ENT Privacy Policy
Last updated: 17 March, 2025 (JST)
Nintendo knows that privacy is important to you. This ENT Privacy Policy ("Privacy Policy") describes how Nintendo Co., Ltd. ("Nintendo", "we", "us" or "our") as the controller and with registered offices at 11-1 Hokotate-cho, Kamitoba, Minami-ku, Kyoto 601-8501, Japan, collects, uses, discloses, stores, processes and protects your information when you use the system for operating tools and websites conveniently and appropriately when such tools and websites are used to communicate, exchange, send and receive data, and otherwise process data, with officers or employees of Nintendo, Nintendo group companies or partner companies (the “ENT System”) .
This Privacy Policy also addresses requirements under General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – “GDPR”), Lei Geral de Proteção de Dados (“LGPD”), Act on Protection of Personal Information ("APPI"), the California Privacy Rights Act (“CPRA”) or any other applicable data protection laws in the jurisdiction in which you reside (collectively referred to hereinafter as “Applicable Data Protection Law”). If you are a resident of the United Kingdom (“UK"), references in this Privacy Policy to GDPR shall be understood as reference to the UK General Data Protection Regulation (“UK GDPR").
1. YOUR INFORMATION
We collect personal data and other information that you provide to us when you use the ENT System, including when you complete our registration forms. The types or categories of information we collect include:
- Registration information that you provide to us via yourself or your organization when signing up to use the ENT System, including your name, encrypted password, e-mail address, professional details (such as organizational name) and other contact details you provide. The provision of the registration information is necessary to sign up to use the ENT System;
- Any other information you choose to provide directly to us.
For the legal basis of the collection of this information under GDPR if you are located in the European Union, or under LGPD if you are located in Brazil, please see Section 3. below.
2. COOKIES & LOG FILES
Cookies: Cookies are small files downloaded to your computer to track movements within websites, to keep track of the fact that you have signed in so you do not need to continually enter your username and password, and to store the language in which you choose to view the website. Most browsers are automatically set to accept cookies.
Most of the cookies that we serve are strictly necessary to provide you with the Services you have requested. For example, we serve cookies that enable us to authenticate you when you use our Services and to maintain your website session. If you are located in a country of the European Union or in Brazil, the legal basis for using these cookies is the provision of the Service you have requested pursuant to Applicable Data Protection Law (i.e., Art. 6 para. 1 (b) GDPR or Art. 7, §5 LGPD). We do not serve any cookies for advertising purposes.
You can often set your browser to notify you when you are sent a cookie, and you may also be able to elect not to accept cookies (including the cookies described above) by changing the designated settings on your web browser. However, not utilizing cookies may prevent you from using certain functions and features of the Services.
Log Files: Certain information is transmitted to us by your internet browser each time you use the ENT System, including the date and time of your visit, the name of the pages and files that you accessed, the website you came from, the type of internet browser and operating system you used and the IP address. For the legal basis of the collection of Log Files under Applicable Data Protection Law, please see Section 3. below.
3. PROCESS OF INFORMATION
(a) We process the collected information in order to:
- Register you with, and provide you with access to, the ENT System;
- Simplifying the process of signing in to tools you use;
- Enhancing convenience, including improvement of searchability, when you communicate with officers or employees of Nintendo, Nintendo group companies or partner companies;
- Contact you to answer your inquiries or forward any requested information.
If you are located in a country of the European Union or in Brazil, the legal basis for the processing pursuant to this Section 3 (a) is the performance or execution of a contract as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (b) GDPR or Art. 7, §5 LGPD).
(b) We also process the collected information as far as this is necessary to:
- Implement information security risk management, including preventing potentially illegal or offensive activities;
- Enforce our rights or the rights of other users of the ENT System;
If you are located in a country of the European Union or in Brazil, the legal basis for the processing pursuant to this Section 3 (b) is legitimate interest as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (f) GDPR or Art. 7, §9 LGPD). The legitimate interest we pursue is the prevention of fraudulent and illegal activities, the protection of our systems and of our users and the enforcement of our legitimate rights and the rights of our users.
If you are located in a country of the European Union or in Brazil, you may have the right to object, on grounds relating to your particular situation, at any time to the processing pursuant to this Section 3 (b). To exercise this right you may at any time contact our European or Brazilian representative as provided for in Section 9 (b) below.
(c) We further process the collected information to perform analytics and statistics of the usage of the ENT System in order to improve and optimize the ENT System itself and services, tools and websites we provide you through the ENT System.
If you are located in a country of the European Union or in Brazil, the legal basis for the processing pursuant to this Section 3 (c) is legitimate interest as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (f) GDPR or Art. 7, §9 LGPD). The legitimate interest we pursue is the improvement and optimization of the Services which is to the benefit of the users.
If you are located in a country of the European Union or in Brazil, you may have the right to object, on grounds relating to your particular situation, at any time to the processing pursuant to this Section 3 (c). To exercise this right you may at any time contact our European or Brazilian representative as provided for in Section 9 (b) below.
(d) We generally process the collected information for the purpose of ensuring the security and proper functioning of the ENT System.
If you are located in a country of the European Union or in Brazil, the legal basis for the processing pursuant to this Section 3 (d) is legitimate interest as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (f) GDPR or Art. 7, §9 LGPD). The legitimate interest we pursue is the protection of our systems.
If you are located in a country of the European Union or in Brazil, you may have the right to object, on grounds relating to your particular situation, at any time to the processing pursuant to this Section 3 (d). To exercise this right you may at any time contact our European or Brazilian representative as provided for in Section 9 (b) below.
4. DISCLOSURE OF INFORMATION
Nintendo Affiliates. At times we may make certain information that we collect available to our affiliated companies as follows:
We may share information with other Nintendo affiliated companies (including but not limited to Nintendo of Europe SE, Nintendo of America Inc., Nintendo Australia Pty Limited, Nintendo of Korea Co., Ltd., Nintendo Technology Development Inc., Nintendo Systems Co., Ltd. and Nintendo Sales Co., Ltd.) to process for purposes that are consistent with those disclosed in this Privacy Policy. We are responsible for managing and handling your information in accordance with this Privacy Policy and the companies with which we share your information.
If you are located in a country of the European Union or in Brazil, the legal basis for sharing your information with our affiliated companies is legitimate interest as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (f) GDPR or Art. 7, §9 LGPD). We have a legitimate interest in sharing your information with our affiliated companies for internal administrative purposes, in particular to offer the Services to users and to deal with inquiries in an efficient and high-quality manner. Where we share your information with an affiliated company located outside the European Economic Area or outside of Brazil, respectively, appropriate safeguards for an adequate level of data protection are provided for by standard data protection clauses that have been adopted by the European Commission or the Brazilian data protection authority and that have been entered into between Nintendo and its affiliated company.
If you are located in a country of the European Union or in Brazil, you may have the right to object, on grounds relating to your particular situation, at any time to such sharing. To exercise this right you may at any time contact our European or Brazilian representative as provided for in Section 9 (b) below.
Legal and business purposes. We may disclose your information in order to comply with legal process, to respond to claims or inquiries, or to protect the rights, property or personal safety of Nintendo, our users, or the public. Your information may also be disclosed as part of any sale or transfer of company assets, if legally permitted.
If you are located in a country of the European Union or in Brazil, as far as we are required by law to disclose your information, the legal basis is our compliance with a legal obligation as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (c) GDPR or Art. 7, §2 LGPD). If you are located in a country of the European Union or in Brazil, as far as the disclosure is necessary for the purpose of responding to claims or inquiries or protecting the rights, property or personal safety of Nintendo, our users, or the public, or for the sale or transfer of company assets, the legal basis for the processing is legitimate interest as provided under Applicable Data Protection Law (i.e., Art. 6 para. 1 (f) GDPR or Art. 7, §9 LGPD). The legitimate interest we pursue is the effective enforcement of legal claims and exercise of our rights and the rights of our users, safeguarding our security and the security of our users and the commercial exploitation of our business assets via sale or transfer.
If you are located in a country of the European Union or in Brazil, you may have the right to object, on grounds relating to your particular situation, at any time to the processing pursuant to this Section as far as it is based on our legitimate interests. To exercise this right you may at any time contact our European or Brazilian representative as provided for in Section 9 (b) below.
Third Party Data Processors. We do not, and will not, sell your personal data to third parties. However, in compliance with applicable data protection requirements, we may share information with third party data processors acting on our behalf that provide us with services in connection with the development, operation and delivery of the ENT System.
If you are located in a country of the European Union or in Brazil, where such third party processors are located outside the European Economic Area or outside of Brazil, respectively, such third party processors are either located in a third country where the European Commission or the Brazilian data protection authority, respectively, has decided that this country ensures an adequate level of data protection or appropriate safeguards for an adequate level of data protection are provided for by standard data protection clauses that have been adopted by the European Commission or the Brazilian data protection authority and that have been entered into between Nintendo and the third party data processor.
You are responsible for any information that you share with others through use of our Services.
5. SECURITY
Nintendo uses appropriate technical, administrative and organizational measures, such as encryption practices, where applicable, to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration and destruction. In particular, your password is stored in encrypted form, meaning we do not have access to your password. You should understand that no data storage system or transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.
6. CHANGES TO THE PRIVACY POLICY
We may update this Privacy Policy from time to time. When we update this Privacy Policy, we will revise the "Last Updated" date above. We will provide a prominent notice of material changes affecting the type of information we collect from you and/or our use of your information prior to any such change being applicable to you.
7. STORAGE TIME
We will only store your information as long as necessary to fulfill the purposes for which the information is collected and processed or – where the applicable law provides for longer storage and retention period – for the storage and retention period required by law. After that your personal data will be deleted.
If you are located in a country of the European Union or in Brazil and if you exercise a right to object to the processing or withdraw your consent to the processing, we will suspend the processing for the purpose to which you objected or to the extent you withdrew your consent, unless another legal basis for processing and retaining this data exists or unless applicable law requires us to retain the data.
8. YOUR RIGHTS UNDER APPLICABLE DATA PROTECTION LAW
If you are located in a country of the European Union, you may have the following rights under European data protection law, respectively under the GDPR:
- The right to request access to personal data stored by us;
- The right to request rectification or erasure of your personal data or restriction of processing concerning your personal data.
- The right to withdraw any consent you have given at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- The right to data portability;
- The right to object to the processing of your personal data.
If you are located in Brazil, you may have the following rights under the LGPD:
- The right to confirm the existence of data processing;
- The right to request access to personal data stored by us;
- The right to correct incomplete, inaccurate or out-of-date personal data;
- The right to request anonymization or deletion of your personal data;
- The right to revoke any consent you have given at any time, and to have deleted the personal data processed with such consent, without affecting the lawfulness of the processing that was based on the consent before its revocation;
- The right to know the entities with which Nintendo has shared your personal data;
- The right to data portability;
- The right to object to the processing of your personal data.
If you are located in California, you may have the following rights under the CPRA:
- The right to confirm the existence of data processing;
- The right to request access to personal data stored by us;
- The right to correct or update inaccurate or out-of-date personal data;
- The right to request anonymization or deletion of your personal data;
- The right to data portability;
- The right to know the personal data that may be shared with third parties for a business purpose and categories of third parties with whom Nintendo has shared such personal data.
To exercise any of the aforementioned rights you may at any time contact our European, Brazilian, or United States representative as provided in Section 9 (b) below.
You also have the right to lodge a complaint with a data protection supervisory authority located in the European Union, if you are located in the European Union, or a data protection supervisory authority located in Brazil, if you are located in Brazil.
9. CONTACT US WITH YOUR PRIVACY QUESTIONS, COMMENTS OR CONCERNS
(a) If you have any questions, complaints or comments regarding this Privacy Policy, or any of our privacy practices, please contact:
- Our Japanese headquarters, via phone at 81-75-662-9600, or via regular mail at Nintendo Co., Ltd, 11-1 Hokotate-cho, Kamitoba, Minami-ku, Kyoto 601-8501, Japan. https://www.nintendo.co.jp/
- Our Brazilian or United States Representative Nintendo of America Inc. at dataprotectionofficer@noa.nintendo.com, via phone at 1-888-977-7627, or via regular mail at Nintendo of America Inc., Attn: Privacy Administrator, 4600 150th Avenue NE, Redmond, WA 98052, U.S.A.
- Our European representative Nintendo of Europe SE via the contact form at https://www.nintendo.com/eu/contact, or via regular mail at Nintendo of Europe SE, Attn.: Legal Department, Goldsteinstrasse 235, 60528 Frankfurt am Main, Germany. Please note that Nintendo’s representative in the United Kingdom is Nintendo UK, The Quadrant, 55-57 High Street, Windsor, SL4 1LP.
- Our Australian representative Nintendo Australia Pty Limited at nintendoaustraliaprivacy@nal.nintendo.com.au, or via regular mail at Nintendo Australia Pty Limited, Attn.: Privacy Officer, 804 Stud Road, Scoresby, Victoria, 3179, Australia.
(b) If you would like to exercise any of your rights under Applicable Data Protection Law, please contact:
- for APPI requests: Our Japanese headquarters Nintendo Co., Ltd, via regular mail at Nintendo Co., Ltd, 11-1 Hokotate-cho, Kamitoba, Minami-ku, Kyoto 601-8501, Japan..
- for GDPR or UK GDPR requests: Our European representative Nintendo of Europe SE, Attn.: Legal Department, Goldsteinstrasse 235, 60528 Frankfurt am Main, Germany via regular mail, or via email at dataprotectionofficer@nintendo.de.
- for LGPD requests: Our Brazilian representative Nintendo of America Inc., Attn: Data Protection Officer, 4600 150th Avenue NE, Redmond, WA 98052, U.S.A. via regular mail or via email at dataprotectionofficer@noa.nintendo.com.
- for CPRA requests: Our United States representative Nintendo of America Inc., Attn: Data Protection Officer, 4600 150th Avenue NE, Redmond, WA 98052, U.S.A. via regular mail or via email at dataprotectionofficer@noa.nintendo.com.
- for APP or NZPP requests: Our Australian representative Nintendo Australia Pty Limited, Attn.: Privacy Officer, 804 Stud Road, Scoresby, Victoria, 3179, Australia via regular mail, or via email at nintendoaustraliaprivacy@nal.nintendo.com.au.
10. NINTENDO’S DATA PROTECTION OFFICER AS PER EUROPEAN & BRAZILIAN REGULATION:
- EUROPEAN DATA PROTECTION OFFICER: Nintendo Co., Ltd., Attn.: Data Protection Officer, 11-1 Hokotate-cho, Kamitoba, Minami-ku, Kyoto, 601-8501, Japan, dataprotectionofficer@nintendo.co.jp.
- BRAZILIAN DATA PROTECTION OFFICER: Nintendo of America Inc., Attn: Scott Crane, 4600 150th Ave NE, Redmond, WA 98052, U.S.A., dataprotectionofficer@noa.nintendo.com.