RiseByte Technology Company Limited (“the publisher”) respects players' privacy. This policy sets out exactly what data is collected, why, who it is shared with, how long it is kept, and what rights players have over it.
1. Data collected
2.1 Data received from the sign-in provider
When a player signs in with Google, Apple or Facebook, the publisher receives from that provider:
- The user identifier issued by the provider — used to recognise the same account on later sign-ins;
- The email address and whether it has been verified (where the provider sends it);
- Display name and profile picture (where available).
The publisher never receives and never stores a player's Google, Apple or Facebook password. Where a player chooses Apple's hide-my-email option, the publisher receives only the relay address Apple generates.
2.2 Data the player provides on registration
- Full name, date of birth and a Vietnamese mobile phone number — required by Vietnamese law on the management of online games; used to verify the account with a one-time code and to determine the player's age band.
- Guardian details — required for players under 16: the name, date of birth and phone number of the parent or legal guardian, and their relationship to the player. Players aged 16 to under 18 may add them if they wish.
- Display name and avatar chosen by the player inside the game — voluntary.
2.3 Data generated by play
- Progress: levels unlocked, stars and best times for each maze;
- Coin balance, outfits owned and the outfit currently worn;
- Playtime per session and per day, used to apply the playtime limits;
- Account creation time and most recent sign-in;
- Interface language and region.
2.4 Data that is not collected
- Contacts, messages, photos or files on the device;
- The player's precise location;
- National ID numbers, passport numbers, biometric data;
- Bank card or payment details — the game has no real-money transactions;
- Player-generated content — the game has no chat.
2. Purposes
| Data | Purpose |
|---|---|
| Provider identifier and email | Recognising the account, restoring progress on a new device |
| Display name, avatar | Shown in the game interface to the player themselves |
| Name, phone number | Verifying the account as required by law; contacting the player when handling a complaint or data request |
| Date of birth | Determining the age band in order to apply legally required playtime limits |
| Guardian details | Verifying the account of a player under 16; contact where a guardian asks for help managing the account |
| Progress, coins, outfits | Saving and restoring the player's achievements |
| Playtime | Applying playtime management rules and showing the health notice |
| Technical data on errors | Diagnosing faults and keeping the game stable |
The publisher does not use player data for advertising and does not sell or trade player data with third parties for commercial purposes. Phone numbers are used only to send verification codes and to make contact when needed; the publisher sends no marketing messages.
3. Legal bases
- The player's consent — on signing in, on choosing a display name and avatar, and on providing guardian details where they are not required;
- Performance of the service contract — storing progress, coins and items;
- Compliance with legal obligations — collecting and verifying the player's name, date of birth and phone number (and the guardian's, for players under 16); playtime management for players under 18; retaining player information for the statutory period; and disclosure to competent state authorities on a lawful written request.
4. Data sharing
Player data is shared only in the following cases:
- Sign-in providers (Google, Apple, Facebook) — solely to authenticate the player's identity at the moment of signing in;
- The SMS verification (one-time code) provider — receives only the phone number in order to deliver the code, and no other data;
- Server and database infrastructure providers — processing data under contract and only on the publisher's instructions;
- Competent state authorities — on a lawful written request under Vietnamese law.
5. Retention
- Account data is kept for as long as the account remains active.
- When a player requests deletion, progress, coins, outfits, display name and avatar are erased after a 7-day grace period, during which the player can cancel the request by signing in again.
- Registration details (name, date of birth, phone number, guardian details) are retained for as long as the service is used and for 6 months after the player stops using it, as required by Vietnamese law on the management of online games, and are then erased.
- After erasure, identifying account data is removed from the live system. Technical backups are erased on the backup rotation.
- Technical logs kept for fault diagnosis are retained for a limited period and then deleted automatically.
6. Security
- All traffic between the game and the servers is encrypted with HTTPS/TLS.
- Authentication relies on tokens signed by the sign-in provider, whose signature the server verifies on every call. The publisher stores no player passwords.
- Data containing personal information is held separately from the data the application can read, and only the server may write to it.
- Database access is limited to the operations staff who need it and every access is logged.
7. Player rights
Players have the following rights over their personal data:
- The right to be informed about how their data is processed;
- The right of access, including a copy of the data held;
- The right to rectification of inaccurate data — with the exception that a date of birth can be set only once and changing it requires contacting the hotline with valid grounds;
- The right to erasure of data and of the account;
- The right to withdraw consent for information provided voluntarily;
- The right to complain to the publisher or to a competent state authority.
Requests go to the hotline on 0369 091 908 or the email risebyte@techlonogy.com. The publisher responds within 15 working days of receiving a valid request.
8. Children and players under 18
- The game is rated 00+, is suitable for all ages, and collects no more than is necessary in respect of younger players.
- Players under 16 have their account registered by a parent or legal guardian using the guardian's details. Those details are used only to verify the account, apply the correct playtime limits and contact the guardian when needed.
- Guardians may contact the hotline to view, correct or request erasure of the data of the person in their care, and to ask for help supervising playtime.
- The game has no chat, does not let players publish content and shows no advertising, so there is no exposure to unsuitable material from other users.
9. Privacy on this website
This website sets no tracking cookies, carries no advertising measurement code and collects no personal data from visitors.
10. Changes to this policy
This policy may be updated as the product or the law changes. Any update is published on this page at least 7 days before it takes effect, together with its new effective date. Where a change widens the scope of data collected, the publisher will seek players' consent afresh.