Privacy Policy Last updated: 14.06.2024

Richie Loyalty Program & Website Privacy Policy 

Introduction 

Welcome to Richie. Please carefully read this Privacy Policy (“Policy”) as it outlines how Mega Fortuna Teknoloji ve Yazilim Anonim Sirketi (“Richie,” “we,” “us” or “our”) gathers, uses, discloses, and manages your personal information. By using our website, mobile app, products, and services (collectively referred to as the “Services”), you agree to this Policy. 

Consent and Age Restrictions 

By clicking the “ACCEPT & CONTINUE” button during the account creation, you affirm that you have read, understood, and agree to these terms. If you are under 18 or do not agree with these terms, you are prohibited from registering with Richie. 

Updates to This Policy 

We may update this Policy at our discretion. Any changes will be noted by the “Last Updated” date, and an alert will be provided within our mobile app. Please revisit this page to stay informed. If the modified Policy is not acceptable to you, please refrain from using our Services. 

1. Types of Data Collected  

Account Data Collection: When you actively engage with Richie, certain information is directly provided by you. During the account creation process, details like your name and email address, phone number, account preferences, and other communications details are collected. This section of the Richie User Privacy Policy clarifies the specific data points we collect when you interact with us directly or participate in our promotional activities. Understanding this information empowers you to make informed decisions regarding your privacy within the platform. 

• Name: Both your first and last name are collected when you create a Richie account. 
• Age: Providing your age allows us to ensure compliance with age restrictions and tailor platform features accordingly. 
• Gender: While optional, sharing your gender information helps us personalize user experience and offer relevant recommendations. 
• Email Address: Your email address acts as your primary login credential and serves as a communication channel for important updates, promotions, and support. 
• Phone Number:  Your phone number allows us to security verification and potentially offer relevant promotions through SMS (with your consent). 
• Account Preferences: Your individual preferences within your account settings, such as language choice or notification preferences, are collected to personalize your user experience. 
• FaceID: Richie prioritizes the security and integrity of its platform, particularly when users redeem rewards earned through their interactions. To ensure these rewards are issued legitimately and prevent fraudulent activity, we utilize a “video selfie” verification process during redemption. 
• Direct Communication: Information shared during direct communication with Richie, including email exchanges, support inquiries, or feedback via surveys, is collected to understand your needs and improve our customer services. 
• Participation in Promotions: When you choose to participate in promotions or contests organized by Richie, additional information may be collected as required by the specific promotion’s terms and conditions. This could potentially include the user name, email address, and other details relevant to the promotion. 

Device Data Collection: This section of the Richie User Privacy Policy delves into the specific details of the personal data we collect, providing transparency and enabling you to understand the scope of information utilized within the platform. 

• IP Address: We collect your IP address, which can provide an approximate location (city/country level) and other network-related information. 
• Geolocation Data: In certain instances, with your explicit consent, we may collect precise geolocation data, including longitude and latitude coordinates, to offer location-based services or features. 
• Mobile Device Identifier: Unique identifiers associated with your mobile device, such as the International Mobile Equipment Identity (IMEI) or Android advertising ID, are collected for device identification and security purposes. 
• Advertising Identifier: We leverage advertising identifiers like the Google Advertising ID to personalize advertising and measure its effectiveness. 
• Device Information: Details about your operating system, device model, and language preferences are collected to optimize the platform for your specific device. 

User Activity and Interaction Data; 

• Log Data: Information regarding your network connection type, applications connected to the platform, and web pages accessed within the platform, is collected for service improvement and security purposes. 
• Gameplay Data: We collect gameplay data like your progress, playtime, and in-game activity. Additionally, with your consent and subject to Game Partner policies, we may gather information on in-game purchases, achievements, and even bugs encountered. Importantly, the specific data collected can vary by game. Rest assured, we abide by data protection regulations and encourage you to review Game Partner privacy policies for additional details. This transparency empowers you to navigate the platform with confidence, knowing your privacy is a top priority. 
• Installed App Data: We may identify whether certain apps relevant to the platform are already installed on your device to enhance your experience and offer personalized recommendations. 
• Storage permission: Used for accessing shared external storage, including the reading and adding of any items.  
• Usage Stats permission: Device usage history and statistics. (App usage history with package names) Usage data is aggregated into time intervals: days, weeks, months, and years. 

