Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies to games, mobile applications, web and HTML5 games, PC or console games, games distributed through app stores or third-party platforms, multiplayer services, websites, support channels, and other game-related services published, developed, or operated by CGDealers Ltd (collectively, the "Games" or "Services").

It applies whether a Game is offered through the Apple App Store, Google Play, YouTube Playables, Steam, a web portal, a social platform, another distribution partner, or directly by CGDealers Ltd.

This Policy does not govern a third-party platform, store, advertiser, publisher, or service that processes information for its own purposes under its own privacy policy.

2. Who We Are

CGDealers Ltd is the data controller for personal information processed directly by us in connection with the Games, unless a Game-specific notice states otherwise.

Questions, requests, or complaints concerning this Policy may be sent to support@cgdealers.com. Please include the name of the Game, your platform, and your player or account ID where available.

3. Information We Collect

We collect information in three main ways: information you give us, information generated when you use a Game, and information received from platforms or service providers.

Guest play

Some Games may create a guest or device-linked player record without requiring registration. That record may still contain an internal player ID, progress, device information, and technical or analytics data.

Sensitive information

We do not intentionally request sensitive personal information such as government identification numbers, payment-card credentials, health information, biometric identifiers, political opinions, religious beliefs, or precise location unless a clearly disclosed feature legitimately requires it. Please do not submit sensitive information through chat, usernames, support messages, or user-generated content.

4. How We Use Information

Depending on the Game, we may use information to:

• Provide, operate, maintain, and update the Games.
• Create and manage accounts, guest profiles, cloud saves, and cross-device progress.
• Provide gameplay, matchmaking, multiplayer rooms, leaderboards, tournaments, rewards, inventories, and social features.
• Process and validate purchases, subscriptions, virtual items, and rewarded-ad grants.
• Authenticate users and connect supported third-party accounts.
• Respond to support requests, restore progress, and troubleshoot technical issues.
• Measure performance, understand feature usage, balance gameplay, and improve future updates.
• Deliver contextual or personalized advertising where permitted and consented to.
• Detect cheating, fraud, abuse, harmful conduct, security incidents, and violations of our rules.
• Moderate chat, usernames, reports, and user-generated content where those features exist.
• Comply with legal obligations, resolve disputes, and enforce agreements.
• Protect the rights, safety, and integrity of players, CGDealers Ltd, and third parties.

Automated systems

We may use automated systems for matchmaking, difficulty adjustment, fraud detection, anti-cheat review, content filtering, ad selection, and recommendations. We do not ordinarily use solely automated decisions that produce legal or similarly significant effects on players.

AI-enabled features

If a Game includes an AI-enabled feature, content submitted to that feature may be processed by us and an AI technology provider to generate the requested result, provide safety controls, and prevent abuse. The Game will provide additional notice where appropriate. Do not submit confidential or sensitive information to an AI feature.

5. Legal Bases for Processing

Where the laws of the European Economic Area, United Kingdom, or another jurisdiction require a legal basis, we rely on one or more of the following:

You may withdraw consent at any time through the relevant in-game privacy controls, consent form, device or platform settings, or by contacting us. Withdrawal does not affect processing that occurred before withdrawal.

6. Advertising, Attribution, and Analytics

Some Games are supported by advertising. Advertising and analytics partners may process device identifiers, advertising identifiers, IP address, approximate location, app events, ad interactions, consent signals, and fraud-prevention data.

Rush Protocol analytics and attribution

Rush Protocol uses Firebase Analytics, Firebase Remote Config, Cloud Firestore, GameAnalytics, Adjust, and the Meta SDK. Depending on consent, platform settings, and availability, these services may process an app-instance or installation identifier, advertising identifier, masked IP address and approximate location, device and app information, sessions, first opens, acquisition source, and gameplay and advertising events.

Gameplay events may include onboarding variant and progress, level starts and results, gates reached, Lane-mode crates destroyed, boss attempts and results, rewarded-ad choices, ad impressions and revenue, and in-game upgrade interactions. Adjust is used for install attribution and campaign measurement and may receive level completion, tutorial completion, ad-revenue, and purchase events. GameAnalytics advertising-ID tracking and automatic managed error submission are disabled in the current Rush Protocol implementation.

Rush Protocol advertising

Rush Protocol uses CAS.AI to mediate rewarded and interstitial advertisements from participating ad networks. Advertising partners may process device and advertising identifiers, IP-derived approximate location, ad impressions, clicks, rewards, consent choices, campaign information, and fraud-prevention signals. The available partners can vary by country, device, ad availability, and the choices shown in the consent interface.

Contextual and personalized ads

• Contextual ads are selected using information such as the Game, general region, device type, or the content being viewed.
• Personalized ads may use information about activity across apps, websites, or services to select ads more likely to be relevant.

Personalized advertising is used only where permitted by law and platform rules and, where required, after obtaining consent. Choices may be available through a consent screen, the Game's privacy settings, iOS or Android privacy controls, the platform account, or the advertising provider's controls.

Sale or sharing under U.S. privacy laws

CGDealers Ltd does not sell personal information in exchange for money. However, certain disclosures to advertising or measurement partners may be treated as a "sale," "sharing," or targeted advertising under some U.S. state privacy laws. Where such laws apply, eligible users may request to opt out using available in-game privacy controls or by contacting us.

7. Purchases and Subscriptions

Purchases are generally processed by the platform or storefront through which you obtained the Game, such as Apple, Google, Steam, a console network, or a web payment provider. We normally receive transaction confirmation and purchase metadata, but not your complete payment-card number or banking credentials.

Rush Protocol currently offers a non-consumable Remove Ads purchase through Google Play Billing using Unity In-App Purchasing 5.4. Purchase processing can include the product ID, product name, price, currency, transaction or receipt identifier, purchase status, and the device or installation identifiers needed to complete, confirm, restore, measure, and protect the transaction. Rush Protocol sends the product ID, revenue, currency, and transaction ID to Adjust for purchase measurement and duplicate prevention. Firebase Analytics may also record in-app purchase events automatically.

Unity states that Unity In-App Purchasing 5.4 may process an email address ephemerally for app functionality, and may process personal or player identifiers, installation and session identifiers, country or approximate location, device information, purchase history, crash logs, diagnostics, and performance information for app functionality and analytics. Unity does not provide us with your complete payment-card or bank-account details.

Refunds, subscription cancellation, billing disputes, and payment-method management are usually handled by the relevant platform under its own terms and privacy policy. Deleting a Game account does not automatically cancel an active subscription managed by a platform.

8. Multiplayer, Chat, and User-Generated Content

Where a Game includes social features, information you choose to publish may be visible to other players. This can include your display name, avatar, score, rank, team, leaderboard position, public profile, chat messages, reactions, uploaded content, and gameplay activity.

We may process reports, moderation evidence, blocked-user relationships, chat metadata, and relevant content to investigate abuse, enforce rules, protect players, and comply with law. Automated filters may assist moderation, but may not identify every violation.

Do not share personal contact information, passwords, financial information, precise location, or other sensitive information in public or multiplayer features.

9. Cookies, Local Storage, and Similar Technologies

Web-based Games and websites may use cookies, browser storage, cache, pixels, SDKs, and similar technologies to remember settings, maintain sessions, save local progress, prevent fraud, measure performance, provide analytics, and support advertising.

Strictly necessary technologies may operate because they are required to provide or secure the Service. Where required by law, non-essential analytics or advertising technologies are activated only after consent. You can manage cookies through the consent tool, browser controls, or platform settings. Blocking storage may prevent certain features from working.

10. How We Share Information

We may disclose information in the following circumstances:

• Service providers and processors: Companies that provide hosting, databases, authentication, analytics, crash reporting, customer support, moderation, multiplayer infrastructure, payments, advertising, attribution, fraud prevention, or technical services on our behalf.
• Platforms and storefronts: Apple, Google, Steam, console networks, YouTube, web portals, social platforms, or other distributors as needed to provide the Game, validate purchases, support platform features, or comply with platform rules.
• Other players: Public profile, multiplayer, leaderboard, chat, team, clan, room, and user-generated content information that you choose to make available.
• Advertising and measurement partners: Where a Game uses ads, attribution, or campaign measurement, subject to consent, age, platform controls, and applicable law.
• Legal and safety disclosures: When reasonably necessary to comply with law, respond to lawful requests, protect rights and safety, investigate abuse, or enforce terms.
• Business transfers: In connection with a merger, financing, acquisition, sale of assets, restructuring, insolvency, or transfer of a Game, subject to appropriate protections and notice where required.
• With your direction or consent: When you request an integration, connect another service, join a promotion, or otherwise authorize disclosure.

We may also use and share aggregated or de-identified information that cannot reasonably be linked to an identifiable individual, subject to applicable law.

11. Third-Party Services and SDKs

Individual Games may use different technology providers. Only providers actually integrated into the Game you use apply to you. The Game's store privacy disclosure, consent screen, or Game-specific notice may identify additional providers.

Third parties may act as our processors, independent controllers, or joint controllers depending on the service and applicable law. Their own privacy policies govern processing they perform for their independent purposes.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Game, maintain account history and progress, protect security, prevent fraud, comply with legal obligations, resolve disputes, and enforce agreements.

