Privacy Policy
Data controller: AFFINEX CREATIVE SOLUTIONS FZ LLC
Registered address: Ground Floor, DMC5-VD-G00-345, Dubai Media City, Dubai, United Arab Emirates
Privacy contact: marketing@hardbit.tech
This Privacy Policy aims to give you information on how AFFINEX CREATIVE SOLUTIONS FZ LLC ("Affinex", "we", "our", or "us") processes your personal data.
This Policy extends to mobile applications published or operated by Affinex and related services, as well as our websites, which we generally refer to as the "Services".
Our games are designed so that ordinary gameplay does not require you to provide your real name, personal email address, telephone number, or postal address. We nevertheless process limited pseudonymous account, gameplay, technical, diagnostic, attribution, and transaction data as described below.
1. WHERE DO WE GET YOUR DATA FROM?
You Directly
We generally do not ask you to provide directly identifying information for ordinary gameplay. If you contact us regarding privacy, purchases, technical issues, or another matter, we may receive the information you choose to provide in that communication.
Data Collected Automatically
When you use our Services, limited technical and gameplay information is collected automatically. This may include a pseudonymous player identifier, device and application information, game events and progress, technical installation identifiers, IP address, approximate country or region, application launches and sessions, crash logs, error diagnostics, and similar information necessary to operate, analyze, and improve the Services.
When a game is first used, a unique identifier is generated based on an identifier available on the device. We use it to create and access a pseudonymous player account through Microsoft PlayFab. We do not use this identifier for the purpose of determining your real-world identity.
Third Parties
We receive limited information from third-party service providers that support our Services. Microsoft PlayFab stores and provides pseudonymous player-account and game data. Google Firebase Analytics and Firebase Crashlytics provide analytics and diagnostic information. AppsFlyer is used in a limited configuration to attribute installations and first launches to advertising campaigns and creatives.
We also receive limited transaction and entitlement information from application stores, such as the Apple App Store and Google Play, when you make an in-app purchase. We do not receive or store your full payment-card or bank-account details.
2. WHAT DATA, FOR WHAT PURPOSES, AND ON WHAT BASIS DO WE PROCESS?
| Purpose of Data Processing | Data Categories | Legal Basis |
|---|---|---|
| To enable functionality of the application for users (create a pseudonymous account, save game progress, maintain inventory, characters, virtual items and game features) | Pseudonymous player/account ID; identifier generated from an identifier available on the device; game title and version; game progress; characters and character progression; inventory; virtual items; virtual currencies and balances; achievements and rewards; game settings; purchase entitlements; gameplay state and other backend game data necessary to operate the game. | Contract performance (Terms of Use). Legitimate interest to operate, secure, maintain, and improve the Services where applicable. Without this data, we may be unable to create or maintain the player account, save progress, or provide relevant game functionality. |
| To enable in-app purchases | Pseudonymous player/account ID; application/platform information; product or digital content purchased; transaction or purchase identifier; purchase token or receipt information; transaction date and status; price or currency information where provided by the platform; entitlement information. | Contract performance (Terms of Use); legitimate interest to prevent fraud and maintain accurate entitlements; legal obligation where applicable. |
| To analyze game usage and performance and improve the Services | Pseudonymous or technical identifiers generated by the analytics service; application launches and sessions; gameplay and feature events; progression events; application version; operating system and version; device type/model; language and general device settings; IP address and approximate country/region; technical and performance information. | Depending on the data processed and applicable law, consent or legitimate interest to analyze and improve the quality, performance, and functionality of our Services. |
| To diagnose crashes, errors, and technical problems | Crash logs; stack traces; application state at the time of a crash or error; application version; operating system and version; device model and technical characteristics; technical installation identifiers; timestamps; error and diagnostic information. | Legitimate interest to maintain the stability, security, and performance of our Services; consent where required by applicable law. |
| To measure advertising campaign and creative performance | Limited technical and attribution information necessary to attribute an installation or first launch, which may include technical identifiers, IP address, device information, application information, campaign/creative information, install source, and attribution information. | Depending on the data processed and applicable law, consent or legitimate interest to measure user acquisition and advertising performance. We use AppsFlyer in a limited configuration for installation and first-launch attribution and do not use it to build individual player profiles or analyze subsequent individual gameplay behavior. |
| To comply with legal, regulatory, accounting, security, and administrative obligations | The categories of data described above to the extent reasonably necessary for the relevant obligation, including transaction, account, technical, and communication data. | Legal obligation; legitimate interest to establish, exercise, or defend legal claims and protect the Services where applicable. |
3. HOW LONG DO WE PROCESS YOUR DATA?
Your personal data is retained for as long as it is necessary to fulfill our processing purposes and in line with our legitimate interests, legal obligations, and technical requirements for data storage. Once the applicable retention period expires and there are no contrary legal or contractual obligations, we delete or anonymize the data.
Player-account and game-progress information may be retained while the associated account remains active or for as long as necessary to preserve game progress, inventory, characters, virtual items, virtual currencies, purchase entitlements, and other game functionality.
Analytics, attribution, crash, and diagnostic information is retained for periods appropriate to the operation and improvement of our Services and may also be subject to retention periods established by the relevant service provider. Transaction information may be retained as necessary to verify or restore purchases, prevent fraud, resolve disputes, and comply with legal, tax, accounting, and platform requirements.
