CONTRACT | What is the Data Processing Addendum (DPA)? – Developer Portal - Support

The DPA applies whenever personal data is processed through the operation of your Game on the Kongregate platform. This applies to your game and any third-party services you may use within your game. You are responsible for any third-party services that may collect personal data (if in doubt, check).

The DPA governs how personal data is handled when your game interacts with Kongregate services. It is an addendum to the Game License & Upload Agreement, not a separate agreement. It supplements the main agreement by setting out additional rules and obligations regarding personal data collected or processed in connection with your game.

As such, the DPA is part of the main agreement and should be read and followed alongside it. Together, they define your legal and operational obligations when your game runs on the Kongregate Platform.

It ensures that the platform complies with global privacy regulations including:

EU GDPR
UK GDPR
California privacy law
other international privacy frameworks

The DPA explains:

how player data is collected, stored, and used
what data may be processed
developer responsibilities to comply with privacy laws
how data is protected
data subject rights, like deletion or access requests
how international data transfers are handled
how Kongregate supports compliance with these rules
how a breach of your data needs to be handled

Topic	Key Points
Personal Data	Only collect what’s necessary; comply with privacy laws (GDPR, CCPA, etc.).
Consent	Obtain player consent when required.
Data Subject Rights	Players can request access, deletion, or corrections.
Compliance Support	Kongregate provides secure storage, guidance, and a process for handling requests.