Privacy Policy
This Privacy Policy ("Policy") provides detailed information on how TeeBa Games ("Operator", "we", "us", "our", official website: https://teebagames.am/?lang=hy&theme=dark) collects, uses, processes, stores, protects, transfers, and deletes your personal data when you use the Blotify gaming platform (including https://blotify.am, the Telegram Mini App @blotify_bot, and Android/iOS mobile applications). We adhere strictly to international data privacy standards, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Republic of Armenia Law on the Protection of Personal Data. By using Blotify, you entrust us with your data and agree to the practices described in this Policy.
1. Data Controller & General Scope
TeeBa Games is the Data Controller responsible for the processing of your personal data under this Policy. This Policy applies to all registered players, visitors, and users of Blotify worldwide across all client platforms (browsers, Telegram Mini Apps, and native mobile apps).
2. Personal Data Provided Directly by the User
We collect information you provide directly:
- Via Telegram: Telegram User ID, username, first/last name, avatar photo, and locale language.
- Via Google or Apple OAuth: Account ID, full name, and verified email address.
- Via Email registration: Email address, securely hashed password (we never store plain-text passwords), player display name, gender, and birth year (used strictly for age verification).
3. Gameplay, Social & Tournament Data
To operate real-time card tables, we automatically record: virtual chip (Silver/Gold) and diamond balances, complete match histories, bids and card actions, win/loss rates, tournament rankings, clan memberships, clan chat messages, and user-uploaded clan emblems.
4. Technical, Device & Telemetry Data
To maintain system stability and security, we collect: IP addresses (in server logs), device hardware model, operating system version (iOS, Android, Windows, macOS), browser user-agent, screen resolution, connection type (Wi-Fi/Cellular), app build version, session tokens, and Firebase Cloud Messaging (FCM) push notification tokens.
5. Financial Transaction & Purchase Metadata
In-app purchases are processed directly by Google Play Billing, Apple App Store, or Lemon Squeezy. We store only anonymized order IDs, timestamps, payment amounts, and digital package identifiers. TEEBA GAMES NEVER COLLECTS, PROCESSES, OR STORES RAW CREDIT CARD NUMBERS, CVV/CVC CODES, OR BANKING CREDENTIALS.
6. Optional Data, Web3 Wallets & Sentry Crash Reporting
If you connect a Web3 wallet (e.g. TON Connect), we store only your public wallet address. In the event of application crashes, anonymized error logs and stack traces are collected via Sentry.io to diagnose and resolve software bugs promptly.
7. Legal Bases for Processing under GDPR (Article 6)
We process personal data under valid legal grounds:
- Performance of Contract (Art. 6(1)(b) GDPR): for account authentication, matchmaking, and virtual item delivery.
- Legitimate Interests (Art. 6(1)(f) GDPR): for anti-cheat protection, cybersecurity, and system optimization.
- Legal Obligations (Art. 6(1)(c) GDPR): for tax and statutory compliance.
- Consent (Art. 6(1)(a) GDPR): for push notifications and optional integrations.
8. Explicit Purposes of Data Processing
Personal data is processed to: (1) authenticate player accounts; (2) run real-time Bazar Blot tables and score synchronization; (3) maintain competitive leagues and leaderboards; (4) operate clan systems and chat; (5) deliver virtual items upon purchase; (6) detect and penalize cheating, botting, and collusion; (7) provide customer support; and (8) optimize server performance.
9. Absolute Prohibition on the Sale of Personal Data
TeeBa Games NEVER sells, rents, monetizes, leases, or trades your personal information to third-party data brokers, marketing agencies, or commercial aggregators under any circumstances.
10. Authorized Sub-Processors & Service Providers
We share necessary data strictly with trusted service providers: Authentication (Telegram, Google, Apple); Payments (Google Play Billing, Apple StoreKit, Lemon Squeezy); Cloud hosting and database infrastructure; Crash monitoring (Sentry.io); Push notifications (Google Firebase FCM); and Rewarded video ad networks (receiving only anonymous completion signals). All providers are bound by strict Data Processing Agreements.
11. Cookies & On-Device Local Storage
Blotify does not use cross-site behavioral tracking cookies. We utilize browser LocalStorage, IndexedDB, and native SecureStorage solely for essential technical functions: preserving your authentication token, selected language, sound settings, card deck themes, and UI preferences.
12. International Data Transfers & Safeguards
Your data may be processed on secure servers located outside your country of residence (including within the EEA and the USA). We ensure adequate protection globally through European Commission Standard Contractual Clauses (SCCs) and robust encryption standards.
13. Data Retention Periods & Archival Schedules
Account and gameplay records are retained as long as your account remains active. Security logs are retained for 30 to 90 days. Accounts inactive for over 24 months may be archived. When account deletion is requested, all personal data is permanently deleted within 30 days, except records required by tax or anti-fraud laws.
14. Technical & Organizational Security Measures
We implement multi-layered security controls: TLS 1.3 / HTTPS encryption in transit, bcrypt/argon2 password hashing, isolated Virtual Private Clouds (VPC), strict role-based access control (RBAC), regular automated vulnerability scans, and continuous database backups.
15. Your Rights under the GDPR
Users in the EEA and other jurisdictions have the right to: (1) Access their personal data; (2) Rectify inaccurate data; (3) Request erasure ("Right to be Forgotten"); (4) Restrict processing; (5) Data portability; (6) Object to processing; and (7) Withdraw consent at any time without retroactive detriment.
16. California Privacy Rights (CCPA / CPRA)
California residents have the right to know the categories of data collected, request permanent deletion, and receive equal service without discrimination. Because we never sell personal data, the "Do Not Sell My Info" standard is honored by design.
17. Account Deletion & Data Erasure Procedure
You may delete your account and all associated personal data at any time via in-app Settings or by submitting a deletion request through our official Telegram support bot (@blotify_bot) or channel (@BlotifyChannel). Verified requests are completed within thirty (30) calendar days.
18. Protection of Minors (COPPA & Strict 18+ Rule)
Blotify is strictly for adults (18+). We do not knowingly collect personal data from minors. If a parent or guardian discovers that a minor has registered an account, please contact us immediately, and we will promptly purge the data and terminate the account.
19. Automated Decision-Making & Anti-Cheat Heuristics
To ensure fair play, our platform uses automated algorithms analyzing turn timing, abnormal chip transfers, and bot-like behavior. Players subject to automated restrictions have the right to request human review and manual appeal via our support team.
20. Push Notifications & Communication Preferences
We may send push notifications regarding friend invitations, tournament start alerts, or free chip bonuses. You can enable or disable push notifications at any time in your device's operating system settings.
21. Third-Party Links & External Services
Blotify may contain links to external websites. TeeBa Games has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review their policies.
22. Data Breach Notification Protocol
In the unlikely event of a security breach compromising your personal data, TeeBa Games will notify supervisory authorities within 72 hours pursuant to GDPR Article 33 and promptly alert affected users via in-app notices or official broadcast channels.
23. Policy Amendments & Updates
We may update this Privacy Policy periodically. The "Last updated" date at the top will reflect any revisions. Significant changes will be announced in-app or on our Telegram channel. Continued use of Blotify constitutes acceptance of the updated Policy.
24. Right to Lodge a Complaint with a Supervisory Authority
If you believe that our data processing violates applicable data protection laws, you have the right to lodge a complaint with your local Data Protection Authority (in Armenia: RA Ministry of Justice Personal Data Protection Agency; in the EU: your national DPA).
25. Data Protection Inquiries & Official Contacts
For any questions, requests, or concerns regarding your privacy or data protection, please contact our Data Protection Team: