Privacy Policy
Effective date: 28 October 2026
This policy explains what IotaRise Private Limited ("IotaRise", "we") collects when you play Snakes & Ladders 3D World (the "Game"), why, and the choices you have. Offline play (Pass & Play, Vs Computer) needs no account and sends us nothing except crash reports if you enable them.
1. What we collect
| Data | When | Why |
|---|---|---|
| Google or Apple account id, email address, name and profile picture URL | You sign in | To create your account and sign you in on other devices |
| Display name and avatar you choose | You edit your profile | Shown to the players you play with |
| Online match records: who played, every dice roll, placings, times | You play online | To run fair matches, show results and your history, and resolve disputes |
| Device time zone, language and app version | Each time the app opens signed in | Statistics by region and language; knowing which versions are in use |
| IP address | Every server request | Security, abuse prevention and rate limiting; kept in server logs for up to 30 days |
We do not collect your precise location, contacts or photos, and we do not read your messages. The Game has no chat; players can only send the Game's built-in emoji.
2. How we use data
To run the Game and its online services, keep matches fair, show leaderboards and history, prevent cheating and abuse, answer support requests, and understand how the Game is used so we can improve it. We do not sell personal data.
3. Legal bases (GDPR)
Performance of our contract with you (running the Game), our legitimate interests (security, fraud prevention, product improvement) and, where required, your consent.
4. Sharing
- Other players see your display name, avatar and moves in the matches you join.
- Service providers that host our servers (Amazon Web Services, USA) process data on our behalf under contract.
- Sign-in providers: Google and Apple process your sign-in under their own policies; we receive only the data listed above.
- Authorities, when the law requires it.
When advertising or in-app purchases are added to the Game, this policy will be updated first to describe the partners involved and the data they receive.
5. Retention
Account data is kept while your account exists. Match records are kept for up to 24 months for fair-play review, then detached from accounts. Server logs expire within 30 days and backups within 14 days. Deleted accounts are anonymised immediately (section 7).
6. International transfers
Our servers are in the United States. Where data moves out of your country we rely on standard contractual clauses or equivalent safeguards.
7. Your rights
You can see and change your display name and avatar in the Game. You can delete your account in Settings → Account → Delete account, or by following /legal/delete-account; deletion removes your identity and profile at once. You may also ask us for a copy of your data, correction, or restriction of processing by emailing deepak@iotarise.com. EU/UK residents may complain to their supervisory authority.
8. Children
Online play requires players to be 13 or older. If we learn that a child under 13 has created an account we delete it. Parents can contact us at deepak@iotarise.com.
9. Security
Connections use TLS encryption. Servers are firewalled and reachable only through our API gateway; staff access is limited and logged. Sign-in tokens are verified with Google and Apple directly; we never see your passwords.
10. India – Digital Personal Data Protection Act 2023
IotaRise is the Data Fiduciary. Our Grievance Officer is Deepak Kumar, deepak@iotarise.com. You may exercise your rights to access, correction, erasure, grievance redressal and nomination by contacting him; we respond within the time the Act requires.
11. Changes
Changes are posted here with a new effective date; material changes are announced in the Game before they apply.
12. Contact
IotaRise Private Limited · CIN U62091HR2023PTC111902 Privacy and data requests: Deepak Kumar, deepak@iotarise.com · Support: contact@iotarise.com