DiceBluff
Privacy Policy
Effective and last updated：2026-10-21.3
10K Tech Pte Ltd
Support and privacy contact：10ktech@tech-wings.com
1. Scope and operator
This Privacy Policy covers the DiceBluff (大话骰派对 / ライアーズダイスパーティー) app, game service and support website provided by 10K Tech Pte Ltd. We are responsible for the personal data processing described here. Effective and last updated: 2026-10-21.3. Contact for privacy, data protection and support: 10K Tech Pte Ltd · 10ktech@tech-wings.com.
2. Accounts and sign-in
The iPhone app offers guest play and Sign in with Apple, without username/password registration. Guests use random recovery credentials; verified Apple accounts link to game accounts. Other platforms and existing username accounts may still use salted password hashes. Removing the iPhone entry does not delete existing accounts. To check authorization, the iPhone stores the Apple user identifier associated with the game account in its device-local Keychain, checking on launch, foreground and revocation notifications. The server periodically validates grants with Apple and processes Apple-signed account change notices. Revocation invalidates relevant sessions without automatically erasing progress; transient network errors are not revocation. Notification deduplication digests are retained up to seven days, without raw notices or email addresses. In the iPhone app, you may optionally link or restore an account with Sign in with Apple. We process Apple’s developer-scoped user identifier, a one-time authorization code and verification tokens. We do not receive your Apple password or request your name or email. Our server verifies Apple identity and links it to your game account. Long-lived authorization tokens are encrypted and used for authorization management and revocation, not advertising. Linking does not automatically merge other accounts or add points; the same Apple identity can restore linked progress. Account deletion submits revocation to Apple. If Apple is unavailable, game-account deletion still proceeds; encrypted revocation jobs retry and are retained for no more than 30 days. Apple handles authorization data under its own privacy policy.
3. Gameplay, social and safety data
Matching, game rules, scoring and saved progress use nicknames, entertainment points, mission and reward status, game actions, dice and settlements, results, rooms and invitations. Friends and player safety use friend relationships, recent players, block lists, report reasons and outcomes. Moderation records include the necessary operator, time, action and reason. We do not give other players your password or recovery credentials. Ad reports include your game account ID, reason, optional description, ad unit, platform, language and submission time for investigation, ad-platform action and response only. Reports do not change points and associated reports are removed on account deletion. Do not include passwords, tokens or unrelated personal data.
4. Network logs and support
Servers and gateways process connection IP addresses, request times, paths, response status and necessary operational, security and error logs to deliver the service, prevent abuse and investigate faults. Support receives the email address, message and attachments you choose to send, such as a player ID, device model, OS version or screenshots. The email link opens a draft for you to review and send; it does not automatically upload your account or device information. Do not send passwords, tokens, guest recovery credentials or unrelated sensitive data.
5. Purposes and grounds
We process necessary account, matching and scoring data to perform the game service, necessary safety data to protect players, investigate abuse and operate the service, and information required by applicable legal duties. Where consent is required, we obtain it in advance. You may withdraw consent without affecting prior lawful processing. Without necessary data, corresponding features may be unavailable. We do not sell personal data or use gameplay data for cross-app advertising profiles.
6. Local storage, permissions and tracking
Local storage holds sessions, guest recovery credentials, language, volume and tutorial settings. Clearing data may lose an unlinked guest identity. The iOS version supports optional Google AdMob rewarded ads; ordinary play does not require an ad or an ad click. At launch Google UMP checks applicable privacy choices. The ad flow continues only after you choose to watch and the SDK permits requests. Before the first watch, the app requests Apple App Tracking Transparency authorization where applicable. With permission, Google may use IDFA to measure advertising across apps. If permission is denied or restricted, non-personalized ads without IDFA can still be requested, with unchanged ordinary gameplay and ad reward conditions and amounts. You can change tracking permission in iOS Settings. Ad services initialize after privacy choices are handled. We always request non-personalized ads and disable publisher first-party ID, and do not request location, contacts, camera or microphone permissions. Google may process IP addresses (to infer coarse location), device and SDK identifiers, ad impressions/interactions, performance and diagnostics for ad delivery, fraud prevention and measurement. Non-personalized does not mean no data processing. Where required, revisit Ad privacy choices in Settings. Google privacy policy: https://policies.google.com/privacy. Production rewards are verified using Google-signed callbacks. Only a random one-time reward ticket is sent to Google, not your game nickname, email, Apple identifier or login token. Our server links tickets, transaction identifiers, times and credit status to the game account for reward delivery, deduplication and troubleshooting for up to seven days, removed with account deletion; backups expire within 30 days. If a test build displays “Rewarded ad test”, you may optionally view official Google AdMob demo ads. They generate no ad revenue, do not restrict normal gameplay and never require an ad click. The ads SDK is initialized and demo ads requested only after you choose to watch. Google processes IP addresses, device and SDK information, ad interactions and diagnostics. Test builds disable personalization and publisher first-party ID, do not request Apple tracking permission, and remove the Android advertising ID permission. Our server retains account-linked test reward receipts, times and credit status for up to seven days for rewards, deduplication and troubleshooting; account deletion removes them. Rewards are entertainment points with no cash value. Google handles received data under https://policies.google.com/privacy. This restricted test channel is not production server-side ad verification. Required consent and store privacy disclosures must be completed before commercial ad serving.
