This policy explains how G MILLION Co., Ltd. collects, uses, shares and protects your personal data when you use our apps and games, and the choices and rights you have. Please read it together with our Terms of Service.
In short
- We collect what the Apps need to work: your account, your game progress and purchases, and basic device information.
- We don’t sell your personal data.
- Some Apps show ads. Ad partners may use your device’s advertising identifier, and you can limit this in your settings.
- Other players can see your public profile, such as your player name, avatar and results.
- You can ask to see, correct or delete your data at any time: email business@gmillion.io.
1.Who we are and what this policy covers
G MILLION Co., Ltd. (“G MILLION”, “we”, “us”) publishes the apps and games covered by this policy, such as MINEGAME, and is the data controller for the personal data processed through them. We are based in Bangkok, Thailand.
This policy applies to all of our apps and games on any platform (Android, iOS or a web browser), including their online features and our player support (each an “App”). An App may give you an extra notice about a specific feature; that notice adds to this policy.
It doesn’t cover services run by other companies, such as app stores, sign-in providers, ad networks, or games and content made by independent developers. Their own privacy policies apply to them.
2.Personal data we collect
What we collect depends on the App and the features you use. We collect only what we need for the purposes described below.
- Account and sign-in
- A player ID we create for you. If you sign in with a provider such as Google or Apple (through Google Firebase Authentication), we receive the account identifier it gives us and your email address. With Apple, this can be a private relay address. We never see your password.
- Guest play
- If an App lets you play without signing in, a random ID stored on your device. No name or email is needed.
- Profile
- Your player name, avatar and appearance, profile showcase, and the settings you choose.
- Gameplay
- Matches you play, scores, rankings, rewards, quests, virtual currency balances, and the items you own and how you got them.
- Social
- Players you follow, your followers and friends, likes and favourites, and invitations you send or receive.
- Purchases
- The product, time, order or transaction ID, and the receipt the app store sends us to confirm a purchase. We never receive your card or bank details. The Apple App Store or Google Play handles payment.
- Ads
- For Apps that show ads: which ads were shown and completed, the network that served them, a verification ID for rewarded ads, and your ad consent choices. Our ad partners may also collect your device’s advertising identifier (see Advertising).
- Notifications
- If you turn on notifications: your device’s push token (we store it encrypted), an installation ID, your language, time zone, App version and notification settings.
- Device and technical
- Device type, operating system, App version, language, IP address, and the technical logs we need to run and secure the service. Where an App uses them, it also collects crash reports and diagnostics.
- Support
- Your messages to us and the contact details you give us.
Data on your device. The Apps keep some data on your device, such as your sign-in session, guest ID and settings like language and sound, so they work between sessions. In a web browser, this uses the browser’s storage. You can remove it by signing out, clearing the App’s or browser’s data, or uninstalling the App.
What we don’t ask for. The Apps don’t ask to access your contacts, photos, camera, microphone or precise location. If a future feature needs one of them, the App will ask you first and explain why.
3.How we use personal data, and our legal basis
We process personal data in line with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other laws that apply to us. For each purpose, we rely on the legal basis shown:
- Run the Apps
- Create and manage your account, save your progress, run matches, rankings, leaderboards and social features. Legal basis: contract.
- Purchases and rewards
- Deliver what you buy or earn, and keep records of it. Legal basis: contract; legal obligation (accounting and tax).
- Ads
- Show ads, including rewarded ads you choose to watch, and confirm and measure them. Legal basis: consent where the law requires it (for example, personalised ads); otherwise, legitimate interests.
- Notifications
- Send the push notifications you turn on. Legal basis: consent.
- Security and fair play
- Protect accounts, and detect and prevent cheating, fraud and abuse. Legal basis: legitimate interests.
- Fix and improve
- Find and fix problems, and learn how the Apps are used so we can improve them. We use aggregated data wherever we can. Legal basis: legitimate interests.
- Support
- Answer your questions and requests. Legal basis: contract; legitimate interests.
- Marketing
- Send you news and offers, only if you agree. Legal basis: consent.
- Legal duties
- Meet our legal obligations and respond to lawful requests from authorities. Legal basis: legal obligation.
Where we rely on consent, you can withdraw it at any time. This doesn’t affect processing done before you withdrew it. Before we use personal data for a new purpose that doesn’t fit the ones above, we will tell you and, where the law requires, ask for your consent.
4.Advertising
Some Apps are free to play and show ads. For example, MINEGAME lets you choose to watch a rewarded ad to earn an in-game reward. Ads are served by Google AdMob, which may pass ad requests to its mediation partners, currently AppLovin, Meta Audience Network and ironSource (Unity).
To serve, cap, measure and, where you allow it, personalise ads, these partners may collect your device’s advertising identifier, IP address, device information, and information about the ads you see and interact with. They handle this data under their own privacy policies, linked under Who we share personal data with.
To confirm you finished a rewarded ad, we send your player ID with the ad request. Google sends it back to us with a signed confirmation. We use it only to give you the reward.
Your choices
- In the European Economic Area, the UK and other places where the law requires it, the App asks for your consent before personalised ads are shown. You can change your choice later in the App’s settings, under Ad privacy choices.
- On iOS, the App asks for permission before your advertising identifier can be used for tracking. You can change this at any time in Settings → Privacy & Security → Tracking (Apple’s guide).
- On Android, you can delete or reset your advertising ID in your device settings (Google’s guide).
- Rewarded ads are always optional.
6.International transfers
Our servers are in Singapore. Our partners may process data in other countries, including the United States. When personal data leaves Thailand, we transfer it only as the PDPA allows: for example, to a country with adequate protection, under appropriate safeguards such as contractual protections, or with your consent.
7.How long we keep personal data
- Account, profile and gameplay data
- While your account is active. When you delete your account, we delete or anonymise it within 30 days, except the records below.
- Purchase and transaction records
- 5 years, as accounting and tax law requires.
- Support and complaint records
- 3 years.
- Marketing records
- 6 months.
- Login and access logs
- 3 months.
We may keep specific records longer when we need them to establish, exercise or defend legal claims, or to stop fraud and abuse. One example is a record that an account was banned for cheating. After these periods, we delete or anonymise the data. Anonymised data no longer identifies you, and we may keep it for statistics.
8.How we protect personal data
We use technical and organisational measures to protect personal data. These include encryption in transit, encryption of sensitive data such as push tokens, access controls, and audit logs for administrative actions. No system is completely secure, so we can’t guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.
9.Your rights
Under the PDPA, and other laws that may apply to you such as the GDPR in the European Economic Area and the UK, you have the right to:
- access your personal data and get a copy of it;
- ask us to correct data that is wrong or incomplete;
- ask us to delete or anonymise your data;
- ask us to restrict how we use it;
- object to processing based on legitimate interests, and to direct marketing;
- receive your data in a structured, machine-readable format, or have it sent to another controller;
- withdraw your consent at any time;
- complain to Thailand’s Personal Data Protection Committee (PDPC) or to the data protection authority where you live.
To use these rights, email business@gmillion.io. Write from the email address linked to your account, or, if you play as a guest, tell us your player name and the App. We may need to confirm your identity first. We reply within 30 days. If the law lets us refuse a request, we will tell you why.
10.Deleting your account and data
You can ask us to delete your account and its data at any time:
- Email business@gmillion.io with the subject “Delete my account”, and tell us which App it is about.
- Send it from the email address linked to your account. If you play as a guest, include your player name.
- We confirm your request, then delete or anonymise your data within 30 days, and let you know when it’s done.
Deleting your account permanently removes your profile, progress, rankings, virtual currency and items. They can’t be restored, and unused virtual currency or items aren’t refunded. We keep only the records listed under How long we keep personal data, such as purchase records that tax law requires.
To remove guest data stored on your device, uninstall the App or clear its data. Signing out removes your session from the device, but it doesn’t delete your account.
11.Children
The Apps are not directed at children under 13, and we don’t knowingly collect personal data from children under 13. If you are under 20, the age of majority in Thailand, or under the age of majority where you live, please use the Apps only with a parent’s or guardian’s permission. Where the law requires it, we will ask for their consent. If we learn that we collected a child’s personal data without the consent the law requires, we will delete it. Parents and guardians who think this has happened can contact us.
12.Changes to this policy
We may update this policy. We will post the new version on this page and change the date at the top. If a change is significant, we will also tell you in the App before it takes effect and, where the law requires it, ask for your consent.
13.Contact us
For questions about this policy or your personal data, or to use your rights, contact:
G MILLION Co., Ltd.No. 89, 12th Floor, Room 1201, AIA Capital Center Building, Ratchadaphisek Road, Din Daeng Subdistrict, Din Daeng District, Bangkok 10400, ThailandEmail: business@gmillion.io