Playjoy PH Privacy Policy

1. Who We Are

Games and related services covered by this Policy are published by HiFun Games Limited under the Google Play developer name Playjoy PH and the PlayJoy PH brand ("Playjoy PH," "HiFun," "we," "us," or "our"). HiFun Games Limited is the controller of personal information covered by this Policy, unless a separate in-product or regional notice identifies another PlayJoy PH affiliate as the controller for a specific service.

Registered address: Rm 1908-09, Lippo Centre Tower 1, 89 Queensway, Admiralty, Hong Kong. Privacy and data requests: jieting@hifungameshk.com. For game-specific support, use the in-game support channel or the support email shown on the applicable game's app-store page.

2. Scope and Age Requirement

This Policy applies to games, mobile applications, websites, software, customer support, promotions, and related products or services published or operated by HiFun Games Limited that link to this Policy (collectively, the "Services" and each applicable game a "Game"). Third-party services such as app stores, identity providers, and payment providers also apply their own privacy policies to information they independently collect.

The minimum age for a Game is the age displayed in that Game, its app-store listing, or applicable local law. Some Games are intended only for adults aged 18 or older. No user may access a Game below its stated minimum age. Virtual currency and virtual items have no real world value and are not redeemable for anything that has real world value.

3. How We Collect Information

We collect information in three main ways:

• Information you provide. Information submitted when you create an account, configure a profile, communicate with other players, make a purchase, contact support, participate in a survey or promotion, or otherwise use an interactive feature.
• Information collected automatically. Device, network, usage, gameplay, advertising, diagnostic, and security information collected by the game, website, cookies, and enabled SDKs.
• Information from other sources. Information received from Google, Apple, Facebook, app stores, payment and transaction providers, advertising and attribution partners, fraud-prevention providers, customer-support providers, and other users where permitted by law.

4. Information We Collect and Device Permissions

4.1 Account and login information

Depending on the login method, we may collect an email address, mobile number, verification code, password hash for a first-party account, account or player ID, login history, and security status. If you sign in through Google, Apple, Facebook, Game Center, or another provider, we receive only the information that you authorize and that the provider makes available. We do not receive the password for a third-party account.

4.2 Profile, content, and communications

We may collect your nickname, avatar, gender, date of birth or age-confirmation result, country, general location, preferences, friends or referrals, survey answers, contest information, messages, chat, profile content, images or videos you upload, and other user-generated content. Information you make public in a profile, leaderboard, chat room, or social feature may be viewed, copied, or used by other users.

4.3 Purchases and virtual items

We receive product, price, currency, purchase time, order ID, country, player ID, transaction status, refund status, purchase history, and related fraud-prevention information. Payment-card, bank, Google Play, Apple, PayPal, or similar payment credentials are entered directly with the payment provider. We do not receive your full card number or payment-account password.

4.4 Device, network, location, and security information

Depending on your device, platform, consent, and enabled features, the Services and SDKs may collect:

• IP address, device brand and model, operating system, language, time zone, app version, APK name, display resolution, CPU information, storage information, battery status, and browser or user-agent information;
• device or app identifiers such as UUID, Android ID, Google Advertising ID (GAID), Apple IDFA or IDFV, IMEI, IMSI, OpenUDID, GUID, Firebase App ID, and provider-specific user IDs, where available and permitted by the platform;
• network and connection information such as carrier, internet-service provider, connection type, Wi-Fi status, BSSID, nearby Wi-Fi or cell signal information, and Bluetooth status;
• general location derived from IP address, SIM, network, or time zone and, only after permission where required, precise GPS or device location;
• security and anti-cheat signals, which may include installed APK names, external plugin programs, emulator status, modified-client indicators, and other information needed to detect fraud, cheating, malware, or unauthorized access; and
• crash logs, diagnostic information, error reports, performance metrics, notification interactions, and support records.

