1. Controller and contact
FUT Bunker controls personal information used for the Companion app, Bunker Portal, Bunker Giveaways, Bunker Assistant and connected Discord services. Email [email protected] for privacy requests or deletion. Email [email protected] for ordinary service help.
2. Information we collect
- Discord ID, username, server nickname, avatar, guild membership, roles, boost status and duration, BUNK tag, invite attribution and authorised OAuth details.
- Profile, subscriptions, purchases, entitlements, Academy progress, tactics and credits, Bunker Points, monthly rarity, discounts, entries, votes, reviews and preferences.
- Product, amount, currency, payment status, provider and transaction references. Stripe and Google process full payment credentials; we do not need your full card number.
- Support, trader and tactic-request forms and messages synchronised between the app, bot DMs and restricted staff forums.
- Device/platform and app version, push token and permission, IP address, timestamps, session and essential-cookie data, security events, diagnostics and errors.
- Content, answers, files and links you choose to submit.
- For paid boosting orders, the encrypted account email, password, platform or launcher, fresh platform and EA backup codes, and encrypted starting and finishing delivery images.
3. Sources and reasons
Information comes from you, Discord, Stripe or Google Play, our operational systems and disclosed content partners. We use it to perform our contract by providing accounts, purchases, access, learning, tactics, support and giveaways; for legitimate interests in operating, improving, securing, moderating and auditing services and defending claims; to meet legal, tax, accounting, fraud-prevention and consumer duties; and with consent for optional notifications or non-essential storage where required.
4. Discord relays and public information
A case may be copied between your Bunker Assistant DM, the app and a restricted staff forum. Authorised staff see what they need to respond. Public reviews can show server nickname or chosen name, avatar, rating, review, date and experience reviewed. Giveaway announcements can include a Discord mention or display name as the giveaway explains. Do not submit information you do not want included in that feature.
5. Automated checks
Systems calculate points, rarity, credits, discounts, progress and giveaway eligibility from recorded rules. Security controls may rate-limit or flag activity. We do not use solely automated decisions producing legal or similarly significant effects without a lawful basis and safeguards. Ask support for human review if a result is wrong.
6. Who receives information
- Discord for sign-in, role and eligibility checks, bot messages, forums, reviews and announcements.
- Stripe and Google Play for payment, verification, subscriptions, refunds and disputes.
- Hosting, database, security, notification, diagnostics and delivery providers under appropriate instructions.
- The booster assigned to an active order, and authorised FUT Bunker Owners where genuinely required to supervise or resolve it. Access to the secure handover and evidence is recorded.
- Boosting customers receive progress and delivery evidence but are not shown the assigned team member's name, Discord account or internal identifier. FUT Bunker can still identify the responsible person internally when supervising work or investigating a complaint.
- Partners only as needed for a disclosed feature; advisers, insurers, dispute handlers, regulators, courts or law enforcement where necessary or required; and a genuine business successor under confidentiality.
We do not sell personal information.
7. International transfers
Some providers process information outside the UK. Where required, we rely on UK adequacy rules or approved safeguards such as the International Data Transfer Agreement or UK Addendum, plus supplementary protections where appropriate. Ask [email protected] about a particular transfer.
8. Retention
Account and entitlement records remain while active and briefly afterwards for deletion, restoration, disputes and legal duties. Financial records remain for legally required periods. Evidence for an active chargeback, fraud report or claim remains until the matter and relevant claim period end. Cases and giveaway records remain only as long as reasonably needed for quality, safeguarding, audit, fulfilment and complaints. Security, activity and diagnostic records use risk-based periods. Information is then deleted or anonymised unless lawful retention remains necessary.
Boosting handover details are permanently removed at completion. If they were opened before an order is returned, they are removed and replacements are required. Starting and finishing images are normally removed 180 days after completion.
9. Cookies, notifications and security
The websites use essential cookies or storage for Discord sign-in, sessions, security and preferences. Blocking them can prevent account features. We ask before non-essential cookies where consent is required. Push notifications are optional. We use authentication, encrypted transport, restricted staff access, monitoring and audit records. Boosting handovers and delivery images use authenticated encryption at rest, order-specific derived keys and audited access, but no service can promise absolute security.
10. Your rights
- Request access, correction, deletion or restriction where the legal conditions apply.
- Object to legitimate-interest processing and at any time to direct marketing.
- Request portability where processing is automated and based on contract or consent.
- Withdraw consent without affecting earlier lawful processing.
- Complain to a regulator without unfair treatment.
Email [email protected]. We may request proportionate proof of account control. Rights are not absolute; if an exemption applies, we explain why. We normally respond within one month, subject to lawful extensions.
11. Deletion, children and complaints
Use the in-app deletion option where available or email [email protected] from an account we can verify. Cancel recurring billing separately. The services are not directed below the minimum age set by Discord, the app store or local law.
Contact us first so we can investigate. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We publish a new date and prominent notice when a change materially affects information use.