After an account-deletion request is verified, associated personal data is deleted or anonymized unless retention is permitted or required. Unless a Game-specific notice states otherwise, deletion from active systems generally occurs within 30 days, while residual backup copies may remain for up to 90 days before being overwritten or isolated from normal use.

13. Account and Data Deletion

Rush Protocol

Rush Protocol does not currently offer a CGDealers account or require account registration. Gameplay progress and settings are primarily stored locally and can be removed by clearing the app's storage or uninstalling the Game. Google Play retains the purchase record needed to confirm and restore the Remove Ads entitlement under Google's own terms.

You may request access to or deletion of data associated with Rush Protocol analytics, attribution, advertising, or purchase measurement by contacting us below. Include the Game name, platform, approximate date of use, and any player, installation, Adjust, or advertising identifier that is available to you. Do not send passwords, payment-card details, or identity documents. We will verify the request and coordinate with the relevant provider where necessary. Some transaction, security, fraud-prevention, aggregated, or legally required records may be retained.

If a Game supports account creation, you may request deletion of the account and associated personal data. Where available, use the deletion option inside the Game's Settings, Account, Profile, or Privacy menu.

If the Game does not provide an in-game deletion option, or you cannot access the account, contact us using the button below. Include:

• The name of the Game.
• Your platform or storefront.
• Your player ID, account ID, or the email connected to the account.
• A clear statement that you request account and associated-data deletion.

What deletion normally includes

Subject to verification and legal exceptions, deletion may include account credentials, profile data, cloud progress, linked identifiers, friend relationships, messages, uploaded content, and other data associated with the account.

What may be retained

We may retain limited records where necessary for legal obligations, transaction records, fraud and abuse prevention, security investigations, dispute resolution, enforcement, protecting other users, or maintaining de-identified and aggregated statistics.

14. Your Privacy Rights

Depending on your location and subject to legal exceptions, you may have rights to:

• Know whether and how we process your personal information.
• Access or receive a copy of personal information associated with you.
• Correct inaccurate or incomplete personal information.
• Delete personal information.
• Restrict or object to certain processing.
• Withdraw consent at any time where processing is based on consent.
• Receive certain information in a portable, machine-readable format.
• Opt out of targeted advertising, sale, or sharing where applicable.
• Limit certain uses of sensitive personal information where applicable.
• Appeal a refusal to act on a request where local law provides that right.
• Not be discriminated against for exercising a privacy right.
• Lodge a complaint with a data protection or privacy authority.

We may need to verify your identity and authority before completing a request. We will use information submitted for verification only to process and document the request. Authorized agents may submit requests where permitted by law, but we may request proof of authorization.

European Economic Area and United Kingdom

You may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. Where we rely on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time.

California and other U.S. states

If applicable law covers our processing, eligible residents may have rights to know, access, delete, correct, opt out of sale or sharing, opt out of targeted advertising, limit certain sensitive-data processing, obtain portability, and receive equal service when exercising those rights.

15. Children's Privacy

Age requirements may differ by Game, platform, and country. Unless a Game's store listing or Game-specific notice expressly states that it is designed for children, our Games are intended for a general audience and are not directed to children under 13.

We do not knowingly collect personal information from a child under 13 without the notice and verifiable parental consent required by applicable law. If we learn that personal information was collected from a child in a manner that does not comply with applicable law, we will take reasonable steps to delete it.

Where a Game is designed for children or we know a player is a child, we may apply additional protections such as age gates, parental consent, restricted social features, reduced data collection, contextual advertising, and disabling personalized advertising.

A parent or guardian who believes a child has provided personal information improperly may contact support@cgdealers.com.

16. International Data Transfers

CGDealers Ltd and our service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, contractual and organizational protections, or another lawful transfer mechanism.

17. Security

We use reasonable technical and organizational measures designed to protect information, including access controls, authentication, encryption in transit where appropriate, logging, backups, provider security controls, and restrictions on internal access.

No online service, storage system, or method of transmission is completely secure. You are responsible for protecting your account credentials and for notifying us if you suspect unauthorized access.

18. Changes to This Privacy Policy

We may update this Policy to reflect changes to the Games, technology, providers, legal requirements, or business practices. We will update the effective date at the top of the page. Where required, we will provide additional notice through the Game, website, platform, email, or another appropriate method.

Your continued use of a Game after an updated Policy becomes effective means the updated Policy applies to future processing, but it does not replace consent where consent is legally required.

19. Contact Us

CGDealers Ltd
Privacy and Data Requests
Email: support@cgdealers.com

Please include the Game name, platform, player ID or account ID, and the nature of your request. Do not send passwords, complete payment-card details, or unnecessary identity documents.

Supervisory authority

Individuals in the European Economic Area may lodge a complaint with their local supervisory authority. CGDealers Ltd's lead national authority in Bulgaria is the Commission for Personal Data Protection .