Global Privacy Policy

1. Introduction

BLOOMVERSE INTERACTIVE PTE. LTD. ("Bloomverse," "we," "us," or "our") respects the privacy of our players and users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (bloomverseinteractive.com), play our mobile and web games, or use any other services provided by us (collectively, the "Services").

We are a company incorporated in the Republic of Singapore. This Policy is drafted in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore, the General Data Protection Regulation (GDPR) of the EU, the California Consumer Privacy Act (CCPA), and other applicable international data protection laws.

2. Key Definitions

• "Personal Data" means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which the organization has or is likely to have access (e.g., name, email, device ID).
• "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., duration of a page visit, game level progress).
• "Data Controller" means the natural or legal person who determines the purposes and means of the processing of Personal Data. For the purpose of this Privacy Policy, we are the Data Controller.
• "Data Processor" means any natural or legal person who processes the data on behalf of the Data Controller (e.g., cloud service providers).

3. Data Collection Details

We collect information to provide better services to all our users. The types of information we collect include:

3.1 Information You Provide

• Account Registration: Username, email address, password, and date of birth (for age verification).
• Support Correspondence: When you contact us for help, we collect your name, email, and the content of your message (including chat logs or screenshots).
• Surveys & Feedback: Data provided when you participate in beta tests or market research surveys.

3.2 Information Collected Automatically

• Device Information: Hardware model, operating system version, unique device identifiers (IMEI, IDFA, AAID), screen resolution, and mobile network information.
• Log Data: IP address, browser type, access times, pages viewed, and the page you visited before navigating to our Services.
• Gameplay Data: Progress, scores, achievements, in-game interactions, session duration, and crash reports.
• Location Data: General location inferred from IP address (Country/City level). Precise GPS location is only collected with your explicit permission.

3.3 Information from Third Parties

• Social Logins: If you log in via Facebook, Google, or Apple, we collect basic profile information permitted by your settings on those platforms.
• Payment Processors: We do NOT store your full credit card number. All financial transactions (In-App Purchases) are processed by third-party gateways (Apple App Store, Google Play). We receive transaction receipts containing the order ID, product ID, and transaction date.

4. Cookies & Tracking Technologies

We use Cookies and similar tracking technologies (such as beacons, tags, and scripts) to track the activity on our Service and hold certain information.

• Essential Cookies: Necessary for the operation of the website (e.g., session login).
• Analytics Cookies: Help us understand how visitors interact with the website by collecting and reporting information anonymously.
• Advertising Cookies: Used to track visitors across websites to display ads that are relevant and engaging.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

5. Use of Data

We use the collected data for the following purposes:

6. Disclosure of Data

We do not sell your personal data. We may share your information in the following situations:

• Service Providers: We may share data with third-party vendors for cloud hosting (AWS, Google Cloud), analytics (Unity), and customer support tools. They are bound by confidentiality agreements.
• Business Transfers: If Bloomverse is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.
• Law Enforcement: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

7. International Data Transfer

Bloomverse is headquartered in Singapore. Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

Specifically, our servers and third-party service providers are located in Singapore, Japan, and the United States. By submitting your information, you agree to this transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy (e.g., using Standard Contractual Clauses for EU users).

8. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

• Active Accounts: Retained for the duration of your account's existence.
• Legal Obligations: We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable tax/accounting laws, typically 5-7 years).
• Dispute Resolution: Retained to resolve disputes and enforce our legal agreements and policies.

9. Data Security

The security of your data is important to us. We use administrative, technical, and physical security measures to help protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Strict access controls and authentication mechanisms.
• Regular security audits and vulnerability scanning.

However, please remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.

10. Children's Privacy

11. Your Privacy Rights

Depending on your location, you may have the following rights regarding your Personal Data:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct any information you believe is inaccurate.
• Right to Erasure: You can request that we erase your personal data ("Right to be Forgotten"), subject to certain legal conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

To exercise these rights, please contact our Data Protection Officer (DPO) at [email protected].

12. Region Specifics

12.1 For GDPR (EEA/UK) Users

Our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it. We process data based on: Contractual Necessity, Legitimate Interests, Consent, and Legal Obligations.

12.2 For California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information. Bloomverse does not sell your personal information. You have the right to request disclosure of data collection and sales practices in connection with the requesting consumer.

13. Third-Party Links

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

15. Governing Law & Jurisdiction

This Privacy Policy and any disputes related to it shall be governed by and construed in accordance with the laws of the Republic of Singapore, without regard to its conflict of law provisions.

Any dispute arising out of or in connection with this Policy shall be referred to and finally resolved by the exclusive jurisdiction of the Courts of Singapore.