4.5 Gameplay and usage information

We collect login events, session dates and duration, game progress, levels, scores, achievements, leaderboards, game settings, feature interactions, virtual currency and items, advertising views and clicks, campaign attribution, referral activity, and actions taken with other players.

4.6 Permissions

We do not request access to your contacts, camera, microphone, or unrelated files unless a clearly identified feature needs that access and the Service displays any permission or consent required by law and the operating system.

5. Google Sign-In, Google Play Games, and Google API Data

Google authorization is displayed and controlled by Google. We do not ask for, receive, or store your Google password. We request only the scopes shown on the Google consent screen and necessary for the feature you choose.

We do not use basic Google Sign-In to access the content of Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or YouTube. If a future feature requires a new Google scope, we will update the consent screen and this Policy before using the data.

5.1 Google Limited Use commitments

• Google user data is used only to provide or improve the user-facing feature you selected, maintain security, provide support, or comply with law.
• We do not sell Google user data or provide it to data brokers or information resellers.
• We do not use or transfer Google user data for advertising, retargeting, advertising measurement, marketing, creditworthiness, or lending.
• Google user data is not sent to TopOn, Adjust, TalkingData, advertising networks, or other advertising or attribution partners.
• We do not use Google user data to train generalized artificial-intelligence or machine-learning models.
• Humans do not read Google user data unless you affirmatively consent for a specific support purpose, access is necessary for security or abuse investigation, access is required by law, or the data has been aggregated and anonymized for internal operations.
• We transfer Google user data only to processors necessary to operate or secure the selected Google-connected feature, under confidentiality and data-protection obligations, or where required by law.

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.2 Tokens and revocation

OAuth access or refresh tokens, if issued, are protected by access controls and encryption in transit and at rest where appropriate. We keep them only while needed for the authorized feature and invalidate or delete them when the connection is revoked, the account is deleted, or they are no longer required, subject to limited security logs and legal obligations.

6. HiFun Games Limited SDKs and Service Providers

The following SDKs or service categories may be included in a Game build depending on platform, region, and enabled features. They process data only for the stated purpose and must be configured consistently with device permissions, consent choices, and applicable law.

Google user data obtained through Google Sign-In or Google APIs is excluded from advertising, attribution, and marketing SDK data flows. SDK availability may change by build; we review the production dependency list and update this section when a material change occurs.

7. How We Use Information and Our Legal Bases

When we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal. When we rely on legitimate interests, we balance those interests against your rights and expectations.

8. Advertising, Analytics, Cookies, and Marketing

The game may use advertising and attribution partners to support the free-to-play Service, provide contextual or personalized ads where permitted, prevent ad fraud, measure campaigns, and understand whether an installation or purchase followed an advertisement. These partners may process advertising identifiers, device and app information, approximate location, ad views, clicks, conversions, and gameplay events. They do not receive Google user data obtained through Google Sign-In or Google APIs.

Our website may use cookies, pixels, local storage, Google Analytics, and similar technologies for operation, security, analytics, and advertising. Where required, non-essential cookies and tracking are activated only after consent. Browser or device choices may need to be made separately for each browser, app, and device.

• You may restrict personalized advertising and reset advertising identifiers in iOS or Android settings.
• You may withdraw an app-tracking permission through device settings.
• You may disable optional cookies through a consent tool, browser controls, or supported industry opt-out tools.
• You may unsubscribe from marketing email through the unsubscribe link and disable push notifications through device settings.
• Service, security, transaction, and account communications are not marketing and may continue where necessary.

Where applicable law treats disclosures for cross-context behavioral or targeted advertising as a "sale" or "sharing," you may opt out by contacting us or using any privacy-choice control made available in the Service. 

