Neo Monsters

"We collect information about the computer or device you use to access our Services, including the hardware model, operating system and version, browser mobile network information, list of other ZIGZA mobile applications installed on the device, MAC address, IP address, International Mobile Equipment Identity ("IMEI") number and other unique device identifiers made available by the operating system of your device."

Collecting IMEI numbers, MAC addresses, and a list of installed apps goes well beyond what is needed for a gaming service and can be used for device fingerprinting and cross-service tracking.

"We may collect information regarding the geographic location of your device each time you use the Services as provided on iOS or Android platforms, to the extent the setting on your device allowed such geographical location information to be collected. You may opt-out of such collection of your geographic location information by changing the settings on your device."

The policy collects device geolocation on every use of the service, which is excessive for a gaming app. The opt-out is buried in device settings rather than being an in-app choice.

"Some of our Services will, with your prior consent, combine game play and analytic information with information collected from other ZigZaGame Inc. games, games from our group companies, and other third party sources to analyze game and monetization trends, create profiles of categories of players, create new games and services, and perform other analytics."

The company builds player profiles by combining data across its own games, group company games, and third-party sources, enabling extensive cross-service tracking and profiling.

"We may allow other third parties to provide analytics services on our behalf and to serve advertisements within our Services. These entities may use technologies to automatically collect information about your device and your use of our Services, including IP address, Cookies, information specific to the device such as device ID, time spent on pages within our Services, and links clicked within our Services."

Third-party SDKs from Google, AppsFlyer, and Meta collect device and usage data directly from users' devices for advertising purposes, with their own privacy policies governing how that data is used.

"We may change this Privacy Policy from time to time without any prior notice. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, in some cases, we may provide you with additional notice. If you do not agree to the changes, please do not use our Services or otherwise do not provide us with your personal information."

The company explicitly reserves the right to change the privacy policy without prior notice, and treats continued use as acceptance of the new terms.

"All data will be de-identified or deleted if no longer required for the purposes mentioned above, unless further retention is required by law. Please contact us using the contact details provided below, if you have any questions with respect to our data retention practices."

There are no concrete retention periods or deletion timelines specified. Data is kept as long as the company deems it necessary for broad purposes, with no clear commitment to when deletion occurs.

"To exercise these rights, you should make a request using our contact details set out below. If you refuse to provide your personal information or request we delete or cease collecting your personal information, you may not be able to use all or some parts of our Services."

There is no self-service account or data deletion option. Users must contact the company by email or phone to request deletion, and the policy warns that requesting deletion may result in loss of service access.