数据安全

Security approach

We take reasonable technical and organizational measures to protect Heroes of Legends, player accounts, and related data against unauthorized access, loss, misuse, alteration, and disruption.

Transport security

We use encrypted connections where appropriate to protect data transmitted between your browser and our systems.

Account security

Players are responsible for keeping their login credentials secure and for not sharing account access with others. We may suspend or restrict accounts where we detect compromise, abuse, fraud, or activity that threatens the service.

Minimal data principle

We aim to collect and retain only the data reasonably necessary to operate the game, maintain security, process transactions, enforce rules, and comply with legal obligations.

Responsible disclosure

If you believe you have found a vulnerability, please report it to: 请通过游戏内支持或网站联系表单与我们联系。

Please include enough detail for us to reproduce and investigate the issue. Do not access, modify, delete, exfiltrate, or disclose data that does not belong to you.

No bug bounty promise

Unless explicitly stated otherwise in writing, we do not operate a public bug bounty program and do not promise financial rewards for vulnerability reports.