Integration with Richie: We have partnered with Richie to provide a connected experience across our games and the Richie loyalty app. By playing our games, users can complete checkpoints and earn rewards in Richie. The data we share with Richie includes:  

• User Key ID: To identify individual users across our games and Richie.  
• Device Key ID: To verify that both our games and Richie are installed on the same device.  
• This information helps to enhance the gaming experience and is only used for the purposes described herein. We are committed to ensuring the privacy and security of this data, and we do not share it with any third-party entities without explicit user consent. 
• Guest users cannot disable this collection. 
• Retention time: Personal Data shall be processed and stored for as long as required by the purpose they have been collected.  

Personal Data from Third-Party Social Networks: This section of the Richie User Privacy Policy outlines the specific personal data we may collect when you choose to utilize third-party social networks like Facebook or Google for registration and sign-in purposes. Understanding this information empowers you to make informed decisions regarding your privacy preferences and utilize these features confidently. 

Data Acquisition Based on Privacy Settings: Richie recognizes that you exercise control over your data privacy settings on each social network platform. When you opt to use a social network login for Richie registration or sign-in, we collect the following information, always adhering to your designated privacy settings on the respective platform: 

• Basic Profile Information: This includes your first and last name as displayed on your chosen social network profile. 
• Profile Details: Depending on your privacy settings, additional information publicly available on your social network profile, such as details included in your posts, may be gathered. 
• Account Identifiers: We collect your email address and unique profile ID associated with the chosen social network for verification and account management purposes. 

Always Adhering to Legal Frameworks: It’s important to highlight that Richie only collects and processes your data for reasons explicitly listed in this Policy and by applicable laws. This legal framework safeguards your privacy and ensures that your information is handled responsibly. 

By providing this comprehensive overview of data collection practices, Richie aims to instill transparency and empower you to navigate the platform with confidence. Should you have any further questions or require clarification, do not hesitate to reach out to the designated contact points within the Policy. 

Automatic Collection 

Certain information is automatically collected when accessing and using our Services, such as: 

• Aggregated usage information 
• Session ID 
• Access time and date 
• Device and geolocation data

2. Use of Personel Data: 

Richie gathers various data points about its users, encompassing names, emails, device identifiers, and gameplay activity. This information acts as the foundation for several key functionalities, including: 

• Tailored Experiences: Leveraging collected data, Richie aims to personalize your journey by suggesting games and features aligned with your interests. 
• Rewarding Engagement: Active usage of game partners’ applications within the platform translates to rewards offered through the Richie program. 
• Service Enhancement: Data plays a vital role in monitoring game installations, managing in-app gift card redemption, and ultimately improving the overall user experience. 
• Strategic Marketing: Richie employs collected data to effectively promote its services across diverse platforms.  
• Engaging Events: Personalization extends to facilitating participation in contests, sweepstakes, and other digital events, ultimately leading to the selection of winners. 
• Operational Efficiency: Attribution of game installs and reward program management all rely on accurate data collection. 
• Security and Fraud Prevention: Safeguarding the platform and preventing fraudulent activity requires utilizing relevant data points. 
• Face Verification for Security and Fraud Prevention: This process involves capturing a short video of your face using a feature powered by our trusted third-party face verification technology. The captured video generates a mathematical representation of your facial features, creating a unique identifier that becomes part of your account information. Importantly, this video selfie is encrypted directly on your device before secure transmission to our servers for processing. By implementing this verification step, Richie aims to achieve several key objectives: 

• The uniqueness of User Registration: We safeguard against duplicate accounts and ensure legitimate participation by verifying the uniqueness of each user within the platform. 
• Prevention of Fraudulent Activity: The system helps deter the use of bots, automated processes, or any unauthorized software that could fraudulently exploit the reward system. 
• Reward Security: Video selfies enhance the security of your rewards, guaranteeing they are rightfully issued to verified users and cannot be obtained through illegitimate means. 

This verification process aligns with Richie’s commitment to creating a secure and fair environment for all users. By understanding its purpose and implementation, you can confidently engage with the platform and enjoy the rewards earned through your participation. 

• Product Development and Innovation: Insights gleaned from data drive the creation of new products and the enhancement of existing services. 
• Data-Driven Reporting: Aggregated and anonymized data empowers the generation of valuable reports and insights, fostering optimization across various aspects of the platform. 
• Effective Communication: Understanding user preferences allows Richie to tailor its communication channels and improve their relevance. 
• Machine Learning for Personalization: Data fuels the development of machine learning models, ensuring a customized content experience for each user. 

