Effective date: 21 April 2026 • Last updated: 21 April 2026

Who we are

Many Worlds (Pty) Ltd

Registration number: 2024/683507/07

Pretoria, South Africa

Many Worlds is the responsible party for the personal information we process, as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

Information We Collect

2.1 Website Visitors

Technical data such as IP address, browser type, device type, and pages visited
Information submitted through contact or enquiry forms (name, email address, message)
Cookie and analytics data (see Section 10)

2.2 Application and Game Users (Steam and Meta Quest)

Device information including headset model, operating system version, and hardware identifiers
Gameplay and session data including scores, reaction times, session duration, and interaction patterns
Application performance data and crash reports
Account information if you create an account with Many Worlds

We also receive data from platform providers. When you access our applications through Steam (Valve Corporation) or Meta Quest (Meta Platforms, Inc.), those platforms may share certain account or device identifiers with us in accordance with their own privacy policies.

2.3 Activation Event Participants

Age group (not date of birth) and performance scores generated during simulation sessions
Where parental or guardian consent is obtained: aggregate skill assessment data

We do not collect names or contact details of participants at activation events unless you as choose to provide them by signing up for updates.

2.4 Job Applicants

Name, contact details, and any information included in your application or CV
Portfolio links and work samples you choose to share

How We Use Your Information

To provide, operate, and improve our products and services
To analyse gameplay and session data for performance analytics and product development
To respond to enquiries and communicate with you
To process job applications
To comply with legal obligations
To protect the security and integrity of our platform

We do not use your personal information for automated decision-making that produces legal or similarly significant effects without your knowledge.

Legal Basis for Processing (POPIA)

Under POPIA, we process personal information on the following grounds:

Contractual necessity: to provide services you have requested or agreed to.

Legitimate interest: to improve our products, ensure platform security, and conduct internal analytics, where this does not override your rights.

Consent: where you have given us explicit consent, including for marketing communications. You may withdraw consent at any time.

Legal obligation: where processing is required to comply with applicable law.

Sharing Your Information

We do not sell your personal information. We may share it in the following circumstances:

Platform providers: Steam (Valve Corporation) and Meta Platforms, Inc. operate the platforms through which our applications are distributed. Their processing of your data is governed by their respective privacy policies.

Service providers: We may use third-party services for analytics, hosting, or communications that process data on our behalf under data processing agreements.

Legal requirements: We may disclose information where required by law, court order, or government authority.

Business transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

International Data Transfers

Some of our service providers and platform partners (including Valve Corporation and Meta Platforms, Inc.) are based outside South Africa. When we transfer your personal information internationally, we take steps to ensure it receives appropriate protection consistent with POPIA, including relying on the data protection frameworks of the receiving country or entering into appropriate contractual safeguards.

Children’s Privacy

Some of our products and activation events are designed for use by children, including players under the age of 13. We take the following steps to protect children’s privacy:

At activation events, we collect only age group and session performance data. We do not collect names or contact details from child participants without parental or guardian consent.
We do not knowingly collect personal information from children under 13 through our website or applications without verified parental consent.
Parents or guardians may contact us at any time to request access to, correction of, or deletion of any personal information collected in relation to a child.

If you believe we have inadvertently collected personal information from a child without appropriate consent, please contact us at [email protected] and we will take prompt steps to delete it.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Website enquiry data: up to 12 months after the last communication
Application and gameplay data: up to 3 years, or until you request deletion
Activation event data: up to 12 months after the event
Job applicant data: up to 6 months after the application process concludes

When data is no longer required, we delete or anonymise it securely.

Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information, subject to legal obligations
Object to the processing of your personal information
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time and in accordance with POPIA.

Information Regulator of South Africa

Website: https://inforegulator.org.za/

Email: [email protected]

Telephone: 010 023 5207

Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to improve your browsing experience and gather analytics data. You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain parts of our website.

We do not use cookies for targeted advertising.

Third-Party Links and Platforms

Our website and applications may contain links to third-party platforms including Steam and the Meta Quest store. We are not responsible for the privacy practices of those platforms. We encourage you to review their privacy policies before providing any personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify users through our application or website. Continued use of our services after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal information, please contact us: