Privacy Policy
This Privacy Policy explains how AF GAMES PTE. LTD. (UEN 202326689C, a company incorporated in Singapore; "AF Games", "we", "us" or "our") collects, uses, shares and protects personal information when you use our mobile game Arena of World Legends (the "Game") and related services, websites and support (together, the "Services").
By using the Services you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.
1. Information We Collect
1.1 Information you provide
- Account information. When you sign in with Google or Apple, we receive a unique account identifier and, if you allow it, your email address. If you sign up with email, we collect your email address and a password (stored only as a one-way cryptographic hash; we never store your password in readable form).
- Profile information. Your in-game nickname, avatar selection, title and profile frame.
- User content. Messages you send in world or guild chat, guild names, guild descriptions, comments on guild raid rallies and other content you create in the Game.
- Support requests. Information you send us when you contact customer support or request account deletion. The Contact Us link in Settings adds your player number, app version and device model to the email for you.
1.2 Information collected automatically
- Device and game identifiers. A random identifier generated by the Game on your device to keep a guest account, a player number we assign to your account, and an access token issued by our servers. We also keep a one-way hash of your device's system identifier (Android ID, or the vendor identifier on iOS) to stop suspended users from starting a new account. While a suspension is active, we keep that hash and a hash of your linked sign-in accounts until the suspension ends, or for up to 2 years for a permanent suspension, even if you delete the account.
- Gameplay data. Your heroes, items, currencies, progress, battle results and records, rankings, guild activity, achievements and tutorial progress. This includes a daily ledger of the currencies and items you gained and spent, and a daily record of the dates you played.
- Analytics data. When Google Analytics for Firebase is active in the Game (currently on Android only), it collects an app instance identifier, your device's advertising ID where your device settings allow it, your in-game player number (the Game sends it to Firebase as the Analytics user ID), device and operating system information, the source of your install, approximate location derived from a masked IP address, profile values (server zone, Lord level, whether you are in a guild, whether you finished the tutorial, and language), and in-game events such as first launch, sessions, screens viewed, sign-in, tutorial and content progress, recruitment results, in-game currency earned and spent, and purchases (product, price and our order number, not payment details).
- Error reports. When the Game hits an error it sends us the error message and technical trace, the screen where it happened, the app version, your platform and your device model. Error reports are not linked to your account.
- Moderation records. Reports you send about other players, reports about you (including the reported chat message), and any chat or account restrictions applied to your account.
- Consent record. The version of the Terms and this Policy you agreed to and when. Your advertising and analytics choice is stored on your device.
- Technical data. App version, platform (Android or iOS) and server logs needed to operate, secure and troubleshoot the Services. We use your IP address to connect you to our servers and to limit abusive traffic. We keep it only in short-lived counters and do not store it in your account. To decide whether to ask for your advertising and analytics choice first, the Game reads your SIM or device country on your device; this value is not sent to us.
- Notification data. If you allow Game notifications: the push token that Firebase Cloud Messaging issues to your device, your device's time zone (offset from UTC), your in-game notification settings (all, guild activity, game news, events and offers), the dates you agreed to or declined event and offer notifications, and when you last opened the Game. Notifications such as full energy or a free recruit are scheduled on your device only and send nothing to us.
1.3 Purchase information
In-app purchases are processed by Google Play or the Apple App Store. We do not receive or store your payment card or bank details. We check the store's receipt when you buy, and we keep a purchase record: order number, product, price, time, the store's transaction identifier and order reference, and the amount of Legend Coins delivered. We use this record to verify the purchase, deliver the item and handle refunds.
2. How We Use Information
| Purpose | Information used |
|---|---|
| Create and maintain your account, let you sign in and restore your progress on another device | Account identifiers, email, password hash, device identifier, access token |
| Provide the Game: matchmaking, battles, rankings, guilds, chat, rewards and mail | Gameplay data, profile information, user content |
| Verify purchases and deliver purchased items; handle refunds and disputes | Purchase information |
| Send verification codes and important service messages by email | Email address |
| Keep the Game fair and safe: detect cheating, fraud, abuse and enforce our Terms of Service | Gameplay data, technical data, user content, reports from other players |
| Operate, maintain, troubleshoot and improve the Services, balance the game economy, and count daily players and return rates | Technical data, gameplay data, daily ledger, daily play records |
| Measure how our advertising performs and understand how the Game is used, in aggregated form | Analytics data |
| Find and fix errors | Error reports, technical data |
| Comply with legal obligations (for example, record keeping for electronic commerce) | Purchase information, account information |
| Sending Game notifications: guild activity, game news and, if you agree, events, offers and reminders to come back | Notification data, account language and country, guild membership |
We do not sell your personal information. The Game does not show third-party ads. We advertise the Game on other services, and we use Google Analytics for Firebase and Google Ads to measure which of those campaigns lead to installs and purchases and to reach people likely to enjoy the Game. You can limit this at any time; see section 6.