Advertising: This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Application, possibly based on User interests. This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below. Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Application. For more information, please check the privacy policies of the relevant services. In addition to any opt-out feature offered by any of the services below, Users may opt-out by visiting the Network Advertising Initiative opt-out page.  

•  Users may also opt out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.  
• AdMob (Google Ireland Limited): AdMob is an advertising service provided by Google Ireland Limited. To understand Google’s use of Data, consult Google’s partner policy.   
• Adgem: In addition to personal information that we may receive from you, AdGem may collect other information from Users using the following technologies: 
• Cookies. “Cookies” are small bits of information that the Platform places on the hard drive of your computer. Cookies remember information about your activities on the Platform to make your visits to the Platform more enjoyable and valuable to you by providing a customized experience and recognizing your preferences when you visit the Platform. If you’ve chosen to disable cookies on your browser, some of the functionality of the Platform may be lost. Certain Services provided by AdGem, require that cookies be enabled in your browser and cannot be used when you have disabled cookies in your browser. 
• Web Server Logs. Web server logs are records of activity created by the computer that delivers the web pages you request to your browser. For example, a web server log may record the search term you entered or the link you clicked to bring you to a webpage. The web server log also may record information about your browser, such as your IP address and the cookies set on your browser by the server. 
• Device Information. We may collect information about the mobile device or computer you use to access the Platform, including without limitation the hardware model, operating system and version, browser type, unique device identifiers, and mobile network information. 
• SDK Information. We may collect information from a Software Development Kit (SDK) that our Customers integrate into their applications allowing them to provide end users with advertising. By downloading and using the Customer’s application, end users are permitted to share information collected by the SDK with AdGem under this Privacy Policy. 

