If you live in the EU, UK, or California, you have the right to access, correct, delete, or export your personal data, and in some cases to object to or restrict how it is processed.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision operationalizes Riot Games' obligation to recognize and facilitate statutory data subject rights across multiple regulatory regimes, establishing the framework through which users may exercise jurisdiction-specific protections regarding their personal data.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →Eligible users can request a copy of their data, ask for it to be deleted, or opt out of certain types of processing by contacting Riot through their privacy portal. You can submit a data rights request at https://www.riotgames.com/en/privacy-notice.
How other platforms handle this
Depending on where you live, you may have certain rights regarding your personal information. For example, you may have the right to: Access your personal information; Correct inaccurate personal information; Request deletion of your personal information; Object to or restrict processing of your per...
Customer shall: Comply with its obligations under the Applicable Data Protection Law regarding the Processing and any instruction provided to Mistral AI, Provide notice and obtain all consents and rights required by the Applicable Data Protection Law for Mistral AI to Process Personal Data as part o...
You can request access to, erasure of, and updates to your personal data. If you'd like to port your data elsewhere, you can use tools Microsoft provides to do so, or if none are available, you can contact Microsoft for assistance.
Monitoring
Riot Games has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Based on your jurisdiction, you may have some or all the rights listed below and/or any other rights available to you in accordance with applicable laws: Access, Correction, Deletion, Restriction, Data portability, Objection, Right to withdraw consent, Right related to cross-border transfers.— Excerpt from Riot Games's Riot Games Privacy Notice
Riot must fulfill data subject access requests (DSARs) within legally mandated timeframes — 30 days under GDPR (extendable to 3 months) and 45 days under CCPA. Non-compliance with DSAR obligations is an enforcement priority for EU data protection authorities and the California Privacy Protection Agency (CPPA).
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The provision operationalizes Riot Games' obligation to recognize and facilitate statutory data subject rights across multiple regulatory regimes, establishing the framework through which users may exercise jurisdiction-specific protections regarding their personal data.
Eligible users can request a copy of their data, ask for it to be deleted, or opt out of certain types of processing by contacting Riot through their privacy portal. You can submit a data rights request at https://www.riotgames.com/en/privacy-notice.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.