Privacy Policy
Last updated:
This English page is a translation provided for convenience. If it differs from the Indonesian version, the Indonesian version applies. Read the Indonesian version
This policy applies to Lucky Bunny and Color Block, two Android games made by Himalaya Games, and to the himalayagames.com site. Here we explain what data we store, what we use it for, and how you can ask for it to be deleted.
Data we store on our servers
- Random device ID. Created by the game the first time you open it. It is not your Android ID, IMEI or phone number.
- IP address and country. We receive these from the Cloudflare network each time the game connects. The country is used to make sure the game is available in your country and to set the currency. The last IP address is stored to prevent abuse, such as creating accounts over and over.
- Game data. Balance, coins, spins or tickets, the last board or game result, when the account was created, and when you last played.
- Withdrawal data. The DANA number (Rupiah accounts) or PayPal email (US dollar accounts) you enter, the amount, status, withdrawal ID, and the notes from our checks on each withdrawal. If one DANA number or PayPal email is used on several devices, we flag those accounts for a check.
- Appeals. If you file an appeal, we store the appeal and its outcome.
We do not ask for your name, password, contact list, photos or GPS location. We only ask for an email if you cash out a US dollar balance to PayPal.
Data on your phone
The game stores one small file on your phone: the device ID, a session token, the player ID, settings (sound, music, vibration, language), and the last DANA number or PayPal email you cashed out to, so you do not have to type it again. This file is removed when you uninstall the app. Data on the server is not deleted with it. How to delete it is on the Delete Account & Data page.
This website
himalayagames.com does not set analytics or advertising cookies and does not load third-party scripts. The site is served by Cloudflare, which processes visitors' IP addresses to deliver pages and may use security cookies to tell visitors apart from bots.
What we use data for
- Running the games and saving your progress.
- Processing and checking withdrawals to DANA or PayPal.
- Preventing cheating and abuse.
- Counting daily statistics, such as the number of active players.
Other parties involved
- Cloudflare forwards game and site connections to our servers and protects them from attacks.
- DANA receives the number and amount of a Rupiah withdrawal when we send the money.
- PayPal receives the email and amount of a US dollar withdrawal when we send the money.
- Cloudflare R2 stores encrypted backups of our database.
The current version of the games does not use a third-party ad network or analytics service yet. If we add one later, we will update this policy first. We do not sell your data.
How long we keep data
Account data is kept for as long as your account exists, and you can ask for it to be deleted at any time. Withdrawal records are kept as proof of payment for 10 years, even after the account is deleted. Encrypted database backups are deleted automatically after 30 days.
Security
Session tokens are stored on the server as a hash, not in their original form, and database backups are encrypted before they are stored.
Player age
Lucky Bunny and Color Block are meant for players aged 13 and over. We do not knowingly collect data from children under that age. If you are a parent and find that your child is playing, contact us to delete the account.
Your rights
You can ask for a copy of your data, a correction to your data, or deletion of your account by emailing contact@himalayagames.com. If you play from Europe or the United Kingdom, you have more rights: see the GDPR section below.
Users in Europe and the UK (GDPR)
This section is for you if you play from the European Union, the European Economic Area or the United Kingdom, where the GDPR (the UK GDPR in the United Kingdom) applies. It adds to the sections above and does not change them.
Data controller
The data controller for Lucky Bunny, Color Block and himalayagames.com is Muhammad Irsyad Nur Kholiq, at Padayungan, Tasikmalaya 46132, Indonesia. Contact us at contact@himalayagames.com.
Legal bases
We process your data on these bases (GDPR Article 6):
| Why | Legal basis |
|---|---|
| Running the games and saving your progress | Contract: the data is needed for the game you use to work. |
| Processing, checking and paying withdrawals | Contract: a withdrawal is a service you ask for. |
| Preventing cheating and keeping things secure | Our legitimate interest in protecting the games, other players and payments from abuse. |
| Daily statistics, such as the number of active players | Our legitimate interest in understanding and maintaining the service. |
| Keeping withdrawal records as proof of payment | Our legitimate interest in keeping proof of payment. |
Without game data the game cannot run, and without a PayPal email a US dollar withdrawal cannot be paid. We do not make decisions about you that are based solely on automated processing and have legal effects: a check flag only marks an account so that our team looks at it, and a person on our team decides the withdrawal.
Transfers outside the EU and the UK
Your data is processed in the places below, some of which are outside the EU and the UK:
- Our server. The API and the database run on a VPS in Singapore. All the data under "Data we store on our servers" is there.
- Cloudflare. Game and site connections pass through Cloudflare's global network, so your IP address is processed in the Cloudflare data center that serves you, which can be outside Europe.
- Cloudflare R2. Stores encrypted backups of our database.
- PayPal. Receives the email and amount of a US dollar withdrawal when we send the money.
By using the games, your data is sent to these places. Questions about the protection that applies to these transfers can go to the contact above.
How long we keep data
- Account data is kept for as long as your account exists, and we delete it when you ask.
- Withdrawal records are kept for 10 years, even after the account is deleted, as proof of payment.
- Encrypted database backups are deleted automatically after 30 days.
Your rights
You have the right to:
- access your data and get a copy of it;
- have wrong data corrected;
- have your data deleted;
- have the processing of your data restricted;
- receive your data in a structured, commonly used format (data portability);
- object to processing that we base on legitimate interests, which is fraud prevention, security, statistics and keeping withdrawal records.
Send your request to contact@himalayagames.com, the same address as on the Delete Account & Data page. Tell us the game name and your player ID, or the DANA number or PayPal email you have used, so we can find your account. We reply by email.
Complaining to a supervisory authority
If you think we process your data in a way that breaks the rules, you have the right to complain to the data protection authority in the country where you live, where you work, or where the alleged breach took place. The authorities in the EU and the European Economic Area are listed on the European Data Protection Board site. In the United Kingdom the authority is the Information Commissioner's Office. You do not have to contact us first, but we would be glad to sort it out with you directly.
Changes to this policy
If this policy changes, the "Last updated" date above changes too.