Atay Games is a real-money skill-based gaming platform. Because cash play involves identity verification, payments, and anti-fraud safeguards, we collect more information than a typical free-to-play app. This policy explains exactly what we collect, why, and how to control it.
1. Scope of this Policy
This Privacy Policy ("Policy") applies to all websites, mobile applications, tournaments, games, and services (collectively, the "Services") operated by Atay Games and its affiliated entities ("Atay Games," "we," "us," or "our"). It covers our flagship titles including but not limited to Bubble Prizes, Block Puzzle Money, Word Search Cash, Word Money, Sugar Cash, Bingo Prizes, Ball Pool Cash, and Gin Rummy.
By creating an account, downloading our apps, or otherwise using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use our Services.
2. Information We Collect
We collect information in three ways: (a) information you provide directly, (b) information collected automatically when you use our Services, and (c) information we receive from third parties.
2.1 Information You Provide
| Category | Examples |
|---|---|
| Account data | Username, email address, password, date of birth, country, language preference |
| Identity verification | Full legal name, residential address, government-issued ID, photo (selfie), Social Security Number or Tax ID where required by law |
| Payment information | Card details (processed and stored by our PCI-DSS certified payment processors), PayPal handle, bank account information, billing address, transaction history |
| Profile content | Avatar, display name, friend lists, in-game messages, posts, support tickets |
| Communications | Emails, chat messages with our support team, survey responses, marketing preferences |
2.2 Information Collected Automatically
- Device & technical data: device model, operating system, unique device identifiers (IDFA, GAID), IP address, browser type, time zone, network carrier, screen resolution.
- Gameplay data: match results, scores, wagers, in-game inputs, session duration, level progression, anti-cheat telemetry, replay data.
- Approximate location: derived from your IP address and, where you grant permission, more precise GPS data used to confirm cash play is permitted in your jurisdiction.
- Usage analytics: features used, pages viewed, click and tap events, crash reports, performance metrics.
- Cookies and similar technologies: see Section 5 below.
2.3 Information from Third Parties
- Identity verification partners who confirm your name, age, address, and KYC/AML status against authoritative databases.
- Payment processors who confirm transaction success, chargebacks, and fraud signals.
- Social platforms (Apple, Google, Facebook) when you choose to sign in with a connected account — we receive only the basic profile fields you authorize.
- Advertising and attribution partners who help us measure the effectiveness of our marketing.
- Fraud prevention services that share device-risk and reputation signals.
3. How We Use Information
We use your personal information to:
- Provide the Services — create your account, run matches and tournaments, calculate winnings, process deposits and withdrawals.
- Verify identity and eligibility — confirm your age, location, and identity to comply with anti-money-laundering (AML), know-your-customer (KYC), and skill-gaming regulations.
- Detect fraud and cheating — monitor for collusion, bots, multi-accounting, payment fraud, and other prohibited behavior, and take enforcement action when needed.
- Support and communicate — respond to inquiries, send service announcements, deliver password resets, and provide customer support.
- Personalize your experience — remember your preferences, recommend tournaments, match you with opponents at a similar skill level.
- Marketing and promotions — send you offers, contests, and updates about new games (you can opt out at any time — see Section 8).
- Improve our Services — analyze usage trends, debug issues, develop new features, and conduct research and analytics.
- Comply with legal obligations — including tax reporting (e.g., issuing IRS Form 1099-MISC for U.S. winners over applicable thresholds), responding to lawful requests, and enforcing our Terms of Service.
Legal bases (for users in the EEA / UK)
We process your information under the following bases: (i) contractual necessity to deliver the Services; (ii) legal obligation for KYC/AML, tax, and regulatory compliance; (iii) legitimate interests in fraud prevention, product improvement, and direct marketing of similar services; and (iv) consent, where required, for cookies, optional marketing, or sensitive data.
