Privacy Policy

1♠ Contact Us

For any questions or requests about this Privacy Policy or your personal data, the fastest way to reach us is in-app, or through the details below:

2♥ The Data We Collect

We collect information in three ways:

Information you provide directly

• Contact details such as your email address when you register or contact support
• Profile information including display name, avatar, and country
• Messages and chat content sent within the App

Information collected automatically

• Device identifiers (device ID, advertising ID, IP address)
• Gameplay data including scores, match history, session duration, and in-app purchase records
• Device and operating-system information (model, OS version, language preference)
• Approximate location derived from your IP address
• Log data and crash reports

Information from partners

• Analytics and attribution data from third-party SDK partners
• Fraud-prevention signals
• Social login data (e.g. Google or Apple ID) if you choose to sign in via those providers

3♦ Why We Collect Your Data

We use the information we collect to:

• Create and manage your account and enable core gameplay
• Provide, maintain, and improve the App’s features and performance
• Personalise your experience (leaderboards, friend suggestions, language settings)
• Deliver and measure in-game and third-party advertisements
• Detect and prevent cheating, fraud, and violations of our Terms of Service
• Respond to support requests and resolve disputes
• Comply with applicable legal obligations

Our legal bases for processing include contract performance (providing the App), legitimate interests (security, analytics, and service improvement), consent (personalised advertising and optional features), and legal obligation.

4♣ Who Can See Your Data

We may share your personal information with the following parties:

• Other players — your display name, avatar, and game statistics are visible to other users as part of normal gameplay, matchmaking, and leaderboards.
• Service providers — companies that support our operations (hosting, analytics, customer support, payment processing) under strict data-processing agreements.
• Advertising partners — limited identifiers shared with ad networks to serve and measure ads. You can opt out of personalised ads at any time.
• Public authorities — when required by applicable law, court order, or other valid legal process.
• Business transfers — in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

We do not sell your personal data to any third party.

5♠ International Data Transfers

Ceydigital Studios is based in Sri Lanka. When you use Baloot, your data may be transferred to and processed in countries other than your own, including countries where data-protection laws may differ from those in your jurisdiction.

We ensure appropriate safeguards are in place — such as standard contractual clauses and vendor data-processing agreements — so that your information receives adequate protection wherever it is processed.

6♥ Your Rights and Options

Depending on your location, you may have the right to:

• Opt out of marketing — unsubscribe from promotional emails via the unsubscribe link, or disable push notifications in your device settings.
• Opt out of personalised ads — reset your device advertising ID or use the ad-preference controls in your device’s privacy settings.
• Access your data — request a copy of the personal data we hold about you (see Section 11).
• Correct your data — update inaccurate information through your in-game profile or by contacting us.
• Delete your data — request erasure of your account and associated personal data (see Section 12).
• Restrict or object to processing — contact us to limit how we use your data or to object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@ceydigital.com. If you are in the European Economic Area and have an unresolved concern, you may also contact your local data-protection authority.

7♦ Cookies and Similar Technologies

The App uses cookies and similar technologies (such as device identifiers and SDKs) to:

• Maintain your login session between app launches
• Measure App performance and diagnose errors
• Understand feature usage to help us improve the App
• Deliver and measure the effectiveness of advertisements

You can limit ad-tracking by resetting your advertising ID or opting out of interest-based advertising through your device settings:

• iOS — Settings Privacy & Security → Tracking
• Android — Settings Google → Ads → Delete advertising ID

8♣ How We Protect Your Data

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission (TLS/HTTPS) for all communications
• Encrypted data storage on our servers
• Strict internal access controls limiting who within Ceydigital Studios may access personal data
• Regular security assessments, monitoring, and vulnerability testing

While we use commercially acceptable means to protect your information, no method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at info@ceydigital.com.

9♠ Data Retention

We keep your personal data for as long as your account is active or as needed to provide you the Service. When data is no longer required, we delete it or de-identify it so it can no longer be linked to you.

• Active accounts — retained while you continue to use the App.
• Inactive accounts — periodically reviewed and de-identified after an extended period of inactivity.
• Legal records — certain data (e.g. financial and transaction records) is retained for the period required by law.
• Aggregated data — anonymised data that cannot identify you may be retained indefinitely for analytics.

If you ask us to delete your data, we may still retain what is necessary to meet legal obligations, resolve disputes, and enforce our agreements.

10♥ Age Limits

Baloot is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13, or direct interest-based advertising to them. If you are a parent or guardian and believe your child has provided us with personal data, contact us at info@ceydigital.com and we will delete that information promptly.

11♦ Access Requests

You have the right to confirm whether we process personal data about you and, if so, to receive a copy. To submit a data-access request:

• Email info@ceydigital.com with the subject line Data Access Request — Baloot
• Include the email address or username associated with your account so we can locate your records

We will respond within 30 days and may ask you to verify your identity before releasing any personal data.

12♣ Account Deletion

You may request deletion of your account and associated personal data at any time by email:

• Write to info@ceydigital.com with the subject line Account Deletion Request — Baloot, including your username or account email.

Requests are processed within 30 days of identity verification. Account deletion is permanent and cannot be undone. Some data may be retained for a limited period as required by law (e.g. financial records), to resolve disputes, or to enforce our agreements, as described in Section 9.

13♠ Changes to This Policy

We may update this Privacy Policy from time to time. The “Effective Date” at the top of this page reflects the most recent revision. We will notify you of material changes by posting a notice within the App or by emailing the address associated with your account. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.