Effective date: 2026-11-11
This policy explains what personal data the developer of Star Bull ("we", "us") collects when you use the Star Bull app and its related web pages (the "Service"), why we collect it, how we use and keep it, and what rights you have. The English and Chinese versions have the same content. If they differ, the language version required by the law where you live prevails; otherwise the Chinese version prevails.
The Service does not read or collect your real name, phone number, contacts, photos, microphone, camera, precise (GPS) location, advertising identifier (IDFA / Android advertising ID), payment card or bank details. The Service contains no third-party advertising, marketing analytics or cross-app tracking tools, and does not track your activity in other companies' apps or websites.
| Category | What | Source |
|---|---|---|
| Account identifiers | Player ID (a system number), a generated nickname (e.g. "Player100023"), sign-in session tokens, and a device key generated at random by the app on first start and stored on your device (not a hardware serial number) | Generated by the app |
| Sign in with Apple (optional, iOS only) | The user identifier Apple provides and the email Apple provides (which may be an Apple relay address) | Apple, when you choose to link |
| Purchase records | Store (App Store / Google Play), product ID, transaction ID or purchase token, time, number of points, the signed transaction data returned by the store, refund records | Apple / Google |
| Points and game records | Points ledger (every change, free or purchased source), game entry and exit, per-round game records (cards dealt, plays and actions, results, the share kept, the random seed), free point claims | Created as you use the Service |
| Network and approximate location | IP address when you enter a game or claim points; the country and state/province code derived from the IP address (e.g. US-CA); the country of your store account | Your connection, your store account |
| Reports and support | Reports you send (reason, the player reported, description); for web deletion requests, your contact email, player ID and the proof you give (e.g. a purchase order number); emails you send to support | You |
| Risk records | Unusual play detected by the system (for example one player losing again and again to the same player) and how staff handled it | Created by the system from game records |
The following stay only on your device and are never sent to us: your age and terms confirmation, the server address setting, downloaded game packs and updates.
| Purpose | Data used | Legal basis (where the GDPR or similar laws apply) |
|---|---|---|
| Create and keep your account; recover it on a new phone | Account identifiers, Sign in with Apple | Performance of our contract with you |
| Run games, seat players, settle points | Points and game records, account identifiers | Contract |
| Process purchases, restore missing points, handle refunds | Purchase records | Contract; legal obligation (accounting) |
| Prevent chip dumping, point trading, multiple accounts, cheating and fraud | Game records, IP address, risk records, reports | Legitimate interests (fair play and security); legal obligation |
| Offer the Service only where it is allowed | Country and state derived from IP, store country | Legal obligation; legitimate interests |
| Answer reports, support and deletion requests | Report and support data | Contract; legal obligation |
| Meet tax, accounting and regulatory requirements | Purchase records, points ledger | Legal obligation |
We do not use your data for advertising or marketing profiles and we do not sell it to anyone.
To stop players from moving points by losing on purpose (usually to trade points privately), the system analyses game records automatically. When two accounts show a clear one-way transfer (for example many rounds together with points flowing almost only one way), or one player keeps folding strong hands so the same opponent wins, the system automatically suspends the accounts involved and passes the case to staff for human review.
The system also uses your connection location and store country to decide whether you are in a region we serve. Outside those regions you cannot enter games, buy or claim points (see section 2 of the Terms of Service). Contact us if you think this is wrong.
We only share your data:
We do not sell your personal information and we do not share it for cross-context behavioural advertising (as "sell" and "share" are defined in the California CCPA / CPRA).
Data is stored on servers in Singapore. If you live elsewhere, your data is transferred abroad for processing. We protect it to the standard of this policy; where the GDPR applies we use standard contractual clauses or another lawful transfer mechanism.
| Data | Retention |
|---|---|
| Account identifiers, Apple link | Until you delete your account. On deletion, sign-in tokens and the Apple link are removed at once, the device key is invalidated and the nickname becomes "Deleted" |
| Purchase records, points ledger | 5 years after account deletion, for store refunds, accounting audits and consumer disputes, or longer where the law requires |
| Game records | At least 30 days so you can look them up; up to 2 years for disputes and fraud prevention |
| Region code derived from IP | Only the latest one; removed when you delete your account |
| IP address | Up to 90 days in the game server's sign-in logs; the first and latest IP kept on the account are cleared when you delete your account |
| Reports, risk records, deletion requests | 3 years after they are closed, to handle appeals and repeat violations |
Data kept after account deletion is used only for the purposes above and is deleted or de-identified when the period ends.
Data travels over encrypted connections (HTTPS) and store transactions are verified by signature on our server. Only authorised staff can access the database, and the support console needs a separate password. No method is 100% secure; if a breach may affect your rights, we will notify you and the authorities as the applicable law requires.
Wherever you live, you can email privacy@starbullgames.com to ask us to do any of the following. To protect your account we first check that you hold it (for example by asking for your player ID and a purchase order number, or by asking you to act inside the app). We reply within the time the law sets, usually within 30 days.
Depending on where you live, these also apply:
In the past 12 months we collected these categories of personal information: identifiers (player ID, device key, IP address, the email Apple provides), commercial information (purchase records), internet activity (game and points records), approximate geolocation derived from IP (not precise location), and inferences (risk assessments). Sources, purposes and retention are in sections 3, 4 and 8.
| Item | Details |
|---|---|
| Collector | the developer of Star Bull |
| Purposes | Online game services, consumer protection, management of contractual relationships, member management, account and billing management, information security, other business within our registered scope |
| Categories | Identifiers (player ID, device key, IP, email provided by Apple), financial transactions (purchase records), social activities (game records), other (region derived from IP) |
| Period | See section 8 |
| Area | Where our servers are (Singapore) and where our service providers are |
| Recipients | Us, the service providers in section 6, Apple and Google, authorities with legal power to request |
| Method | Electronic processing and use |
| Your rights | Article 3 rights, exercised as described in this section |
| If you do not provide data | You cannot create an account or use the Service |
The Service is only for users aged 18 or older (or the age of majority where you live, whichever is higher); you are asked to confirm this on first start. We do not knowingly collect data from anyone under 18, and we do not collect data from children under 13. If you believe a minor is using the Service, contact us and we will delete the account and its data once confirmed.
When we change this policy we announce it in the app and on this page and update the effective date. Material changes (such as new categories of data or new purposes) are announced at least 30 days before they take effect, and we ask for your consent again where required.