CS2BOLTSign in with Steam
CS2Bolt

Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data CS2Bolt collects, why, and the rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Data Protection Act of Malta (Chapter 586 of the Laws of Malta).

1. Who we are

CS2Bolt is the data controller for the personal data described here. You can reach us about privacy at any time by opening a ticket on our support page.

2. Data we collect

  • Steam account data. When you sign in with Steam, Steam sends us your Steam ID and your public profile name and avatar. We never receive your Steam password.
  • Trading data. Your Steam Trade URL, the items you deposit and withdraw, the trade offers we send and receive, and your public Steam inventory when you open the deposit page.
  • Account and game activity. Your balance, items, game rounds and results, transactions, provably fair seeds, settings, and community cases you create.
  • Messages. Anything you send us when you contact support.
  • Technical data. Your IP address, browser and device information, and request logs, which our servers and hosting providers process to deliver the site and keep it secure.

3. Why we use it

  • To provide the Service (performance of our contract with you): running your account, games, deposits, withdrawals and support.
  • To keep the Service safe (our legitimate interests): preventing fraud, abuse, multi accounting and cheating, and fixing faults.
  • To meet legal duties (legal obligation): keeping records, verifying age where needed, and responding to lawful requests from authorities.
  • To support responsible gaming (legitimate interests and legal obligation): honouring breaks and self exclusions you ask for.

We do not sell your personal data, and we do not use it for advertising.

4. What other players can see

Your Steam name and avatar, your public profile page, and wins or openings you make can appear to other players, for example in live drop feeds, case battles, coinflips and round verification pages.

5. Who we share it with

  • Valve and Steam, to sign you in and to send and receive trades. Valve handles that data under its own privacy policy.
  • Hosting and infrastructure providers who run our servers for us under contract.
  • Authorities, courts or regulators when the law requires it or to protect our rights and our players.

We use item price data from third party marketplaces, but we do not send them your personal data.

6. International transfers

Some providers, including Valve, are based outside the European Economic Area. Where we transfer personal data outside the EEA, we rely on safeguards recognised under the GDPR, such as adequacy decisions or standard contractual clauses.

7. How long we keep it

We keep your account data for as long as your account is open. After you close your account, we keep transaction, trade and game records for up to five years, where needed to meet legal obligations, resolve disputes and prevent fraud, and then delete or anonymise them. Technical logs are kept for a short period for security.

8. Cookies and local storage

We use one essential cookie that keeps you signed in; it lasts up to seven days. We also save a few preferences in your browser's local storage, such as favourite cases and sound settings. We do not use advertising or tracking cookies, so no consent banner is needed.

9. Security

We protect your data with technical and organisational measures, including encrypted connections and restricted access to our systems. No system is perfectly secure, so please keep your Steam account protected with Steam Guard.

10. Your rights

You have the right to access your personal data, to correct it, to have it deleted, to restrict or object to its use, and to receive it in a portable format. To use any of these rights, open a ticket on our support page while signed in, so we know which account the request is about. We reply within one month.

You can also complain to the data protection authority in Malta, the Information and Data Protection Commissioner (idpc.org.mt), or to the authority in the country where you live.

11. Age limit

CS2Bolt is only for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor is using the site, please tell us and we will close the account.

12. Changes

We may update this policy. The date at the top shows when it last changed, and significant changes will be announced on the site.