5. Cookies & Tracking Technologies
We use cookies, software development kits (SDKs), pixels, local storage, and similar technologies to operate our websites, remember your preferences, measure performance, and serve relevant advertising.
| Type | Purpose |
|---|---|
| Strictly necessary | Authentication, session security, fraud prevention. These cannot be disabled. |
| Functional | Language, region, accessibility, and other preference settings. |
| Analytics | Understand how players use our Services so we can improve them. |
| Advertising | Show you relevant offers on and off our Services and measure campaign effectiveness. |
You can manage non-essential cookies through our cookie banner, your device's "Limit Ad Tracking" / "Reset Advertising ID" controls, your browser's settings, or industry opt-outs at optout.aboutads.info and optout.networkadvertising.org. We honor Global Privacy Control (GPC) signals where required.
6. Third-Party Services
Our Services may include integrations with — or links to — third-party platforms such as Apple, Google, Facebook, PayPal, and various advertising networks. Those third parties operate under their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third parties.
7. Children's Privacy
Our Services are intended for adults. You must be at least 18 years old (19 or 21 in some jurisdictions) to participate in cash matches, and at least 13 years old to use any portion of the Services. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at privacy@ataygames.com and we will promptly delete it.
8. Your Rights & Choices
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correct — ask us to correct information that is inaccurate or incomplete.
- Delete — request that we delete your personal information, subject to legal retention requirements (e.g., AML, tax records).
- Port — receive a portable copy of certain information.
- Object or restrict — object to or restrict certain processing, including direct marketing.
- Withdraw consent — where processing is based on consent.
- Lodge a complaint — with your local data protection authority.
Marketing opt-out
You can unsubscribe from marketing emails at any time using the link in any email, by adjusting your in-app notification settings, or by contacting privacy@ataygames.com. Even after opting out, we may still send you essential service messages (e.g., transaction receipts, security alerts).
How to exercise your rights
Send a request to privacy@ataygames.com or use the in-app "Privacy Controls" section under Settings → Account. We will verify your identity before fulfilling the request and respond within the timeframes required by applicable law (typically 30–45 days).
9. U.S. State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or any other state with a comprehensive privacy law, you have the rights described in Section 8, plus:
- Right to opt out of "sales" and "sharing" for cross-context behavioral advertising.
- Right to limit use of sensitive personal information (e.g., government IDs, precise geolocation).
- Right to non-discrimination for exercising your privacy rights.
- Right to appeal if we deny your request.
California "Shine the Light": California residents may request information about disclosures of personal information to third parties for direct-marketing purposes by emailing privacy@ataygames.com.
To opt out of "sales" or "sharing," visit our Do Not Sell or Share My Personal Information link in the footer or send a verifiable request to privacy@ataygames.com. Authorized agents may submit requests on your behalf with proof of authorization.
10. International Users & Data Transfers
Atay Games is operated from the United States. If you access our Services from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our service providers operate. Privacy laws in these countries may differ from those in your country.
For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, and additional supplementary measures. You can request a copy of these safeguards by contacting privacy@ataygames.com.
11. Data Security
We use technical, administrative, and physical safeguards designed to protect your personal information, including TLS encryption in transit, encryption at rest for sensitive fields, hardened cloud infrastructure, role-based access controls, secret management, and continuous monitoring. Player funds are held in segregated accounts separate from our operating capital.
No system is perfectly secure. If we become aware of a security incident affecting your information, we will notify you and the appropriate regulators in accordance with applicable law.
12. Data Retention
We keep your personal information only as long as necessary to provide the Services and to satisfy our legal, accounting, fraud-prevention, and reporting obligations. In general:
- Account data is retained for the lifetime of your account and for a period afterwards to handle disputes and chargebacks.
- Transaction and financial records are retained for at least 5–7 years to comply with tax and AML laws.
- KYC documents are retained for the period required by applicable gaming and AML regulations.
- Marketing records are kept until you opt out, then promptly suppressed.
- Aggregated and de-identified data may be retained indefinitely for analytics and product improvement.
13. Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will notify you by email, through an in-app notice, or by updating the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.
14. Contact Us
If you have questions, concerns, or requests about this Policy or your personal information, please reach out: