Privacy Policy

• What we collect
• Why we use it
• Who we share it with
• Where it is held
• How long we keep it
• Your rights
• Children
• Security
• Changes
• Contact

This Privacy Policy explains how JOYFUL GAMES (SMC-PRIVATE) LIMITED ("we", "us", "our") collects and handles personal data in the mobile application ROR — Realm of Rewards ("the app") and on realmofrewards.com ("the site"). We are the data controller for that information.

1. What we collect

Information you give us

• Account details — email address, username, password (stored only as a cryptographic hash), and date of birth or age confirmation.
• Profile — display name, avatar, bio and any settings you choose.
• Content you post — replay posts, captions, comments, reactions and chat messages.
• Support and reports — what you write to us, including reports about other users, and any attachments.
• Reward and prize details — where a reward requires it, the delivery details needed to get it to you, and any tax information the law requires us to record.

Information created as you play

• Gameplay — games played, scores, session length, progress, tournament entries and standings.
• Economy — coin purchases and balances, points earned and redeemed, rewards claimed.
• Safety signals — reports made and received, moderation actions, and signals we use to detect cheating and reward abuse.

Information collected automatically

• Device and app — device model, operating system version, app version, language and region, and crash diagnostics.
• Identifiers — a ROR account ID, and a push notification token issued by your device's operating system. We do not collect the platform advertising identifier (Google Advertising ID or Apple IDFA).
• Network — IP address, used for security, fraud prevention and to determine which country's features apply to you. We derive country only, not a precise location.

What we do not collect

• We never see or store your card or bank details. Every purchase is processed by Google Play or the App Store.
• We do not collect precise GPS location, contacts, or the content of your device outside the app.

2. Why we use it, and our legal basis

We do not show third-party advertising in ROR and we do not track you across other apps or websites. If that ever changes, we will update this policy and ask for your consent before any such processing begins.

3. Who we share it with

We do not sell your personal data. We share it only with the service providers below, only for the purposes listed, and only under contracts requiring them to protect it to the same standard set out in this policy.

That is the complete list. We do not use third-party analytics, crash reporting, advertising or attribution services, so no data goes to any of those.

We may also disclose data where the law requires it — a valid order from a court or a competent authority — or where necessary to protect the safety of a person, in particular a child.

4. Where your data is held

Your data is stored on servers operated by our hosting provider and may be processed in countries other than the one you live in. Where data leaves your country, we rely on the protections offered by our providers' contractual commitments, including the European Commission's standard contractual clauses where they apply.

5. How long we keep it

6. Your rights and how to use them

Wherever you live, you can ask us to:

• Access the personal data we hold about you, and get a copy.
• Correct anything inaccurate.
• Delete your account and your data — see the deletion page.
• Object to or restrict processing based on our legitimate interests.
• Turn off push notifications at any time, in your device settings.
• Receive your data in a portable, machine-readable format.

Write to privacy@realmofrewards.com. We answer within 30 days. We may ask you to confirm your identity first, so that nobody can use these rights to get at somebody else's data. There is no charge.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.

7. Children

ROR is not for children under 13, and we do not knowingly collect personal data from them. In the European Economic Area, where your country sets a higher digital age of consent, that higher age applies to you.

Tournaments and rewards that carry real-world value are restricted to users aged 18 and over.

If you believe a child under the minimum age has an account, tell us at privacy@realmofrewards.com and we will delete it and the data attached to it. Our standards on child safety are set out separately in the Child Safety Standards.

8. How we protect it

• All traffic between the app, the site and our servers is encrypted in transit (TLS).
• Passwords are stored only as salted cryptographic hashes. We cannot read your password.
• Access to production data is limited to staff who need it, and is logged.
• We keep no card data, so a breach of our systems cannot expose your payment details.

No system is perfectly secure. If a breach affects your personal data and is likely to put you at risk, we will tell you and the relevant authority without undue delay.

9. Changes to this policy

If we change this policy materially we will tell you in the app before the change takes effect, and update the date at the top of this page. Continuing to use ROR after that means the new version applies to you.

10. Contact

Privacy questions and requests: privacy@realmofrewards.com. Everything else: support@realmofrewards.com.