Bingo Box Privacy Policy

1. Introduction and data controller

Bingo Box is provided by Lumen Studio (referred to as "we", "us", "the Studio", or "Bingo Box"). This Policy explains what information may be collected or generated when you install or use the game, why we use it, which service providers may process it, and how you can request access, correction, or deletion.

Service operator / data controller: [insert full legal name]

Registered or business address: [insert address]

Privacy and support contact:

Website: studiolumen.ir

2. Information we collect

The information processed depends on how you use the game, your choices, your device and operating system, the permissions you grant, and the third-party services enabled in the installed build.

A. Account identifiers and session information

• When you start the game, we create an internal identifier for a guest player. A mobile phone number is not required to start playing.
• We issue a confidential session token to authenticate requests and maintain your session. This token is a security credential and should not be shared.
• We may record account creation and information needed to maintain sessions, provide support, and detect misuse.

B. Phone number and verification information

If you choose to upgrade a guest account using phone verification or change the phone number associated with an account, we process:

• the phone number you submit;
• one-time password (OTP) request and verification events, including timestamps, status, and attempt counts;
• the IP address associated with OTP requests and related security records; and
• for a phone-number change, the previous and new phone numbers, the change time, and the recorded IP address.

OTP codes are issued for a limited period and a successfully verified code is consumed. Phone numbers are used to bind and protect accounts, verify control of a number, prevent abuse, and support account changes or recovery.

C. Profile information

We process your display name, the identifier of a selected avatar from a predefined set, and information required to manage display-name changes. The current version does not provide a feature for uploading a personal avatar image. Your display name and avatar may be visible to other players in player lists, rooms, or leaderboards.

D. Gameplay and in-game activity

To operate multiplayer gameplay, maintain progress and balances, and understand service performance, we may record or derive:

• rooms you join, presence, entry and exit times, and connection or disconnection status;
• game rounds, draws, cards, selections, claims, results, and win status;
• scores, XP, levels, rankings, records, missions, and progression;
• wallet balances and changes, including coins, tickets, tokens, rewards, and the reason for each change;
• shop activity, purchased product identifiers, and receipt-validation status; and
• the number and type of ads shown or completed and the status of related rewards.

We use this information to operate game rules, maintain records, prevent cheating and balance manipulation, resolve disputes, understand usage, and improve game quality and balance.

E. In-game interactions and chat

The current game version does not provide free-form text chat in its chat data model. Chat interaction is limited to predefined phrases. The selected phrase identifier, player, room, and send time may be recorded to display the message, enforce rate limits, and investigate misconduct.

F. Purchases and payments

In-app purchases are made through the relevant distribution store, including Cafe Bazaar or Myket, and are validated by our server. We may process information such as the store name, product identifier, purchase receipt or purchase token, request idempotency key, validation result, and technical information needed to verify the purchase.

The game server does not collect your payment-card number or payment password as part of this purchase flow. Payment is handled in the relevant store environment. The store may process additional transaction information under its own privacy policy and terms.

G. Advertising information

The Android version of Bingo Box uses the Adivery advertising network. Ads may include interstitial ads shown between rooms, and optional rewarded ads that you may choose to watch for an in-game reward in certain game features.

To request and display ads, limit frequency, measure performance, validate rewarded completions, and prevent fraud, we or the advertising provider may process information such as ad requests, placement type, display time, successful impressions, clicks or completions, reward status, IP address, advertising or device identifiers, and technical device information.

The exact data collected or shared by the Adivery SDK version in the release build must be confirmed against the applicable SDK documentation and publisher agreement before publication. Insert the official Adivery and advertising-partner privacy links here: [insert verified URLs].

H. Notifications and Pushe

The Android version uses Pushe for remote notifications and game-related reminders. With your permission, your device may be registered to receive notifications. In the current integration, the player identifier is assigned as a custom identifier for targeting notifications to that account, and the distribution flavor (Cafe Bazaar or Myket) is recorded to keep registrations separate.

Pushe may process technical device information and identifiers to register devices, send notifications, detect notification delivery, and process notification interactions, such as delivery time or clicks. Pushe's published policy also describes potential processing of device and network information, including device brand and model, operating-system version, screen size, Android or advertising identifiers, carrier and connection type, IP address, and notification delivery or interaction information. The exact data depends on SDK version, permissions, configuration, and enabled features.

Pushe's policy also describes capabilities such as location and installed-app information in circumstances where permissions and device settings allow collection. The existence of these capabilities in Pushe's general policy does not establish that Bingo Box currently enables them. Their status must be verified against the merged manifest and final release APK. Pushe's published policy is available at: https://pushe.co/privacy

I. Technical and security information

To operate the service and prevent misuse, we may process IP addresses, request times and types, account identifiers, session status, network errors, disconnections, failed OTP attempts, purchase-validation failures, and related technical information. The exact device data accessible to third-party SDKs depends on the permissions and configuration of the installed build.

3. Usage analytics and behavioural analysis

We use operational game information to understand how Bingo Box is used and to improve it. This may include:

• daily active users and periods of high activity;
• room counts and room status, and player entry and exit patterns;
• connection quality, errors, and disconnections;
• shop usage, purchase errors, and receipt-validation results;
• ad impressions, rewarded-ad completions, and related rewards; and
• OTP attempts and security or abuse indicators.

Some statistics are derived from existing game and operational records. This does not necessarily mean that we use a separate product-analytics platform. In the current codebase, the administration dashboard derives metrics such as daily active users and busy periods from operational data. The dashboard's 90-day limit restricts the reporting window; it does not, by itself, mean that all underlying information is automatically deleted after 90 days.

