, including names, email addresses, mailing addresses, billing addresses, payment information, authentication credentials, and service usage data.
End user data processed on behalf of customers through the platform infrastructure. The categories of personal data processed in this context — including IP addresses and usernames/gamertags as may appear in service logs — are defined in the Description of Transfer sections of Appendix A to the Data Processing Addendum. Multiplay processes end user data strictly on behalf of and in accordance with the customer's instructions.
Sensitive Information
We do not process sensitive personal information.
Information from Third Parties
We do not receive personal information from third parties.
How Do We Process Your Information?
We process your personal data for a variety of reasons, depending on how you interact with our Services, including:
To provide and maintain our Services — including infrastructure hosting, orchestration, technical account management, and 24/7 operational support in accordance with our agreements.
To administer your account — managing your registration, service order forms, billing, and support requests.
To communicate with you — responding to your inquiries, sending service-related notices, and providing updates about our Services.
For security and fraud prevention — monitoring, preventing, and detecting fraudulent transactions and other fraudulent activity on our Services.
To improve our Services — analysing usage patterns and performance data to develop and improve our products and services.
To comply with legal obligations — cooperating with law enforcement bodies or regulatory agencies, exercising or defending our legal rights, or disclosing information as required by applicable law.
To protect vital interests — processing your information when necessary to save or protect an individual's vital interest, such as to prevent harm.
We process your information only when we have a valid legal reason to do so.
What Legal Bases Do We Rely On?
If You Are Located in the EU or UK
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following:
Consent — We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time by contacting us using the details provided below.
Performance of a Contract — We may process your personal data where it is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
Legitimate Interests — We may process your information where it is necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights.
Legal Obligations — We may process your information where we believe it is necessary for compliance with our legal obligations.
Vital Interests — We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party.
If You Are Located in Canada
We may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time by contacting us using the details provided below.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including for investigations and fraud detection, to comply with a subpoena or court order, or where collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
When and With Whom Do We Share Your Personal Data?
We may share your personal data in the following situations:
Sub-Processors — We engage sub-processors who may have access to personal data in order to perform services on our behalf. See the Sub-Processors page for the current list and change notification process.
Business Transfers — We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Legal Requirements — We may disclose your information where required to do so by law, in response to a valid court order, or to comply with applicable regulations.
We do not sell personal information to third parties. We do not disclose personal data for the purposes of cross-contextual or targeted advertising.
Do We Use Cookies and Other Tracking Technologies?
We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.
How Long Do We Keep Your Information?
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Statement, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this statement will require us keeping your personal information for longer than 2 years beyond the end of the business relationship.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. The components of our information security program are described in Section 7.6 of the Terms of Service.
However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. You should only access the Services within a secure environment.
Do We Collect Information from Minors?
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@rocketscience.gg.
What Are Your Privacy Rights?
If You Are Located in the EEA, UK, or Switzerland
You may have certain rights under applicable data protection laws, including the right to request access, rectification, erasure, restriction of processing, data portability, and the right to object to processing.
You can make such a request by contacting us using the details provided below. We will consider and act upon any request in accordance with applicable data protection laws.
If you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. Contact details for EEA authorities are available at https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. For Switzerland, see https://www.edoeb.admin.ch/edoeb/en/home.html.
Withdrawing Your Consent
If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details provided below. This will not affect the lawfulness of the processing before its withdrawal.
Opting Out of Marketing Communications
You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided below. We may still communicate with you for service-related purposes that are necessary for the administration and use of your account.
Cookies and Similar Technologies
Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject cookies. If you choose to do so, this could affect certain features or services of our Services.
Controls for Do-Not-Track Features
At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this statement.
U.S. State Privacy Rights
If you are a resident of California or another U.S. state with applicable data protection legislation, you may have specific rights regarding your personal information, including the right to access, delete, and correct personal data, to opt out of the sale of personal information, and to designate an authorized agent to make requests on your behalf.
Multiplay has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and will not sell personal information belonging to website visitors, users, or other consumers.
We will not discriminate against you if you exercise your privacy rights.
The specific U.S. state laws that may apply to our processing activities are enumerated in Section 1.1 of the Data Processing Addendum. To exercise any applicable rights, contact us at privacy@rocketscience.gg.
Do We Make Updates to This Statement?
We may update this Privacy Statement from time to time. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this statement frequently to be informed of how we are protecting your information.
How Can You Contact Us?
If you have questions or comments about this Privacy Statement, you may contact our Data Protection Officer by email at dpo@rocketscience.gg, or by post to:
Rocket Science Corporation (UK) Ltd 4th Floor Elgin House, 106-107 St Mary's Street Cardiff, United Kingdom CF10 1DX
Attn: Data Protection Officer
For general privacy inquiries: privacy@rocketscience.gg