9. How We Share Information

We do not sell information that directly identifies you. We disclose information only as described below:

• Processors and service providers. Cloud hosting, content delivery, authentication, database, security, crash reporting, anti-cheat, moderation, customer support, analytics, notifications, age assurance, payment, advertising, and attribution providers process information for the services they provide.
• Advertising and analytics partners. Non-Google advertising and device data may be disclosed for ad delivery, targeted advertising where permitted, campaign measurement, and fraud prevention.
• Identity, platform, and payment providers. We exchange the limited identifiers, technical details, receipts, and transaction status needed for login, platform integration, or a purchase.
• Other users or the public. Public profiles, leaderboards, chat, and content are visible according to the feature and choices you use.
• Legal, safety, and enforcement recipients. We may preserve or disclose information in response to valid legal process or where reasonably necessary to protect rights, safety, security, users, copyright holders, or the public; investigate fraud or abuse; or enforce agreements.
• Corporate transactions. Information may be disclosed in a merger, acquisition, financing, reorganization, insolvency, or sale of assets, subject to confidentiality and legally required notice.
• At your direction. We disclose information when you request a feature or provide valid consent.

We may use and disclose aggregated or de-identified information that is not reasonably capable of identifying you, subject to applicable law and commitments not to attempt re-identification.

10. Automated Processing, Moderation, and Artificial Intelligence

We may use automated systems to detect cheating, fraud, abuse, unsafe content, technical failures, or eligibility issues; recommend gameplay content; select non-Google-data advertising; and provide offers relevant to gameplay or purchase history. We may also use artificial-intelligence tools to assist support, moderation, translation, product development, or new user-facing features.

We do not use automated processing to make decisions that produce legal or similarly significant effects about credit, employment, housing, insurance, or lending. Where law grants a right to human review, explanation, or objection regarding a significant automated decision, you may contact us. Google user data is not used to train generalized AI models.

11. Data Retention

We retain information only for the period reasonably necessary for the applicable purpose:

• Account, profile, Google Sign-In, and gameplay records: while the account is active and until account deletion is completed, subject to security, dispute, fraud, and legal exceptions.
• Google OAuth tokens: only while the authorization and connected feature remain active and the token is needed.
• Transaction, tax, and accounting records: for the period required by tax, accounting, anti-fraud, consumer-protection, and payment laws.
• Support and complaint records: for the time needed to resolve the matter and retain a reasonable audit record, generally no longer than three years after closure unless law or a dispute requires longer.
• Advertising, analytics, device, crash, and security data: for a limited period proportionate to analytics, attribution, debugging, anti-cheat, security, and fraud-prevention needs, after which it is deleted or de-identified.
• Backups: deleted information may remain inaccessible in protected backups until overwritten through the normal backup cycle, generally within 90 days, unless a longer period is legally required.

Aggregated or irreversibly de-identified information may be kept for research and analytics.

12. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including access controls, confidentiality obligations, logging, secure development, protected credentials, encryption in transit, and encryption at rest where appropriate. We review service providers and limit access to personnel with a business need.

No internet or storage system is completely secure. Protect your device and account, do not share verification codes, and contact us if you suspect unauthorized activity. We will never ask you to provide a Google password or a Game account password in a privacy-rights request.

13. International Data Transfers

We and our providers may process information in Hong Kong, Singapore, the United States, the European Economic Area, and other countries where we or they operate. Privacy laws may differ from those in your country. Where required, we rely on recognized safeguards such as adequacy decisions, standard contractual clauses, data-processing agreements, consent, or another lawful transfer mechanism. You may request information about applicable safeguards.

14. Your Rights and Choices

Depending on where you live, you may have the right to:

• know whether and how we process your information and obtain access to it;
• correct inaccurate or incomplete information;
• request deletion, anonymization, blocking, or restriction;
• receive portable data in a structured, commonly used, machine-readable format;
• object to legitimate-interest processing and direct marketing;
• withdraw consent without affecting prior lawful processing;
• opt out of targeted advertising, sale, or sharing where applicable;
• request information about recipients and international-transfer safeguards;
• request review of certain significant automated decisions;
• use an authorized agent where permitted;
• appeal a denied request where applicable; and
• complain to a competent privacy or data-protection authority.

