Privacy Policy

Last updated: 25 August 2026

This policy explains what data we collect, why, how we protect it, and what your rights are.

1. What We Collect

Account data: email address, username, display name, and your avatar if you choose or upload one.
Gameplay data: level, experience, in-game balances, match history, and owned items.
What you write: chat room messages, room names and logos, and gift messages.
Technical data: IP address, device and browser type, and sign-in times — for service security and improvement.

We do not store your card details. Payment is handled entirely by our payment provider Moyasar. Your card number and CVV never reach us. We store only the transaction reference, amount and package.

2. Why We Use It

Operating your account and gameplay, and saving progress and balances.
Processing purchases and sending receipts.
Preventing cheating and fraud, and protecting accounts.
Technical support and answering your enquiries.
Service notifications, and promotional messages you can opt out of at any time.

We do not sell or rent your data to anyone.

3. Who We Share It With

Supabase — database hosting and authentication.
Vercel — website and server hosting.
Moyasar — payment processing.
Competent authorities upon lawful request.

4. What Other Players See

Your display name, avatar, level and leaderboard position are public within the app. However, your balance, email address and purchases are visible to no one but you.

5. Retention

We retain your data for as long as your account exists. When an account is deleted, personal data is removed within thirty days, except financial transaction records which we are required to retain for the statutory period.

6. Your Rights

Access and correct your data from the profile screen.
Delete your account from settings, or by contacting us.
Opt out of promotional messages.
Request a copy of your data.

To exercise any of these: support@balotk.com

7. Children

The service is not directed at anyone under 13. If we learn of an account belonging to a child under that age, we delete it.

8. Security

Data is encrypted in transit, passwords are stored as irreversible hashes, and access is governed by row- and column-level permissions in the database. Nevertheless, no method of transmission or storage is one hundred percent secure.

9. Changes to This Policy

We may update this policy and will notify you of material changes in the app or by email.