• Facebook Audience Network (Facebook Ireland Ltd): Facebook Audience Network is an advertising service provided by Facebook Ireland Ltd To understand Facebook’s use of Data, consult Facebook’s data policy.  This Application may use identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS, respectively) and technologies similar to cookies to run the Facebook Audience Network service. One of the ways Audience Network shows ads is by using the User’s ad preferences. The User can control this in the Facebook ad settings. 
• Users may opt out of certain Audience Network targeting through applicable device settings, such as the device advertising settings for mobile phones, or by following the instructions in other Audience Network-related sections of this privacy policy, if available.
• Personal Data processed: Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data.
• Place of processing: Ireland – Privacy Policy – Opt Out. 
•  Adjust (Adjust GmbH): Adjust is an advertising service provided by Adjust GmbH.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: Germany – Privacy Policy – Opt-out.
• AdColony (AdColony, Inc.): AdColony is an advertising service provided by AdColony, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy.
• Tapjoy (Tapjoy, Inc.): Tapjoy is an advertising service provided by Tapjoy, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt-out.
• Liftoff (Liftoff Mobile, Inc.): Liftoff is an advertising service provided by Liftoff Mobile, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt-out.
• PubMatic (PubMatic, Inc.): PubMatic is an advertising service provided by PubMatic, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt Out.
• Smaato (Smaato, Inc.): Smaato is an advertising service provided by Smaato, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt-out.
• TripleLift (TripleLift, Inc.): TripleLift is an advertising service provided by TripleLift, Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt-out.
• Unruly (Unruly Group Ltd): Unruly is an advertising service provided by Unruly Group Ltd.
• Personal Data processed: Tracker; Usage Data. 
• Place of processing: United Kingdom – Privacy Policy – Opt-out.
• Google Ad Manager (Google Ireland Limited): Google Ad Manager is an advertising service provided by Google Ireland Limited that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner unless otherwise specified in this document, has no direct relationship with. To opt out of being tracked by various advertising networks, Users may make use of Youronlinechoices. To understand Google’s use of data, consult Google’s partner policy. This service uses the “DoubleClick” Cookie, which tracks the use of this Application and User behavior concerning ads, products, and services offered.
• Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings. 
• Personal Data processed: Tracker; Usage Data.
• Place of processing: Ireland – Privacy Policy.
• Google AdSense (Google Ireland Limited): Google AdSense is an advertising service provided by Google Ireland Limited. This service uses the “DoubleClick” Cookie, which tracks the use of this Application and User behavior concerning ads, products, and services offered. Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings. 
• Personal Data processed: Tracker; Usage Data.
• Place of processing: Ireland – Privacy Policy.
• Unity Ads (Unity Technologies ApS): Unity Ads is an advertising service provided by Unity Technologies ApS. 
• Personal Data processed: Tracker; Usage Data. 
• Place of processing: Denmark – Privacy Policy.
• Aarki (Aarki Inc.) Aarki is an advertising service provided by Aarki Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: United States – Privacy Policy – Opt-out.
• Fluct (Fluct Inc.) : Fluct is an advertising service provided by Fluct Inc.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: Japan – Privacy Policy – Opt out.
• Analytics :The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
• Google Analytics for Firebase (Google Ireland Limited): Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google Ireland Limited. To understand Google’s use of Data, consult Google’s partner policy.Firebase Analytics may share Data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. The User may check this privacy policy to find a detailed explanation about the other tools used by the Owner.
• This Application uses identifiers for mobile devices and technologies similar to cookies to run the Firebase Analytics service.
• Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones or by following the instructions in other Firebase related sections of this privacy policy, if available.
• Personal Data processed: Application opens; Application updates; device information; geography/region; In-app purchases; launches; number of sessions; number of Users ; operating systems; session duration; Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data.
• Place of processing: Ireland – Privacy Policy.
• Sensor Tower (Sensor Tower Inc.): Sensor Tower is an analytics/store intelligence service provided by Sensor Tower Inc.
• Personal Data processed: Tracker; Usage Data; App Usage Stats; various types of Data as specified in the privacy policy of the service.
• Place of processing: United States – Privacy Policy.
• Flurry Analytics (Flurry, Inc.) :Flurry Analytics is an analytics service provided by Yahoo! Inc. This service is designed for mobile apps analytics and can collect various information about your phone, highlighted in the Flurry Analytics privacy policy. If the User chooses to opt-out, Flurry will stop tracking data for the device identified by the provided MAC address and/or device identifier going forward. The analytics service tracking will stop across all applications within the Flurry network.
• Personal Data processed: Tracker; Usage Data; various types of Data as specified in the privacy policy of the service.
• Place of processing: United States – Privacy Policy – Opt Out.
• Facebook Analytics for Apps (Facebook Ireland Ltd): Facebook Analytics for Apps is an analytics service provided by Facebook Ireland Ltd
• Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.
• Unity Analytics (Unity Technologies ApS): Unity Analytics is an analytics service provided by Unity Technologies ApS.
• Personal Data processed: Usage Data; various types of Data as specified in the privacy policy of the service.
• Place of processing: Denmark – Privacy Policy.
• Yandex Metrica (YANDEX, LLC) :Yandex Metrica is an analytics and heat mapping service provided by YANDEX, LLC. Yandex Metrica is used to display the areas of this Application that Users interact with most frequently. This shows where the points of interest are.
• Personal Data processed: Tracker; Usage Data.
• Place of processing: Russian Federation – Privacy Policy.
• Facebook Ads conversion tracking (Facebook pixel) (Facebook Ireland Ltd)
• Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook Ireland Ltd that connects data from the Facebook advertising network with actions performed on this Application. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network. 
• Personal Data processed: Tracker; Usage Data. 
• Place of processing: Ireland – Privacy Policy.
• Beta Testing: This type of service makes it possible to manage User access to this Application, or parts of it, for the purpose of testing a certain feature or the entire Application. The service provider may automatically collect data related to crashes and statistics related to the User’s use of this Application in a personally identifiable form.
• Google Play Beta Testing (Google Ireland Limited) :Google Play Beta Testing is a beta testing service provided by Google Ireland Limited.
• Personal Data processed: country; device information; device logs; Tracker; Usage Data; various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.
• TestFlight (Apple Inc.) : TestFlight is a beta testing service provided by Apple Inc.
• Personal Data processed: app information; country; device logs; Tracker; Usage Data; various types of Data as specified in the privacy policy of the service.
• Place of processing: United States – Privacy Policy.
• Content performance and features testing (A/B testing): The services contained in this section allow the Owner to track and analyze the User response concerning web traffic or behavior regarding changes to the structure, text or any other component of this Application.
• Firebase Remote Config (Google Ireland Limited) : Firebase Remote Config is an A/B testing and configuration service provided by Google Ireland Limited.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.

• Data transfer outside the EU: The Owner is allowed to transfer Personal Data collected within the EU to third countries (i.e. any country not part of the EU) only pursuant to a specific legal basis. Any such Data transfer is based on one of the legal bases described below. Users can inquire with the Owner to learn which legal basis applies to which specific service.
• Data transfer abroad based on standard contractual clauses (this Application)
• If this is the legal basis, the transfer of Personal Data from the EU to third countries is carried out by the Owner according to “standard contractual clauses” provided by the European Commission. This means that Data recipients have committed to process Personal Data in compliance with the data protection standards set forth by EU data protection legislation. For further information, Users are requested to contact the Owner through the contact details provided in the present document.