Submit requests through in-game support or email jieting@hifungameshk.com. Identify the Game and the right you wish to exercise and provide enough account information for us to locate the record. We may verify your identity through your account, email, device, transaction, or another proportionate method. Do not send a password or full payment-card number. We do not discriminate against you for exercising a privacy right, although deleting data may make a feature or the account unavailable.

15. Account Deletion and Revoking Google Access

15.1 Delete a Game account

Use the account-deletion control provided in the applicable Game, contact its in-game support, or email jieting@hifungameshk.com with the subject “Game Account Deletion.” Identify the Game and include the player ID and email or login method associated with the account. Do not provide a password.

After verification, we will delete or de-identify account, profile, Google Sign-In, and gameplay information within 30 days, except information retained for transactions, fraud prevention, security, legal obligations, disputes, or enforcement. Protected backups are removed through the normal cycle. Deletion is permanent and may remove game progress, virtual currency, virtual items, and access to content, subject to mandatory consumer rights.

15.2 Revoke Google access

You can revoke a Game's Google authorization through the Google Account connections page or an in-game disconnect control, if available. Revocation stops future access under the revoked authorization and may disable Google sign-in or a connected feature. It does not by itself delete the applicable Game account or information already lawfully retained. Use the deletion process above if you also want the Game account deleted.

16. Children and Age Assurance

Each Game has a minimum age stated in the Game, its app-store listing, or applicable law. Some Games are designed only for adults aged 18 or older. We do not knowingly allow a person below the applicable minimum age to register or knowingly collect personal information from that person. We may use an age gate or an age-assurance provider where required. Depending on the legally permitted method, an independent provider may temporarily process an age-estimation image, identification document, payment-account confirmation, or similar evidence and return only an eligibility result to us.

If you believe a person below the applicable minimum age has used a Game or submitted information, contact jieting@hifungameshk.com. We will investigate and take reasonable steps to close the account and delete the information. We do not use information from known minors for personalized advertising.

17. Regional Disclosures

17.1 European Economic Area, United Kingdom, and Switzerland

Legal bases are described in Section 7. You may have rights to access, correction, deletion, restriction, portability, consent withdrawal, objection, and protection from certain solely automated significant decisions. You may complain to the authority where you live or work. International transfers use the safeguards described in Section 13.

17.2 United States

Residents of certain states may have rights to know the categories and specific pieces of personal information collected, sources, purposes, and recipients; access, correct, delete, and obtain portable data; opt out of sale, sharing, targeted advertising, or certain profiling; use an authorized agent; appeal a decision; and receive equal service. We do not sell Google user data or use it for targeted advertising. Advertising-identifier and online-activity disclosures to advertising partners may be considered sale or sharing under some state laws, and an opt-out will be provided where required.

17.3 Philippines

Subject to the Philippine Data Privacy Act of 2012 and applicable rules, you may have rights to be informed, object, access, correct, erase or block, obtain portability, claim damages where legally available, and complain to the National Privacy Commission. Contact us first so we can investigate and respond to the concern.

17.4 Brazil

Subject to the LGPD, you may request confirmation, access, correction, anonymization, blocking or deletion, portability where regulated, information about public and private recipients, consent withdrawal, review of certain automated decisions, and information about the consequences of refusing consent.

17.5 California notice at collection

During the preceding 12 months, the categories described in Sections 4 and 5 may have included identifiers, customer records, protected characteristics such as age or gender when provided, commercial information, internet or electronic-network activity, approximate or permissioned geolocation, audiovisual content submitted by users, inferences, and account credentials or precise location that may be sensitive under California law. Sources, purposes, retention, and recipient categories are described throughout this Policy. We do not use sensitive personal information to infer characteristics beyond purposes permitted by law.

18. Updates to This Policy

We may update this Policy to reflect changes in the Services, SDKs, law, or our practices. We will post the new version at this URL and change the date above. If a change materially affects your rights or how previously collected information is used, we will provide additional notice or obtain consent where required before the change takes effect.

19. Contact Us