Privacy Policy
This Privacy Policy explains how TeeBa Games LLC («ԹԵԵԲԱԳԵՅՄՍ» ՍՊԸ, State Registration: 999.110.1611820, TIN: 03594118, official domain: https://teebagames.am) collects, uses, processes, stores, protects, and deletes your personal data across the TeeBa Games ecosystem (including Blotify, Nardify, Durakify, Shashkify, Web portals, Telegram Mini Apps, and native mobile apps). We adhere to the EU General Data Protection Regulation (GDPR) and the Republic of Armenia Law on the Protection of Personal Data.
1. Data Controller & Scope
1.1. Data Controller: TeeBa Games LLC is the legal Data Controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and the Republic of Armenia Law on the Protection of Personal Data.
1.2. Scope: This Policy applies to all individuals accessing our websites, mobile applications, servers, and multiplayer card tables worldwide.
2. Categories of Personal Data Collected
We collect only the minimum data required to deliver high-performance multiplayer games:
• Account & Identification Data: Player nickname, public player ID, avatar, email address (when authenticating via Google or Apple), and OAuth provider tokens (Google ID, Apple ID, Telegram User ID).
• Gameplay & Leaderboard Data: Match history, Elo ratings, tournament scores, seasonal progression, achievements, clan membership, and friends list.
• Device & Technical Telemetry: IP address, device model, operating system (Android, iOS, Web), browser type, network latency (ping), application version, and diagnostic crash logs.
• Push Notification Tokens: Firebase Cloud Messaging (FCM) tokens utilized strictly to deliver match invites, gift alerts, and game notices.
3. Financial Data & Payment Security
3.1. Authorized Billing Gateways: All in-app transactions for virtual chips or season passes are processed exclusively by certified billing providers (Apple App Store In-App Purchases, Google Play Billing, Telegram Payments, or licensed payment gateways).
3.2. Zero Card Data Storage: TeeBa Games NEVER collects, views, or stores your credit/debit card numbers, expiry dates, or CVV security codes. Payment processing conforms to the highest PCI-DSS security standards. We receive only transaction confirmation IDs to credit virtual items.
4. Purposes and Legal Bases for Processing
We process personal data in accordance with GDPR Article 6 and Armenian data protection statutes:
• Performance of Contract (Art. 6(1)(b) GDPR): Account authentication, table matchmaking, real-time game synchronization, and virtual balance management.
• Legitimate Interests (Art. 6(1)(f) GDPR): Fraud prevention, anti-cheat enforcement, collusion detection, network performance optimization, and platform security.
• Legal Obligation (Art. 6(1)(c) GDPR): Statutory tax reporting and corporate accounting compliance under Armenian law.
• Consent (Art. 6(1)(a) GDPR): Non-essential push notifications, which you may revoke at any time in device settings.
5. Absolute Prohibition on the Sale of Data
5.1. No Commercialization: TeeBa Games DOES NOT SELL, rent, lease, monetize, or trade your personal information to third-party data brokers, advertising agencies, or marketing networks.
5.2. Pure Game Operation: All collected telemetry is used strictly for the operation, security, and continuous improvement of our games.
6. Cookies & Browser Web Storage (LocalStorage)
6.1. Essential Storage Only: We use strictly necessary first-party cookies and browser local storage (localStorage) exclusively to retain your language preference (EN/HY/RU), audio settings, and active authentication session.
6.2. No Cross-Site Tracking: We DO NOT deploy invasive advertising pixels, third-party behavioral cookies, or cross-site tracking tools. You can clear localStorage at any time through your browser settings.
7. Third-Party Infrastructure Sub-Processors
Data is shared solely with essential infrastructure partners under strict Data Processing Agreements (DPA):
• Google Cloud Platform (EU) — Server hosting, database clusters, and real-time networking (hosted within EU jurisdiction).
• Firebase (Google LLC) — FCM notification delivery and client diagnostics.
• Sentry.io — Application error tracking and crash diagnostics (stripped of personal identities).
All sub-processors are legally obligated to enforce stringent technical safeguards matching GDPR standards.
8. Data Security & Technical Encryption Measures
8.1. Encryption in Transit and at Rest: All network traffic between your client device and our servers is encrypted using modern TLS 1.3 / HTTPS protocols. Database records are protected by industry-standard AES-256 encryption at rest.
8.2. Role-Based Access Controls (RBAC): Access to server databases is restricted to authorized operations engineers using two-factor authentication (2FA) and the Principle of Least Privilege.
8.3. DDoS Mitigation: Our servers are sheltered behind automated firewall layers and real-time volumetric DDoS mitigation systems.
9. Data Retention & User Rights (GDPR / RA Law)
9.1. Retention Periods: Personal data is maintained as long as your game account remains active. Upon voluntary deletion, personal records are permanently erased within seven (7) business days. Financial order reference codes are retained as required by statutory tax laws (up to 5 years).
9.2. Your Rights: Under GDPR and the Armenian Data Protection Act, you possess the following rights:
• Right of Access: Request a copy of personal data we maintain concerning you.
• Right to Rectification: Correct inaccurate or incomplete account details.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your profile and telemetry.
• Right to Restriction: Restrict the processing of your personal data.
• Right to Data Portability: Receive your data in a structured, machine-readable format (JSON).
• Right to Object: Object to processing based on legitimate interests.
9.3. Exercising Your Rights: To exercise any of these rights, email our DPO at info@teebagames.am or utilize our self-service Delete Account Portal. Requests are fulfilled free of charge within 30 days.
10. Protection of Minors
10.1. 18+ Directive: Our services are strictly directed to individuals aged 18 and older. We do not knowingly solicit or collect personal records from children.
10.2. Immediate Removal: If a parent or guardian discovers that a child has created an unauthorized account, please contact us at `info@teebagames.am`, and we will purge the account and associated records immediately.
11. Amendments to Privacy Policy
11.1. Periodic Reviews: The Operator may update this Policy periodically to reflect technological advancements, new platform features, or statutory regulatory updates.
11.2. Notification: Notice of significant changes will be posted on our website or within our applications. Your continued participation in games following an update constitutes acceptance of the revised Policy.
12. Contact Data Protection Officer (DPO) & Credentials
For all privacy inquiries, data access requests, or regulatory notices, contact our Data Protection Officer:
• Data Controller: TeeBa Games LLC («ԹԵԵԲԱԳԵՅՄՍ» ՍՊԸ)
• State Registration Number: 999.110.1611820 · TIN: 03594118
• Registered Location: Yerevan, Republic of Armenia
• DPO Official Email: info@teebagames.am
• Supervisory Authority: Users in Armenia also retain the right to lodge a complaint with the Personal Data Protection Agency of the Ministry of Justice of RA (moj.am).