• Handling payments: Unless otherwise specified, this Application processes any payments by credit card, bank transfer or other means via external payment service providers. In general and unless where otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers. This Application isn’t involved in the collection and processing of such information: instead, it will only receive a notification by the relevant payment service provider as to whether payment has been successfully completed.
• RevenueCat (RevenueCat, Inc.): RevenueCat is a payment service provided by RevenueCat, Inc. The service allows the Owner to monitor and analyze the User and their purchase history and can be used to keep track of User behavior.
• Personal Data processed: Application opens; device information; Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data.
• Place of processing: United States – Privacy Policy – Opt Out.
• Payments are processed via the Apple App Store (Apple Inc.): This Application uses a payment service provided by Apple Inc. that allows the Owner to offer the purchase of the app itself or in-app purchases.
• Personal Data processed to complete the purchases are processed by Apple, as described in the privacy policy for the App Store.
• Personal Data processed: payment info.
• Place of processing: United States – Privacy Policy.
• Payments processed via the Google Play Store (Google Ireland Limited): This Application uses a payment service provided by Google Ireland Limited that allows the Owner to offer the purchase of the app itself or in-app purchases.
• Personal Data processed to complete the purchases are processed by Google, as described in the privacy policy for the Google Play store.
• Personal Data processed: payment info.
• Place of processing: Ireland – Privacy Policy.

• Hosting and backend infrastructure:This type of service has the purpose of hosting Data and files that enable this Application to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Application.
• Some services among those listed below, if any, may work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.
• Amazon Web Services (AWS) (Amazon Web Services, Inc.): Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: United States – Privacy Policy. 
• Azure Cloud Services (Microsoft): Azure Cloud Services is a hosting and backend service provided by Amazon Web Services, Inc.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: United States – Privacy Policy. 

• Infrastructure monitoring: This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance, and troubleshooting can be improved. Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application.
• Firebase Performance Monitoring (Google Ireland Limited): Firebase Performance Monitoring is a monitoring service provided by Google Ireland Limited.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.
• Crashlytics (Google Ireland Limited): Crashlytics is a monitoring service provided by Google Ireland Limited.
• Personal Data processed: crash data; device information; Universally unique identifier (UUID).
• Place of processing: Ireland – Privacy Policy. 

•  Managing contacts and sending messages :This type of service makes it possible to manage a database of email contacts, phone contacts, or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
• Firebase Notifications (Google Ireland Limited): Firebase Notifications is a message-sending service provided by Google Ireland Limited. Firebase Notifications can be integrated with Firebase Analytics to target analytics-based audiences and track opening and conversion events.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.

• Platform services and hosting: These services have the purpose of hosting and running key components of this Application, therefore allowing the provision of this Application from within a unified platform. Such platforms provide a wide range of tools to the Owner – e.g. analytics, user registration, commenting, database management, e-commerce, and payment processing – that imply the collection and handling of Personal Data. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.
• Apple App Store (Apple Inc.): This Application is distributed on Apple’s App Store, a platform for the distribution of mobile apps, provided by Apple Inc.
• By virtue of being distributed via this app store, Apple collects basic analytics and provides reporting features that enable the Owner to view usage analytics data and measure the performance of this Application. Much of this information is processed on an opt-in basis.
• Users may opt out of this analytics feature directly through their device settings. More information on how to manage analysis settings can be found on this page.
• Personal Data processed: Usage Data.
• Place of processing: United States – Privacy Policy.
• Google Play Store (Google Ireland Limited) :This Application is distributed on the Google Play Store, a platform for the distribution of mobile apps, provided by Google Ireland Limited.
• By virtue of being distributed via this app store, Google collects usage and diagnostics data and share aggregate information with the Owner. Much of this information is processed on an opt-in basis.
• Users may opt-out of this analytics feature directly through their device settings. More information on how to manage analysis settings can be found on this page.
• Personal Data processed: Usage Data.
• Place of processing: Ireland – Privacy Policy.