If you request erasure, we will delete eligible information where possible, subject to legal obligations and other lawful reasons for retention. Please note that erasing player-account data may result in the complete, irrevocable, and permanent loss of game progress, characters, inventory, virtual items, virtual currencies, and other associated game data.
4. HOW DO WE SHARE YOUR PERSONAL DATA?
We share limited personal data with trusted service providers and platforms that help us provide and support the Services. They receive only the information reasonably necessary for the relevant purpose and process it subject to applicable law and contractual arrangements.
Microsoft PlayFab
Used for pseudonymous player accounts, backend game functionality, game progress, characters, inventory, virtual items, virtual currencies, entitlements, and related player data.
Google Firebase
Firebase Analytics is used for game and application analytics. Firebase Crashlytics is used for crash reporting, error diagnostics, stability monitoring, and technical troubleshooting.
AppsFlyer
Used in a limited configuration for installation and first-launch attribution so that we can measure, primarily on an aggregated basis, which advertising campaigns and creatives generate installations. We do not use AppsFlyer to build individual player profiles or analyze an individual player's subsequent gameplay behavior.
Gaming and Payment Platforms
Apple, Google, and other applicable application-distribution platforms may process data relating to application distribution, purchases, transaction verification, and platform functionality. Payments are processed by the applicable platform; we do not receive or store full payment-card or bank-account details.
Other Disclosures
We may disclose information to infrastructure providers and professional advisers where reasonably necessary to operate the Services, or to public authorities where required by applicable law or valid legal process. Information may also be transferred in connection with a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, subject to appropriate safeguards.
5. INTERNATIONAL DATA TRANSFERS
Affinex is established in the United Arab Emirates, and our technology providers operate internationally. Your data may therefore be processed or stored in countries other than the country in which you live, including countries whose data-protection laws may differ from those in your jurisdiction.
Where applicable data-protection law requires safeguards for international transfers, we and our service providers use appropriate mechanisms and safeguards, which may include adequacy decisions, approved contractual clauses, Standard Contractual Clauses, contractual protections, and appropriate technical and organizational measures.
6. AUTOMATED DECISIONS
We do not use your personal data for profiling or for solely automated decision-making that produces legal effects or similarly significant effects on you. In particular, our limited AppsFlyer configuration is used to measure installation and first-launch attribution rather than to build individual behavioral profiles.
7. CHILDREN DATA
Our Services are intended for a general audience unless a particular game or service expressly states otherwise. We do not knowingly request directly identifying information such as a child's real name, personal email address, telephone number, or postal address as a condition of ordinary gameplay.
Where applicable law requires parental consent or authorization for the processing of a child's personal data, we take reasonable measures to comply with those requirements. If we become aware that personal data relating to a child has been processed without required authorization, we will take reasonable steps to delete or otherwise appropriately handle that information as required by applicable law.
Parents or legal guardians who believe that we have improperly processed a child's personal data may contact us using the details in Section 10.
8. YOUR RIGHTS
Depending on applicable data-protection laws, you may have the following rights regarding our processing:
Right to Be Informed
You have the right to be informed about how we collect and use your personal data.
Right to Access
You may request information about the personal data we hold about you and receive a copy where applicable.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your personal data, subject to legal exceptions and lawful retention requirements.
Right to Data Portability
Where applicable, you may request eligible data in a structured, commonly used, machine-readable format.
Right to Restrict Processing
You may request restriction of certain processing in circumstances provided by applicable law.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
Right to Object
You may object to processing based on legitimate interests in circumstances provided by applicable law.
Right to File a Complaint
You may lodge a complaint with a competent data-protection authority where applicable law provides that right.
To exercise your rights, contact us at marketing@hardbit.tech. Because our player accounts are pseudonymous and do not ordinarily contain your real name or email address, we may ask for information reasonably necessary to locate the relevant player account and verify that the request relates to you.
Deleting player-account information may permanently and irreversibly remove game progress, characters, inventory, virtual currencies, virtual items, purchase entitlements, and other associated game data.
9. FOR UNITED STATES RESIDENTS
If you reside in a U.S. state where consumer privacy laws are in force, subject to applicable definitions, exceptions, and verification requirements, you may have the rights described in Section 8 as well as additional rights.
Right to opt out of "sale", "sharing", or targeted advertising
We do not sell personal information in exchange for money. We use AppsFlyer in a limited configuration for installation and first-launch attribution. Some state laws use broad definitions of sale, sharing, or targeted advertising that may apply to certain transfers of device or attribution information even where no money is exchanged. Where an applicable law provides an opt-out right that applies to our practices, we will respect that right.
Right to be free from discrimination
We will not unlawfully discriminate against you for exercising an applicable privacy right.
Right to appeal
Where applicable law provides this right, you may appeal a refusal of your privacy request.
Right to use an authorized agent
Where permitted, you may designate an authorized agent to submit a request on your behalf. We may require reasonable proof of the agent's authority and verification of your identity.
10. HOW TO CONTACT US?
If you have any questions about this Privacy Policy or our data processing practices, or if you wish to exercise your privacy rights, you can contact us using:
Our email: marketing@hardbit.tech
AFFINEX CREATIVE SOLUTIONS FZ LLC address: Ground Floor, DMC5-VD-G00-345, Dubai Media City, Dubai, United Arab Emirates
Office telephone: +971 4 553 2930
Dubai Development Authority Licence / Certificate of Incorporation No.: 104512
Last updated: 17 August 2026