🎮 THE HACKING GAMES IS CREATING A GENERATION OF ETHICAL HACKERS TO MAKE THE WORLD SAFER​ 🔒

Blaenau Gwent Gaming Pathways
intoCyber Careers - Privacy Notice

Blaenau Gwent Gaming Pathways intoCyber Careers - Privacy Notice

[ strategy ]

You don’t need a tutorial.

>>You need a strategy.

Forget corporate ladders and boring job boards. You’ve got skills, instincts, and a different way of seeing the world. Now it’s time to turn that into a career that actually fits.

We match your mindset, your game style, and your curiosities to real roles in cybersecurity. Then we show you how to level up, get noticed, and break into the industry your way.

[
always-on validation
]

KEEP TESTING THE CHAIN

ACE keeps the attack chain alive. Replay it as your estate changes to expose detections that have gone blind.

‍This is not BAS
ACE validates a real operator’s path through your environment, not generic techniques from a library.

[ Book A Call ]
[ / ]

WHO BLACK TEAMING is FOR

Security leaders in large enterprises, Critical National Infrastructure, Defence and Government.

You have an active red team programme and want to test beyond its scope - your red teams operate within defined boundaries; you need to know what happens outside those boundaries.
Your board has to sign off on residual risk and the findings list does not tell them whether it is real. You need a demonstration they can act on, not a spreadsheet they have to trust.
You have spent heavily on detection and want to know if it works. EDR, SIEM, and SOC tooling are sold on coverage. Coverage is a claim, not a result. A Black Team tells you what your stack actually catches when someone is deliberately trying not to be caught.
You are paying for managed detection and response and cannot independently verify it. Your MDR provider grades its own homework. A Black Team is the only way to find out what they would actually miss.
You have experienced a breach and want to understand the real attack chain. A forensic reconstruction tells you what happened. A Black Team shows you how it would be executed against you now, and whether you would see it this time.
You are a regulated entity in financial services, critical national infrastructure, defence, or health - where regulatory requirements are increasingly moving toward resilience validation rather than controls compliance.
You are about to undergo a major change: a migration, a merger, a new identity provider. Estates are most exposed when they are moving. Testing the seams during a transition surfaces the gaps before an adversary finds them for you.
Your last red team report still sits unread in a drawer.
[ november 4, 2026 ]

Who we are

THG Ventures Limited (trading as The Hacking Games) is responsible for the personal information used to organise the Blaenau Gwent gaming and cyber careers events and deliver the Gaming Pathways into Cyber Careers programme, funded by Blaenau Gwent County Borough Council.
‍
You can contact us at info@thg-v.com.
‍
This notice explains how we use your information for the events and the funded programme. If you create or use a HAPTAI account, our HAPTAI Privacy Policy for Candidates also applies and explains how we handle your information on that platform.

What information we collect

When you register, we collect your name, email address, date of birth, home address, event choice and information about your employment, education or training status. We also ask for an emergency contact's name and phone number, which we will only use if there is an emergency during the event.

You may also choose to provide your National Insurance number. We use this to help identify participants and verify records of support provided under the funded programme. Providing your National Insurance number is optional and choosing not to provide it will not affect your ability to attend the event or receive support.

You may also provide a mobile number, referral source or request help with transport or other event arrangements. We also ask whether you are receiving support through another employment or training programme, so that we can check for any overlap before recording support against the programme's funding targets.

We record event attendance, relevant eligibility confirmations and any employment or careers support you receive. Where appropriate, we may also receive confirmation of your circumstances from a youth service or employability organisation that referred you.

We may keep a limited record of the ÂŁ10 voucher provided for attending and completing the event. You may also choose to complete an optional feedback form

Why we use your information

We use this information to:

  • Manage event registrations and communicate practical arrangements.
  • Arrange transport or other support you request and respond to emergencies.
  • Check eligibility for funded support and record attendance.
  • Monitor programme delivery, provide participant information to Blaenau Gwent County Borough Council for funding monitoring and verification, and maintain the evidence needed for funding claims and audits.

We rely on our legitimate interests in organising and delivering the programme and maintaining appropriate records for funding and audit purposes. 

If you separately choose to receive emails about future THG events, training or cyber career opportunities, we rely on your consent for those communications. You can unsubscribe at any time. This choice is separate from any preferences you select when using HAPTAI.

HAPTAI and the Blaenau Gwent programme

During the event, you will be invited to create a HAPTAI account to explore your skills and cyber career opportunities.

If you use HAPTAI, we use the email address provided at registration to link your HAPTAI participation with your event record. THG may also consider relevant HAPTAI assessment results when identifying participants to invite to further learning, mentoring or placement opportunities within the Blaenau Gwent programme.

The HAPTAI Privacy Policy for Candidates explains how the platform processes your information, including aptitude assessments, profiling, optional recruitment matching and account retention.

Dietary, allergy and accessibility arrangements

If you ask us to contact you about dietary, allergy or accessibility requirements, we will collect any necessary details privately and use them only to make appropriate arrangements for the event.

We will limit access to staff or suppliers who need the information for that purpose. We will not use this information to determine whether you qualify for funded support.

Where the information reveals details about your health or disability, we rely on your explicit consent to use that information for the arrangements you request. You can withdraw your consent at any time by contacting info@thg-v.com. 

Who we share your information with

Access to registration and programme information is restricted to authorised THG staff and service providers who need it for their roles, including providers supporting our corporate Google Workspace environment.

We share updated lists of programme participants with Blaenau Gwent County Borough Council each month to support programme monitoring, funding verification and reporting.

These lists contain the personal information necessary to identify participants and verify their eligibility, attendance and support received. Depending on the reporting requirements, this may include your name, date of birth, home address, employment or education status, attendance and support records, and your National Insurance number if you have chosen to provide it and it is needed for funding checks.

The council may share relevant information with the Welsh Government and authorised auditors where necessary for funding oversight, verification or audit. We may also make relevant supporting records available for these purposes.

We do not include emergency contact details, dietary or accessibility information, or marketing preferences in routine council reporting. We do not provide the council with identifiable HAPTAI aptitude scores or reports.

We may share limited practical information with relevant event staff or suppliers to arrange the support you request. Emergency contact details will only be used where needed in an emergency.

International transfers

We use service providers, including Google Workspace, to store and manage programme information. This may involve your personal information being transferred to or accessed from countries outside the UK.

Where this happens, we take steps to ensure your information remains protected in accordance with UK data protection law, including using recognised adequacy arrangements or appropriate contractual safeguards, such as the UK's International Data Transfer Agreement or equivalent approved contractual terms. You can contact us at info@thg-v.com if you would like more information about the safeguards we use.

How long we keep your information

We keep participant identification, eligibility, attendance, support and other records needed to demonstrate programme delivery, substantiate funding claims and meet audit requirements for seven years after the funding period ends. This includes voucher distribution records where they are needed as evidence of programme expenditure.

Ordinary booking and event administration information that is not required for these purposes will normally be deleted within three months after the programme ends.

Emergency contact details and any separately collected dietary, allergy or accessibility information will normally be deleted within 30 days after the relevant event, unless we need to retain them in connection with an incident or another legitimate reason.

We will anonymise or delete identifiable feedback within three months after the programme ends, although we may retain anonymised feedback and evaluation results for longer.

HAPTAI account and assessment information is subject to the retention arrangements explained in the HAPTAI Privacy Policy for Candidates. Photographs, recordings and case studies used for publicity are subject to separate arrangements.

Your rights

You have rights under data protection law, including rights to access and correct your information and, in certain circumstances, to request deletion, restrict processing or object to how your information is used.

You can contact us at info@thg-v.com with any questions or requests. You can also complain to the Information Commissioner's Office at ico.org.uk.

FIND OUT FIRST