• Social features
• Firebase Dynamic Links (Google Ireland Limited) :Firebase Dynamic Links is a social feature provided by Google Ireland Limited. Dynamic Links are tracked within Firebase or Google Analytics for Firebase, which informs the Owner about the details of the User journey to and within this Application.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.
• Firebase Invites (Google Ireland Limited) Firebase Invites is a social feature provided by Google Ireland Limited that enables Users to share this Application. The sharing may contain referral codes, or content from within this Application and may be done via email or SMS. Sharing is tracked with Google Analytics for Firebase, which informs the Owner that the User has opened or installed this Application via invite.
• Personal Data processed: various types of Data as specified in the privacy policy of the service.
• Place of processing: Ireland – Privacy Policy.
• Further information about Personal Data
• Push notifications This Application may send push notifications to the User to achieve the purposes outlined in this privacy policy.  Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then change those settings for this Application, some or all of the apps on the particular device. Users must be aware that disabling push notifications may negatively affect the utility of this Application. 

Deletion and Retention 

• Deletion: We delete your data by shredding physical information and irrecoverably deleting electronic files. Inactive accounts may be terminated after one year, with the associated data destroyed. 
• Retention: Your personal data will be retained as long as needed for its intended purpose, or as required by law. After account deletion, we may retain data for an additional twelve (12) months for administrative purposes. We may also anonymize data, reserving the right to use it for legitimate business purposes. 

3. Sharing Responsibly:

While your data remains at the core of Richie operations, there are instances where controlled sharing occurs. These scenarios encompass: 

• Corporate Affiliates and Transaction Parties: When necessary, data might be shared with subsidiaries, affiliates, or counterparties involved in corporate transactions, always adhering to legal agreements and data protection regulations. 
• Legal and Security Considerations: If protecting legal rights, preventing fraud, managing risks, or complying with legal obligations necessitates data disclosure, Richie does so responsibly and within the confines of the law. 
• Service Providers: A network of trusted service providers assists with various tasks like customer support, technical infrastructure, reward management, system security, and marketing efforts. All such providers are contractually bound to uphold the same data protection standards as Richie. 
• Advertising and Marketing: Collaborative efforts with advertising platforms and networks enable targeted advertising displays, advertising analytics, and effective management of Richie advertising presence on other platforms. 
• Marketing Vendors: Lawful partnerships with marketing vendors allow for engaging campaigns, testing activities, user events, and surveys, respecting your right to opt out as stipulated by applicable laws. 
• Analytics Insights: Partnering with analytics providers grants valuable insights into user trends and patterns, aiding in sales optimization, service improvement, and product development. 
• Game Partners: To fulfill various objectives like personalized content, marketing, business growth, game install attribution, and reporting Richie may share certain data with its partnering game developers (and their mobile measurement partners), subject to the Game Partners’ own privacy policies. When accessing games through Richie, remember that your data is shared with the respective Game Partner. 

4. Data Security and Your Rights: 

Richie recognizes the importance of data security and implements robust measures to ensure the confidentiality and integrity of your information. These safeguards include administrative, organizational, technical, and physical controls. As a user, you are empowered to make informed decisions regarding your data through several rights: 

• Opting Out of Marketing Communications: You have the right to choose not to receive marketing messages from Richie. 
• Withdrawing Consent: You can revoke your consent to data collection and processing at any time. 
• Erasing Your Data: Richie grants you the right to request the deletion of your personal data or the closure of your account. 
• Objecting to Data Processing: You hold the right to object to how your personal data is processed for specific purposes. 

Data Controller Name:  

For the privacy policy, the designated data controller responsible for the collection, use, and protection of personal data is Richie. If you have any inquiries or requests regarding your personal information under this policy, you can contact them via email at [email protected]. This contact is provided for addressing concerns related to data privacy and handling within the parameters set by applicable data protection laws. 

5. Additional Considerations: 

Children’s Privacy Protection

It is important to remember that:

• This Policy does not govern the data practices of third-party games accessed through Richie.
• Children under 18 are not permitted to use the platform.
• Richie retains data for legal requirements, as long as you actively use the service, or for its originally intended purposes.
• Information on cookie usage and other tracking technologies is available in the separate Cookie Notice.

Richie User Privacy Policy constitutes a comprehensive document designed to foster transparency and empower.

Richie prioritizes the protection of children’s privacy and adheres to the specific requirements stipulated by the Children’s Online Privacy Protection Act (COPPA) in the United States. In compliance with COPPA: 

For residents of Korea, the age restriction is raised to 14. The same provisions apply. 

Withdrawal of Consent to Collect Personal Information 

If you wish to withdraw consent to collect personal information, you can send a written request to help@richiegames

Upon receipt, we will: 

• Stop Processing: Cease processing your personal information within a reasonable time. 
• Effects of Withdrawal: Please be aware that withdrawing consent may impact your ability to use the Services, including loss of benefits and loyalty points. 
• Account Deletion: You may also request account deletion. If you choose to delete your account, any unredeemed loyalty points will be deleted, and we will send an email to confirm the deletion (please refer to the Data Retention section above). 

