Effective from 20/08/2026

This page explains what data we collect when you create an account and play the game, what we use it for, who we share it with, how long we keep it, and what rights you have over your own data.

When you register an account yourself, we store:

• The username you choose.
• Your password, stored as a one-way hash. We do not keep passwords in readable form and cannot look yours up.
• Your email address, if you provide one — used for password recovery.
• Language, country, platform (Android or iOS) and operating system version.
• A device identifier issued by the operating system to our app.

When you choose to sign in with Google or Facebook, we receive and store your user ID at that service, your display name, and your email address if that service shares it. We do NOT receive your Google or Facebook password, do not read your contacts, do not read your friend list, do not post on your behalf, and do not access your photos or messages.

While you use the service, the system records the IP address and time of sign-ins, password changes and email changes, together with details of top-up transactions: order reference, amount, method and time.

• Creating your account, signing you in, and keeping your game progress.
• Helping you recover a forgotten password through your verified email address.
• Processing top-ups, keeping transaction records, and resolving discrepancies.
• Detecting and preventing abuse: one person creating many accounts to exploit promotions, or someone taking over another player's account.
• Supporting you when something goes wrong — activity logs are what let us see what actually happened to your account.

We do not use your data for targeted advertising, and we do not build behavioural profiles for third parties.

We do NOT sell your personal data.

Data is shared only in these three cases:

• Payment partners and top-up gateways — only what is needed to complete your own transaction.
• Server hosting and email delivery providers, to the extent needed to run the service.
• Competent public authorities, upon a lawful written request.

• Account data is kept for as long as the account is active.
• When you ask us to delete your account, we delete it as described on the User Data Deletion page.
• Top-up transaction records are retained for the period required by accounting and tax law, even after the account is deleted. We are not permitted to delete these earlier.

• View and update your email address in the Account page.
• Change your password at any time.
• Unlink Google or Facebook from your account. You can also revoke the game's access directly in your Google or Facebook settings.
• Ask us to delete your account and related data — see the User Data Deletion page.
• Request a copy of the data we hold about you.

• Passwords are one-way hashed before storage, so not even an administrator can read them.
• Traffic between the app and our servers goes over HTTPS.
• For Google and Facebook sign-in, our server re-verifies the token directly with Google and Facebook rather than trusting what the app sends.
• Internal access to data is limited according to job function.

No system is perfectly secure. If an incident affects your data, we will notify you in the game and at the email address registered to your account.

The game is not intended for anyone under 13 years of age, and we do not knowingly collect data from children below that age. If you are a parent or guardian and find that your child has created an account, please contact us at the address at the bottom of this page and we will delete it.

When something changes, we update this page and change the effective date shown at the top. For significant changes we also give notice inside the game before they take effect.

For any question or request regarding personal data, please write to:

Privacy Policy  ·  User Data Deletion  ·  Terms of Service