Ranked #9 of 16 in Game Action
Red Flags
2"To the extent restricted by applicable laws, we do not sell your personal information. If we engage in the sale of your personal information in the future, you have the right to opt-out of the sale. Your information may be shared to our advertisement placement platforms or the platforms for analyzing the effect of advertisement placement."
The company only commits to not selling data 'to the extent restricted by applicable laws,' explicitly reserves the right to sell data in the future, and already shares data with advertising platforms โ which may constitute a 'sale' under some privacy laws.
Warnings
6"Hardware information, including name, type, model, manufacturer and brand of the device, CPU information (including CPU architecture information), mainboard serial number, battery and charging status, sensor information (including acceleration sensor, gyroscope and magnetic field sensor, rotation vector sensor and light sensor). We collect the information. Identifier, including IMEI, MEID, MAC address, OAID, UUID, IDFA, IDFV. We collect the information."
The policy collects an unusually broad range of hardware identifiers (IMEI, MEID, MAC address), sensor data (accelerometer, gyroscope, light sensor), mainboard serial numbers, and battery status โ far beyond what a game requires for core functionality.
"Identifier, including IMEI, MEID, MAC address, OAID, UUID, IDFA, IDFV. We collect the information. Identify your device and realize security guarantee function (such as determining the uniqueness of the device logged in and security check of a new device). Monitor advertisement placement and evaluate the effect."
Collecting IMEI, MEID, MAC address, OAID, IDFA, and IDFV together enables comprehensive device fingerprinting and cross-service tracking, especially since this data is explicitly used for advertisement monitoring and effectiveness evaluation.
"Your information may be shared to our advertisement placement platforms or the platforms for analyzing the effect of advertisement placement. These platforms help promote our Services by placing advertisements on other platforms, and help evaluate the effectiveness of our advertisements and those of our partners. We share your information within our corporate organization. We may share the information we collect with members, a parent company, subsidiaries or other corporate affiliates of our corporate group."
User data including device identifiers is shared with advertising platforms for ad placement and effectiveness analysis, and broadly within the corporate group including affiliates and subsidiaries, with vague justifications like 'critical functions.'
"We will retain your personal information for the period necessary for providing Services to you (or for any other purpose outlined in this Privacy Policy). In addition, when we intend to comply with the legal obligations, or exercise or defend our legal rights, we will retain your personal information as required or permitted by law. Depending on the situation, such as the type of information and the purpose for which we use the information, the retention period will vary."
No specific retention timelines are given. Data is kept as long as you have an account and potentially indefinitely after for legal or business purposes, with broad discretion left to the company.
"Any update we make to the Privacy Policy will be notified by an update of the "EFFECTIVE DATE" listed at the top of this Privacy Policy, and the updated Privacy Policy will be released in the Services. If we make significant changes in the way of informing or processing personal information, we will also provide additional notice to you. By continuously using our Services, you are deemed to accepted the updated contents."
The company can change the privacy policy at any time and treats continued use of the service as acceptance of the new terms, without requiring affirmative consent from users.
"Network information, including network type, network status, operator information, IP address, ICCID and WIFI information. We collect the information. Confirm the type of network access and ensure that you successfully access to the game server. Determine the country or region you are in."
The policy collects IP addresses, WiFi information, and ICCID (SIM card identifier) to determine user location. Combined with the broad device identifiers collected, this enables persistent location inference.