Privacy Policy
1. Introduction
1.1 This Privacy Policy explains how Ayven Ltd collects, uses and shares your personal data when you use Poker Realms, including our website at poker-realms.com, our mobile applications and any related services (together, the "Services").
1.2 Ayven Ltd is a company registered in England and Wales under company number 17153840, whose registered office is at 66 Paul Street, London EC2A 4NA ("Ayven", "we", "us" or "our"). We are the controller of your personal data for the purposes of the UK General Data Protection Regulation, the Data Protection Act 2018 and, where it applies, the EU General Data Protection Regulation.
1.3 If you have any questions about this Privacy Policy, contact us at [email protected].
2. Personal Data We Collect
2.1 Information you provide to us:
- account information, including your email address and password (which we store only in a protected, hashed form);
- profile information, including your display name and the appearance of your character;
- the content of messages you send to other players at a table; and
- the information you include when you contact us, including your email address and your message.
2.2 Information we collect when you use the Services:
- game information, including your Chips, Emeralds and other virtual items, your level, your gameplay statistics, your friends within the Services, your invitation code and the players who joined using it, and your daily reward history;
- purchase information, including the item purchased, the date and price, and the payment provider's transaction reference;
- a session identifier that keeps you signed in on your device; and
- your IP address, which is used while you are connected and is not stored.
2.3 Information we receive from third parties: if you sign in with Google or Apple, we receive your account identifier and email address from that provider. When you make a purchase, the payment provider confirms the payment to us. We do not receive or store your card or bank details.
3. How We Use Your Personal Data
3.1 We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal basis |
|---|---|
| To create and maintain your Account, provide the Services, deliver your purchases and keep your progress | Performance of our contract with you |
| To display your profile, level and statistics to other players, and to deliver your table messages | Performance of our contract with you |
| To protect the Services and our players, including limiting repeated sign-in attempts, preventing cheating and fraud, and enforcing our Terms of Use | Our legitimate interests in operating a fair and secure service |
| To respond to your enquiries and requests | Our legitimate interests in supporting our players |
| To keep records of purchases and transactions | Compliance with our legal obligations |
3.2 Where we rely on our legitimate interests, you have the right to object to that processing, as described in section 10.
4. Information Visible to Other Players
4.1 Your display name, your character, your level and your player statistics are visible to other players at your table and to your friends within the Services. Messages you send at a table are visible to the players at that table and are not stored by us. Your email address is never shown to other players.
5. How We Share Your Personal Data
5.1 We share your personal data only as described in this Privacy Policy. We do not sell your personal data.
5.2 We use service providers who process personal data on our behalf and under our instructions, including providers of hosting and network services, payment processing and email delivery.
5.3 If you choose to sign in with Google or Apple, or to make a purchase through the Apple App Store or Google Play, those companies process your personal data under their own privacy policies.
5.4 We may disclose your personal data where required by law, to protect the rights, property or safety of our players, ourselves or others, or in connection with a sale or reorganisation of our business.
6. International Transfers
6.1 Our servers are located in London, United Kingdom. Some of our service providers may process personal data outside the United Kingdom. Where they do, we ensure that appropriate safeguards are in place as required by data protection law, such as the International Data Transfer Agreement or standard contractual clauses approved for that purpose.
7. Data Security
7.1 We use appropriate technical and organisational measures to protect your personal data, including encrypting data in transit between your device and the Services and storing passwords and session identifiers only in hashed form. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.
8. Data Retention
8.1 We retain your personal data for as long as your Account exists.
8.2 When you delete your Account, we delete your email address, password, sign-in methods, sessions, display name and friends without delay. Records of purchases and of Chip and Emerald transactions are retained without your name or email address for six years, as required for accounting purposes and to handle payment queries and refunds.
8.3 Messages you send us through our Contact us page are retained for as long as necessary to deal with your enquiry.
9. Advertising, Analytics and Device Storage
9.1 The Services do not currently display advertising or use advertising, tracking or analytics services. If we introduce any of these in future, we will update this Privacy Policy before they take effect and ask for your consent where the law requires it.
9.2 The Services store a small amount of information in your browser's local storage, including your session identifier and certain settings. This storage is strictly necessary for the Services to function and does not require your consent.
10. Your Rights
10.1 Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- have inaccurate personal data corrected;
- have your personal data deleted;
- restrict our processing of your personal data;
- object to processing based on our legitimate interests;
- receive your personal data in a portable format; and
- withdraw any consent you have given, without affecting processing carried out before its withdrawal.
10.2 You can delete your Account at any time in the Services (You, then Account, then Delete account). To exercise any other right, contact us at [email protected]. We may need to verify your identity, and we will respond within one month.
10.3 You have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or, if you live in the European Union, with the data protection authority in your country.
11. Children
11.1 The Services are intended for adults aged 18 and over and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has created an Account, contact us and we will delete it.
12. Changes to this Privacy Policy
12.1 We may update this Privacy Policy from time to time. The date at the top shows when it was last updated. If we make material changes, we will notify you in the Services.
13. Contact Us
13.1 For any questions about this Privacy Policy or our use of your personal data, contact us at [email protected] or through our Contact us page.