Promotional Communications 

If you have given consent, we may send you promotional messages. You can choose to opt out of these communications at any time by following the unsubscribe instructions in the messages. Note that even if you opt-out, you may still receive non-promotional communications regarding your account, requested Services, or our ongoing business relationship. 

Specific Rights for Residents of the European Economic Area and the United Kingdom (EEA, SUI & UK) 

In alignment with EU, Swiss, and UK data protection laws including the General Data Protection Regulation (GDPR) and the Federal Act on Data Protection (DPA), we recognize the following rights regarding your personal data: 

• Legal Grounds for Processing: We process your data for fulfilling contracts (e.g., creating your account), based on our legitimate interests (e.g., fraud prevention), or to comply with legal obligations (e.g., tax requirements). 
• Access: You can request a copy of your personal data. Exceptions may apply if providing information adversely affects others’ rights or if legal constraints exist. 
• Accuracy: Help us keep your data accurate by informing us of any changes. 
• Objecting: You may object to certain processing activities and request us to block, erase, or limit your personal data’s use. 
• Data Portability: You can request your data in machine-readable format or have it transferred to another provider. 
• Erasure: You may request erasure of your data if it has been used unlawfully or is no longer necessary. 
• Complaints: You have the right to lodge a complaint with a data protection authority or seek legal remedy. 

Specific Rights for Residents of California, USA 

Under the California Consumer Privacy Act (CCPA), California residents are granted extensive rights and control over their personal information. Here’s what this means for you: 

1. Right to Know and Delete: 

• You can request, twice a year at no cost, details about your personal information that we have disclosed or sold, and a description of the categories of personal information shared. 
• We also provide, twice a year and free of charge, any information related to your personal data and how we process it, in a clear and easily understandable manner. 
• You can ask us to delete your personal data on our platform. Depending on your choice, we will either remove your information entirely or add you to a “do not contact” list for a specified period. 

2. Requests Timeline: 

• We’ll respond to your requests to know or delete within 45 days. If more time is needed, we’ll inform you. 

3. Authorized Agents: 

• You may appoint an authorized agent registered with the California Secretary of State to act on your behalf for disclosure or deletion requests under the CCPA. 
• We will honor such requests if you provide written authorization to the agent, and we can verify both your identity and the agent’s proof of authorization. 

4. Collection, Usage, and Disclosure Chart: 

• The following chart details the categories, sources, and purposes of the personal information we may handle (as described in CCPA Sec. 1798.140(o)): 

• Note that although we have collected and disclosed personal information within the last year for business purposes, we do not sell your personal information. 

Data Collection, Disclosure, Retention, and Your Rights at Richie, 

Data Use and Disclosure: We may share your information with third parties for the outlined business purposes. We do not sell personal information (excluding publicly available records and anonymized data) but some sharing might be considered a “sale” under California law. We never share data of users under 16. 

Data Retention: We retain data only for service usage, legal requirements, or its intended purpose. Inactive accounts with no use for 180 days may be terminated, and data destroyed, as per the Terms. 

California Incentive and Your Rights: The Rewards Program, considered a financial incentive under California law, provides benefits balanced against the value we receive from data insights and user analytics. Participation is voluntary, and you can opt-out anytime (refer to Terms). 

The California Consumer Privacy Act (CCPA) grants you rights regarding your data: 

Right to Know: Understand what data we collect, why, and to whom it’s shared. 

Right to Delete: Request deletion of your collected data, subject to exceptions. 

Right to Correct: Request correction of any inaccuracies in your data. 

Right to Opt Out: Opt out of data sales/sharing and cross-context behavioral advertising. 

Right to Limit Use/Disclosure: Limit the use and disclosure of your sensitive information for specific purposes. 

Right to Non-discrimination: Not be discriminated against for exercising your CCPA rights. 

To opt out of sales/sharing or limit sensitive data use, email [email protected]  We also honor opt-out requests via privacy signals like the Global Privacy Control (GPC). 

Submit requests to know, delete, or correct data following the instructions in the Policy. Include “Personal Information Privacy Request” in the subject line, specify the service, and provide your name, address, and email. If requesting deletion, specify removal or a “do not contact” listing. We cannot guarantee you won’t be contacted again if we acquire your data in the future. Responses to know/delete requests will be made within 45 days, with potential extensions. 

