How we handle a child’s data

A player record can only be created by a parent, legal guardian or a registered coach acting with a guardian’s consent — never by the child directly.

The age-verification document is encrypted on upload, opened only by named L2+ registry officers during review, and permanently deleted 90 days after the age is confirmed. The verification result stays on the record forever; the file itself does not.

Once a record is approved, the player’s name and date of birth are locked. Changing them requires a correction request routed to the registry desk with a stated reason — never a direct edit.

Every time an officer opens a document, makes a decision, or an account is changed, it is written to an append-only audit log that cannot be edited or deleted by anyone, including a super admin.