Privacy Policy

1. Introduction

TCG Listing ("we", "us", or "our") operates tcglisting.com (the "Service"), an online directory and peer-to-peer marketplace where users can list, browse, and contact sellers of trading card game (TCG) products. We do not process payments between buyers and sellers for card sales; transactions are completed offline between users.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Who we are

TCG Listing is operated by SINGLE CELL ENTERTAINMENT (NO. PENDAFTARAN: 202403292570 (AS0486789-U)), which is the data controller for personal information processed through the Service. For privacy-related questions or requests, contact us at contactus@tcglisting.com.

3. Information we collect

We may collect the following categories of information:

3.1 Account and authentication

• Email address and account identifiers
• Authentication credentials (passwords are hashed and stored by our authentication provider; we do not store plain-text passwords)
• Sign-in method (email/password, Google, or Facebook Login, if you choose those options)

3.2 Information from Facebook Login

If you sign in with Facebook or connect your Facebook account, we receive information from Meta Platforms, Inc. ("Facebook") as permitted by your Facebook account settings and the permissions you grant. This may include:

• Your Facebook user ID
• Name and email address (if made available to us)
• Facebook profile link or public username
• Profile picture URL (if provided by Facebook)

We use this information only to create and manage your account, help you set up seller contact details, and operate the Service. We do not receive your Facebook password. Facebook's own privacy practices are described in Facebook's Privacy Policy.

3.3 Profile and seller information

• Username, display name, bio, and marketplace location fields
• Home marketplace country and related preferences
• Facebook profile URL and Messenger contact link you provide or that we derive from Facebook Login (for buyer contact)
• Local game store (LGS) business details if you apply for verification (e.g. business name, registration number, address, phone, operating hours)

3.4 Listings, reviews, and marketplace activity

• Listing details (card names, sets, conditions, prices, quantities, images, and related metadata)
• Ratings and review comments you submit about sellers

3.5 Payments for optional advertising (sellers only)

Verified local game stores in supported markets may purchase optional homepage banner advertising through Stripe. Payment details are handled directly by Stripe; we do not store full payment card credentials. We may receive billing-related metadata (such as payment status, amount, currency, and transaction identifiers).

3.6 Contact form and support

• Name, email address, subject, and message content you submit
• Your account ID, if you are logged in when you contact us

3.7 Technical and usage data

• IP address, browser type, device information, and pages visited
• Cookies and similar technologies (see Section 8), including session cookies for login and a marketplace country preference cookie
• Approximate country or region inferred from network or browser signals to suggest your marketplace view

4. How we use your information

We use personal information to:

• Provide, operate, and maintain the Service
• Create and authenticate your account
• Display your public seller profile, listings, and reviews on the marketplace
• Filter marketplace content by country and show prices in the relevant local currency format
• Enable buyers to contact sellers via Facebook Messenger using links you provide
• Process optional paid banner bookings for verified stores
• Respond to support requests and contact form submissions
• Protect the security and integrity of the Service
• Comply with legal obligations and enforce our terms

We do not sell your personal information. We do not use Facebook Login data for unrelated advertising profiling.

5. Legal bases (where applicable)

Depending on your location, we process personal information on one or more of the following bases: performance of a contract (providing the Service you request), legitimate interests (operating and securing the platform), consent (where required, such as optional cookies or connecting Facebook), and compliance with legal obligations.

6. How we share information

We may share information with:

• Other users and the public — usernames, profile details, listings, and reviews are visible on the marketplace as described in Section 7
• Service providers who help us operate the Service, including:
  • Supabase (authentication, database, and hosting)
  • Stripe (payment processing for optional advertising)
  • Hosting and infrastructure providers
• Card data providers — when you search for cards to list, card names and related query data may be sent to public APIs such as Scryfall and other TCG data sources
• Facebook / Meta — only as part of the Facebook Login authentication flow you initiate; buyer contact thereafter occurs on Facebook Messenger under Facebook's terms
• Authorities — when required by law or to protect rights, safety, and security

7. Public information

Information you choose to make public on the Service — including your username, seller profile, listings, and reviews — can be seen by anyone visiting the marketplace. Listings appear only in the marketplace country associated with your seller account. Do not post personal information you do not want to be public.

8. Cookies and similar technologies

We use cookies and similar storage for purposes such as:

• Keeping you signed in (session/authentication cookies)
• Remembering your selected marketplace country (tcgl_market)
• Remembering preferences (such as recently viewed game filters)
• Security and basic site operation

You can control cookies through your browser settings. Disabling essential cookies may affect login and core functionality.

9. International data transfers

Our service providers may process and store information in countries other than your own, including countries that may not provide the same level of data protection as your home jurisdiction. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.

10. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations. When you request account deletion, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate security, fraud-prevention, or backup purposes.

11. Security

We use reasonable administrative, technical, and organizational measures through our service providers to protect personal information. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

12. Your rights and choices

Depending on applicable law (including Malaysia's Personal Data Protection Act 2010 where applicable), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and personal information
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Lodge a complaint with a relevant data protection authority

You can update much of your profile information in your dashboard. To exercise other rights, email contactus@tcglisting.com or use our contact form.

13. Facebook Login — disconnect and data deletion

You may stop using Facebook Login by signing in with email/password or Google instead, and by removing TCG Listing from your Facebook account settings under Settings → Apps and Websites.

To request deletion of personal information we obtained through Facebook Login or to delete your TCG Listing account entirely, contact us at contactus@tcglisting.com. We will process verified deletion requests within a reasonable time, subject to legal retention requirements.

Deleting your TCG Listing account does not delete your Facebook account. Communications that already occurred on Facebook Messenger are governed by Facebook's policies.

14. Children

The Service is not intended for children under 13 years of age (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

15. Third-party links and services

The Service contains links to third-party websites and services, including Facebook, Facebook Messenger, Stripe, and card database providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing information to them.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the effective date above. Material changes may also be communicated through the Service where appropriate. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

17. Contact us

For privacy questions, data requests, or complaints, contact:

• Email: contactus@tcglisting.com
• Contact form: tcglisting.com/contact
• Website: https://tcglisting.com