3. Legal Bases (EEA, UK and similar jurisdictions)
We process personal information on the following legal bases: performance of our contract with you (to provide the Game and purchases), our legitimate interests (security, fraud prevention, improving the Services), compliance with legal obligations, and your consent where required (you may withdraw consent at any time).
4. How We Share Information
We share personal information only as described below:
- Service providers that process data on our behalf under contract, such as cloud hosting and email delivery (Amazon Web Services, servers located in Virginia, United States).
- Analytics and advertising measurement. Google LLC (Google Analytics for Firebase, Google Ads) receives the analytics data described in section 1.2 as our service provider and under its own terms. See Google's Privacy Policy.
- Notification delivery. Google LLC (Firebase Cloud Messaging), as our service provider, receives push tokens and notification content to deliver notifications to your device.
- Platform providers that you use to sign in or purchase: Google (Google Sign-In, Google Play) and Apple (Sign in with Apple, App Store). Their handling of your data is governed by their own privacy policies.
- Other players. Your nickname, avatar, title, profile frame, heroes and teams used in battles, rankings, guild membership and chat messages are visible to other players.
- Legal and safety. When required by law, court order or government request, or to protect the rights, property or safety of us, our players or others.
- Business transfers. In connection with a merger, acquisition or sale of assets, subject to this Privacy Policy.
5. Data Retention
| Data | Retention |
|---|---|
| Account, profile and gameplay data | Until you delete your account, then deleted without undue delay |
| Daily currency and item ledger | 120 days, or until you delete your account if that comes first |
| Daily play records | 14 months, or until you delete your account if that comes first |
| Battle records and guild raid records | Up to 30 days. After you delete your account, your name may remain in other players' battle records until those records expire |
| Chat messages | Only the latest 100 messages in each chat channel are kept; older messages are removed automatically. A reported message is kept with the report |
| Email verification codes | 10 minutes |
| Purchase records | 5 years after the purchase, as required by the Korean Act on the Consumer Protection in Electronic Commerce, then destroyed; kept without your profile after account deletion |
| Analytics data | Up to 14 months in Google Analytics |
| Error reports | Up to 12 months after the error last occurred |
| Moderation records | Reports are kept until handled, then for up to 1 year. Restrictions are kept while your account exists and for up to 1 year after a restriction ends |
| Server logs | Up to 90 days, unless needed longer to investigate abuse or security incidents |
| IP address counters | About 1 hour |
| Server backups | Up to 30 days. Deleted data may remain in a backup until that backup expires |
| Notification data | Until you log out, delete your account, or the push token is no longer valid |
6. Your Rights and Choices
- Access and correction. You can view and change most profile information in the Game. You may also contact us to request a copy of your personal information or to correct it.
- Deletion. You can delete your account at any time in the Game: open your Lord Profile and tap Delete Account. Deletion is immediate and cannot be undone. If you cannot open the Game, follow the instructions at https://afgames.gg/delete-account; after we verify that the account is yours, we delete it within 7 days.
- Advertising and analytics. You can turn advertising measurement and analytics on or off at any time, wherever you live: open Settings in the Game and choose Ads & Analytics Settings. If you decline, the Game stops sending analytics and advertising measurement data to Google, and it plays the same. In the European Economic Area, the United Kingdom and Switzerland, and when we cannot tell your country, this stays off until you allow it. Elsewhere it is on until you turn it off. You can also reset or delete your advertising ID, or opt out of ads personalization, in your device settings (on Android: Settings > Privacy > Ads).
- Notifications. You can turn notifications off entirely or by type in the Game under Settings > Notifications, or in your device settings. Event and offer notifications are promotional. For players in the Republic of Korea we send them only if you turn them on yourself, we tell you the result and date whenever you turn them on or off, and we do not send them between 9 p.m. and 8 a.m. Elsewhere they are on until you turn them off.
- Unlink sign-in methods and log out from the Game at any time.
- Other rights. Depending on where you live (for example under the Singapore Personal Data Protection Act 2012, the GDPR, UK GDPR, California CCPA/CPRA or the Korean Personal Information Protection Act), you may have the right to object to or restrict processing, to data portability, to withdraw consent, and to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising your rights.
To exercise your rights, contact us at steve@afgames.gg. We may need to verify your identity before responding.
7. Children
The Services are not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children below that age. If you believe a child has provided us personal information, please contact us and we will delete it. Players who are minors should use the Services, including in-app purchases, with the consent of a parent or guardian.
8. Security
We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS/TLS), hashed passwords, access controls and limited data collection. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. International Transfers
We are based in Singapore and our game servers are located in the Republic of Korea. If you access the Services from another country, your information will be transferred to and processed in Korea, Singapore and other countries where our service providers operate. Where required (including under the Singapore PDPA), we take appropriate steps to ensure that transferred personal information receives a standard of protection comparable to that required in your country.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, for material changes, notify you in the Game or by other appropriate means.
11. Contact Us
AF GAMES PTE. LTD. (UEN 202326689C)
1 Raffles Place, #20-02, One Raffles Place, Singapore 048616
Data Protection Officer: steve@afgames.gg
General support: info@afgames.gg
Website: https://afgames.gg