The Pushe library included in the repository contains analytics methods, but the code scan did not identify an active, explicit call sending gameplay events to those methods. Pushe may nevertheless process technical information relating to device registration, notification delivery, and notification interactions under its own policy.

4. Why we use information

We use information to:

1. create guest accounts, authenticate requests, and maintain sessions;
2. link or change phone numbers and protect accounts;
3. provide multiplayer gameplay, save progress, manage rankings, and maintain balances;
4. process purchases and validate store receipts;
5. display ads, measure impressions or completions, and provide ad rewards;
6. send notifications when permission and device registration allow;
7. prevent cheating, abuse, unauthorized access, and technical disruption;
8. provide support and handle purchase disputes;
9. analyse usage and improve gameplay, stability, and in-game economy balance; and
10. comply with legal obligations and valid requests from competent authorities.

5. Sharing and service providers

Information may be shared with or processed by the following categories of providers, only as reasonably necessary for the purposes described above:

• Adivery and its advertising partners: ad requests and delivery, measurement, reward validation, and fraud prevention;
• Pushe: device registration, remote notification delivery, and notification-related technical processing;
• Cafe Bazaar and Myket: game distribution, payment processing, and purchase validation;
• SMS delivery provider: delivery of OTP messages to the phone number you submit; the active provider must be named in this Policy;
• hosting and infrastructure providers: server hosting, databases, caching, security, and backups; provider names and processing countries must be completed before publication; and
• public authorities: where disclosure is required by applicable law or a valid legal request.

We do not provide your direct contact details, such as your phone number, to advertisers for independent sale. However, advertising and notification providers may process technical identifiers and information needed to provide their services under their own policies. This statement must be checked against the actual Adivery, Pushe, and other provider contracts, including any onward sharing with ad-network partners and any use for personalized advertising.

6. Ads and your choices

Rewarded ads are optional: you must choose to start watching one and complete the applicable placement conditions to receive its reward. Interstitial ads may be shown between rooms when the game's eligibility rules permit; the current implementation does not show them during a round or draw and applies a server-side frequency limit.

Under the current game logic, the first purchase whose receipt is successfully validated grants an account entitlement that removes interstitial ads. This entitlement does not remove optional rewarded ads.

Where supported by your device and the advertising provider, you may be able to reset or delete your advertising identifier through operating-system settings. Changing an advertising identifier does not necessarily remove ads; it may affect personalization or measurement. Available controls depend on your Android version and distribution channel.

7. Permissions and notifications

For remote notifications on Android 13 and later, the game may request notification permission. You may deny this permission or change it later in your operating-system settings. Denying notification permission should not prevent ordinary use of the game's core features, but it may prevent remote notifications from being delivered.

Actual permissions and application behaviour may change with SDK versions and the final installed build. The release APK's merged permission list must be reviewed before publication.

8. Data retention

We retain information only for as long as reasonably necessary to provide the game, protect accounts, process purchases, maintain security, resolve disputes, or comply with law. We then delete or anonymize it so it is no longer attributable to you, unless a longer retention period is legally required.

In the current implementation, OTP codes expire after 120 seconds and are consumed after successful verification. Player session tokens have a sliding 90-day lifetime and can be revoked through logout. The codebase does not currently show one clearly defined automatic deletion period for certain database records, including OTP rate-limit events, phone-change records, and disconnection events. Before publication, we must define and document retention periods for each data category and implement the corresponding deletion or anonymization procedures on the server.

9. Information security

We use technical and organizational measures appropriate to the nature of the information to limit unauthorized access, prevent manipulation of balances and purchase records, protect sessions, and control administrative access. No method of transmitting or storing information over the internet is completely risk-free, so we cannot guarantee absolute security.

10. Your rights and requests

Depending on the law that applies to you and your place of residence, you may be entitled to:

• obtain information about, or a copy of, personal information we hold about you;
• correct inaccurate information;
• request deletion or restriction of processing;
• object to certain processing or withdraw consent; and
• receive portable information where required by law.

To submit a request, contact us at the address below and describe the request. Include your player identifier if available. We may ask for proportionate information to verify that you are the account holder and to avoid disclosing information to another person.

The current game code does not show an in-app, self-service account-deletion flow. Deletion requests must therefore be submitted through the contact above. Before publication, we must establish and operate a procedure for handling these requests, including deletion or anonymization of linked records and any lawful exceptions for financial or security records.

11. International transfers

Infrastructure, SMS, notification, or advertising providers may process information in countries other than your country of residence. The final Policy must identify the hosting and provider locations and the safeguards used for international transfers: [insert processing countries and applicable safeguards].

12. Children's privacy

Bingo Box is intended for people who are legally permitted to use the service and make purchases under the laws applicable to them. Where a user is below the applicable age of legal capacity, use of the game or purchases must be authorized and supervised by a parent or legal guardian as required by law. If you believe information about a child has been collected without appropriate authorization, contact us at the address below.

[Set the product's minimum age and its exact policy for child users before publication.]

13. Changes to this Policy

We may update this Policy when game features, SDKs, providers, or legal requirements change. The updated version will show a revised date. Where a material change affects the categories of information collected or the purposes of processing, we will provide notice or obtain consent where required by applicable law.

14. Contact

For privacy questions, complaints, or requests, contact:

Operator: [full legal name]

Email: hello@studiolumen.ir

Address: [postal address]

Website: studiolumen.ir