1. Information We Collect
We collect information that you provide directly to us and information that is collected automatically when you use the Service.
Information You Provide
- Account registration: Your email address, chosen username, date of birth (for age verification), and password when you create an account.
- Profile information: Any optional profile details you choose to add, such as a display name or profile picture.
- Purchases: If you purchase Golden Coins, payment processing is handled by a third-party payment provider. We receive confirmation of the transaction but do not store your full payment card details.
- Communications: Any messages, reports, or enquiries you send to our support team.
Information Collected Automatically
- Usage data: Pages visited, games played, session durations, in-game actions, features used, and timestamps of activity.
- Device information: Browser type and version, operating system, device type, screen resolution, and language settings.
- Log data: IP address, referring URLs, error logs, and network request details.
- Cookies and tracking technologies: As described in our Cookie Policy.
2. How We Use Information
We use the information we collect for the following purposes:
- Service operation: To create and manage your account, authenticate logins, process coin purchases, and deliver the core gaming experience.
- Personalisation: To remember your preferences, tailor game recommendations, and provide a consistent experience across sessions.
- Communications: To send transactional emails (account confirmation, password resets), service updates, and — with your consent — promotional messages about new features or offers. You may opt out of marketing emails at any time.
- Safety and security: To detect, investigate, and prevent fraud, cheating, abuse, and other prohibited activities; to enforce our Terms of Service and Community Guidelines.
- Analytics and improvement: To understand how players use the Service, identify technical issues, and improve game performance and platform features.
- Legal compliance: To fulfil obligations under applicable law, respond to legal requests, and protect our legal rights.
3. Cookies
We use cookies and similar tracking technologies to operate and improve the Service. Cookies help us keep you logged in, remember your preferences, and analyse usage patterns. You can manage cookie preferences through your browser settings or our cookie preference panel. For full details, please see our Cookie Policy.
4. Data Sharing
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:
- Service providers: Trusted third-party vendors who assist us in operating the Service, such as cloud hosting providers, payment processors, analytics services, and customer support tools. These providers are contractually required to protect your data and may only use it for the specific services they provide to us.
- Legal requirements: Where required by law, court order, or governmental authority, or where we believe disclosure is necessary to protect the safety of any person, prevent fraud, or enforce our Terms.
- Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your information may be transferred as part of that transaction. We will notify you of any such change and the resulting privacy implications.
- Aggregated data: We may share anonymised, aggregated data that cannot reasonably be used to identify you for research, analytics, or public reporting purposes.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, subject to the following exceptions:
- We may retain certain data for longer where required by applicable law (for example, financial records for tax or audit purposes).
- We may retain data where necessary to resolve disputes, enforce our agreements, or for legitimate fraud prevention purposes.
- Log data and aggregated analytics data may be retained in anonymised form for longer periods.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal data (subject to legal retention obligations).
- Portability: Request a copy of your data in a structured, machine-readable format.
- Objection: Object to the processing of your personal data for direct marketing or where we rely on legitimate interests.
- Restriction: Request that we restrict the processing of your data in certain circumstances.
- Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us through our Contact page. We will respond within 30 days. We may need to verify your identity before processing your request.
7. Security
We implement and maintain industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:
- Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and our servers.
- Secure password hashing using modern cryptographic algorithms — we never store passwords in plain text.
- Access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their role.
- Regular security audits and vulnerability assessments of our platform and infrastructure.
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
8. Children's Privacy
GoldenReefTables is intended for users who are at least 18 years of age. We do not knowingly collect, use, or disclose personal information from individuals under the age of 18. If we become aware that we have collected personal data from a minor, we will take steps to delete that information and terminate the associated account promptly. If you believe a minor has created an account on our platform, please contact us immediately via the Contact page.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through an in-platform notice. We encourage you to review this policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
10. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our Contact page. We will endeavour to respond to all privacy-related enquiries within 10 business days.