7. Visibility, sharing and providers
Other players may see necessary player IDs, nicknames, points or game state in matching, rooms, friend searches or match history. Unrevealed opponent dice are not disclosed before the reveal. Reports and moderation records are restricted to authorized personnel. Amazon Web Services (AWS) supplies cloud infrastructure; game servers and databases are currently hosted in Tokyo, Japan. Our email provider processes support mail. Providers may process necessary data only to deliver their services under applicable contracts and law; we require corresponding protections. We may disclose relevant data to competent authorities when legally required or necessary to address a lawful security request.
8. International processing and security
Your location may differ from our servers and support operations. Data may be transferred to Japan and to processing locations of the operator and necessary providers. We use contractual and other safeguards where applicable law requires them. Clients connect to our service entry point using HTTPS/WSS. We also use password hashing, access controls and restricted backups. No system is completely secure; we handle and notify legally reportable incidents as applicable law requires.
9. Retention
Account data, progress and social relationships remain while the account exists and relevant services are provided; recent match history rolls over at the display limit. Reports, restrictions and moderation records are kept as needed for safety and disputes, subject to deletion below. Operational and security logs follow troubleshooting and abuse-prevention needs and system rotation rules. Support mail is kept until the issue and necessary dispute handling finish, except for legal retention duties. You may request deletion of related identifiable information. Database backups are rotated and retained for no more than 30 days.
10. Account deletion and backups
Registered and guest users can delete their account in Settings → Delete Account, without calling or emailing. After confirmation and successful processing, we delete the active account, sign-in and guest credentials, related profile, social relationships, reports and settlement records, and invalidate all sessions. Opponent history replaces the old nickname with Deleted Player; related moderation audits are de-identified. Deletion cannot be undone; old credentials cannot restore the account. The same username can only create a new account. Existing backups expire within 30 days. Before reopening after a restore, we reapply deletions and invalidate old sessions.
11. Deletion verification
To prevent restores from reviving deleted accounts, a separate record holds a deletion receipt, HMAC-protected account index, request and completion times and status. It does not hold usernames, nicknames, passwords, email addresses or guest secrets. HMAC indexes are pseudonymous, not fully anonymous. Completed records remain for 37 days and unfinished requests until completion. A global sequence high-water mark is retained to prevent account ID reuse.
12. Rights and contact
You can edit your nickname, block or report players, sign out and delete your account in the app. Depending on applicable law, you may also have rights of access, correction, deletion, restriction, objection, portability and consent withdrawal, and may complain to a competent regulator. Send privacy requests to 10ktech@tech-wings.com. We may reasonably verify identity but will not ask for passwords or purchases. We respond within applicable legal deadlines and explain requests we cannot fulfill.
13. Younger users
The service is not directed to children under 13. Follow local legal minimum ages and store age restrictions, obtaining guardian consent where required. If you believe we process a child’s data without a necessary lawful basis, contact our privacy email. We will investigate and delete it or take other necessary measures. A store rating does not replace applicable child data-protection rules.
14. Updates
Revised policies and effective dates appear here and in the app. Material changes to purposes, sharing or rights receive appropriate notice, and renewed consent is obtained before processing where legally required. Chinese, English and Japanese versions describe the same practices. Contact us about translation differences; rights under applicable law remain unaffected.