# DPIA: Behavior Detection

## Scope

Behavioral safety and anti-cheat detection used for trust scoring, low-trust
pool routing, cheat reports, and moderation triage.

## Data Categories

Account identifiers, match identifiers, behavior events, trust score changes,
cheat report evidence, and sanction metadata.

## Risks

Automated behavior signals can misclassify skilled play or accessibility-driven
input patterns. Sanctions without clear evidence can harm player rights.

## Mitigations

Signals feed review queues instead of automatic permanent sanctions, appeal
cases use the support portal, and every action includes actor, target, reason,
evidence, and statement fields for DSA review.

## Retention

Behavior evidence is retained only for active case handling, appeal windows,
fraud defense, and legal holds. Valid deletion requests purge eligible personal
data within 45 days.

## Human Review

High-impact sanctions require moderator review and an appealable statement of
reasons before enforcement.