California users can appoint authorized agents to submit CCPA requests. We’ll verify your identity and the agent’s authorization before processing requests. 

Do Not Track Signals: Currently, we don’t honor browser “do-not-track” signals as most websites do. 

5. Non-Discrimination Assurance: 

• Richie will not discriminate against you for exercising your rights under the CCPA. 

California Online Privacy Protection Act (CalOPPA) 

Do Not Track Signals 

Most web browsers have a “Do Not Track” (DNT) setting, which, when activated, tells websites that the user does not wish to have their online behavior and personal information tracked (e.g., for interest-based advertising). Under CalOPPA, we’re obliged to let you know that, like most websites, we do not recognize or respond to DNT signals set by your browser. 

Overseas Transfer of Personal Information 

Compliance with Korean Regulations: We may need to transfer your personal information overseas. If this occurs, we’ll ensure that the transfer is done according to the privacy requirements of the Korean Personal Information Protection Act (PIPA) and the Network Act. This includes using a secure information communication network. Your information will be retained and used only until the purpose for which it was collected is fulfilled.

ADDITIONAL DISCLOSURES FOR RESIDENTS OF COLORADO, CONNECTICUT, AND VIRGINIA, USA (Virginia Consumer Data Protection Act (VCDPA))

Residents of Colorado, Connecticut, and Virginia, please note this section supplements the main Policy. For details on data collection, use, sharing, and third-party disclosures, refer to the sections titled “Use of Personal Data,” ” Sharing Responsibly,” and ” Types of Data Collected “.  Sharing for marketing/advertising may fall under “sales” or “targeted advertising.”  

Depending on your location, you may have certain rights regarding your data: 

Access: Request confirmation and access to your data. 

Data Portability: Request a copy of your data in a readily usable format. 

Correction: Request correction of inaccuracies in your data. 

Deletion: Request deletion of your data. 

Opt Out of Sales/Targeted Advertising: Opt out of data processing for these purposes. 

Opt Out of Profiling: Opt out of data processing for profiling that impacts your legal rights. 

Use the methods described in the Policy to exercise these rights. Include “Personal Information Privacy Request” in the subject line, specify the service you’re inquiring about, and provide your name, address, and email. If requesting deletion, specify whether you want your data completely removed or just kept on a “do not contact” list. You may also appeal a refusal to comply with your request as outlined in the Policy. Residents within these states may also use an authorized agent to submit requests on their behalf, following the outlined verification process. 

SECURITY OF YOUR INFORMATION 

Measures to Protect Your Data: We value the safety of your personal information. We employ physical, electronic, and administrative measures to protect your information from accidental loss, unauthorized access, alteration, and disclosure. This information is stored on secure servers provided by Amazon AWS & Azure Cloud Services in the United States, and protected by firewalls. 

Risks of Online Transmission: Please be aware that transmitting information over the Internet can never be entirely secure and may pass through entities outside our control. Despite our best efforts to safeguard your data, no security measures can provide absolute protection.  

EXTERNAL LINKS 

Our Services might direct you to other websites or apps, such as the Google Play Store, controlled by third parties. These third-party sites have separate privacy practices that we don’t oversee. Please read their privacy policies to understand how they may use your information.  

INTERNATIONAL TRANSFER OF INFORMATION 

Based in Canada: We operate from Canada, and your information is protected under Canadian privacy laws. However, your information may be transferred, stored, or used in other jurisdictions like the United States, where our service providers might be located. 

Protections and Risks: Although we take precautions by selecting reputable service providers and contractual safeguards, privacy laws in these jurisdictions may differ and be less protective than those in Canada or the EEA, SUI & UK. There may also be potential access to your information by foreign governments. 

GDPR Compliance: For information collected in the EEA, SUI & UK, we transfer and store it securely in the United States in line with GDPR adequacy standards. Other transfers to third countries follow specific mechanisms like the “model clauses.”  

TERMS OF USE 

Our Privacy Policy is part of our Terms of Use. By using our Services, you agree to these terms, available at the bottom of most pages on the Richie website. 

CONTACT US FOR COMPLIANCE QUESTIONS 

Reach Our Data Privacy Officer: If you have any complaints or inquiries about our handling of personal information or our compliance with this policy, you can reach our Data Privacy Officer at: 

• Richie 
• Turkey, 16110 
• Email: [email protected]

We’re committed to addressing your concerns in a timely and responsive manner.