Version dated 09.10.2026
1. General provisions
1.1. The Policy defines the procedure for processing and protecting personal data of individuals (hereinafter, the “Users”) that the Operator may receive when they use the website fantom-market.com and the Telegram bots @fantom_gsm_bot and @fantom_market_bot (hereinafter, the “Website”).
1.2. The Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (as amended in 2025) and is the Operator’s document defining its policy on personal data processing (Art. 18.1 of the law).
1.3. The personal data operator is Roman Igorevich Maslov, a professional income tax payer (self-employed) and the owner of the FANTOM Market website. Contact for personal data inquiries: [email protected].
1.4. Consent to personal data processing is given as a separate document — Consent to personal data processing — and is not part of this Policy, the offer or the agreement.
2. What data is processed
2.1. The Operator may process the following User data:
- name (and surname, if provided);
- email address;
- login and password of the Website account (the password is stored only in encrypted form);
- Telegram ID and username (when signing in via the bot or linking);
- gaming account details that the User provides to fulfil the order (login, region, password, backup codes);
- information about orders, payments and the internal balance (without full bank card details);
- IP address, browser type, cookies.
2.2. The Operator does not process special categories of personal data or biometric data. The Operator does not receive or store bank card details — payments are handled by payment providers.
3. Purposes and legal grounds for processing
3.1. Performance of the agreement (Public Offer): placing, paying for and delivering orders, maintaining the personal account and internal balance — clause 5, part 1, Art. 6 of Federal Law No. 152-FZ.
3.2. Order notifications, confirmations and receipts by email and on Telegram — performance of the agreement and requirements of Russian law.
3.3. Protection of accounts and the Website against hacking and fraud (limiting sign-in attempts by IP address) — the Operator’s legitimate interest and performance of the agreement.
3.4. Compliance with the laws of the Russian Federation — by law.
4. Processing procedure and protection
4.1. Processing is carried out in a mixed manner — both with and without automation tools.
4.2. Data is stored until the purposes of processing are achieved or consent is withdrawn, unless a longer period is required by law.
4.3. The Operator takes legal, organizational and technical measures to protect data against unauthorized access, modification, blocking or destruction: a secure connection (HTTPS), a limited circle of people with access, key-only server sign-in, and backups. In the event of an incident (leak), the Operator acts in the manner established by law.
4.4. Gaming account details provided for an order are visible only to the operators fulfilling that order; passwords are hidden in the personal account.
5. Who the data is shared with
5.1. The Operator may entrust data processing to third parties under a contract and on terms of confidentiality (part 3, Art. 6 of Federal Law No. 152-FZ) only to the extent needed to fulfil the order:
- payment services — to process payments and refunds;
- suppliers of licenses, codes and gaming services — the data without which the order cannot be fulfilled (for example, a device or account ID); the User’s email and name are not passed to suppliers unless the order requires it;
- the hosting provider and email service — to run the Website and send emails;
- Telegram — when the User communicates with the Operator’s bots.
5.2. Some of the services listed may host servers outside the Russian Federation. In that case, data is transferred only for the purposes stated in Section 3 and in the manner established by law.
5.3. The Operator does not sell personal data or pass it to third parties for their own purposes, except as required by law (requests from authorized government bodies).
6. User rights
6.1. The User has the right to: receive information about the processing of their data; demand clarification, blocking or destruction of incomplete, outdated, inaccurate or unlawfully obtained data; withdraw consent; appeal the Operator’s actions to Roskomnadzor or in court (Art. 14 of Federal Law No. 152-FZ).
6.2. To exercise their rights and withdraw consent, the User writes to [email protected]. You can also remove the Telegram link yourself — in the personal account, “Profile” section.
7. Cookie
7.1. The Website uses cookies for signing in to the personal account, for checkout and for remembering settings (selected section, theme). Third-party analytics and advertising systems are not used on the Website. Learn more in the the Cookie Policy.
8. Changes to the Policy
8.1. The Operator may amend the Policy. The current version is always posted on this page and takes effect upon publication.