Golden Plinko Privacy Policy
Effective October 16, 2026. Operated by Beijing Shenma Matrix Technology Co., Ltd. Contact: 15600090002@163.com.
Information we process
Local progress and settings remain on your device until you connect cloud saving. When connected, we process a pseudonymous account identifier derived using HMAC from your authenticated identity, your device identifier, consent records, account generation, progress, virtual balances, unlocks, random queues, save versions, and up to the latest 100 synchronization ledger batches. Android cloud saving and the web deletion page use Sign in with Google. We verify Google-signed ID tokens, use the stable Google account subject to derive your pseudonymous identity, and discard the token and profile claims after verification. We do not store your Google name, email address or profile photo. Apple Game Center identity verification uses the signed identity fields supplied by Apple, including the player identifier, bundle identifier, timestamp, salt, signature and public key URL.
App store reviewers may use a dedicated review account with separate cloud progress and the same gameplay rules. Review login credentials authenticate access and are not retained in game account data.
Cloud features also process Lotto tickets, outcomes, claims and reward records; advertisement intents, verification receipts and transaction identifiers; and limited diagnostic and administrative audit events. Requests to our hosting and SDK providers may include IP addresses and technical device or network information.
Purposes and service providers
We use this information to authenticate accounts, save and restore progress, deliver requested rewards, prevent duplicate claims, maintain service security and diagnose failures. Vercel hosts the service, Neon PostgreSQL is the authoritative database, and Upstash Redis supports caching, rate limiting and sessions. Sessions expire after seven days. Diagnostic events are limited to 5,000 recent entries and expire after seven days without new entries.
Advertising-enabled international Android versions use Pangle Global for rewarded video and, where supported by this game, banner advertising. Availability depends on your region and the installed version. The separate China advertising integration uses the ByteDance CSJ SDK. Android advertising identifiers are handled subject to Android permissions and your device privacy settings. We do not request Android location permission for Pangle; approximate location is inferred from IP addresses.
The international iOS 1.0 (11) build has advertising disabled. iOS builds supporting remote advertising configuration request Pangle rewarded ads only when the service enables advertising, the region is eligible, and the actual system-permission state has been resolved. These requests use non-personalized settings. Without App Tracking Transparency authorization, the game does not use IDFA or permit cross-app tracking. A disabled SDK does not request advertisements. Ad availability and successful filling are not guaranteed.
When an advertising SDK is active, it may process user or request identifiers where supplied, device and advertising identifiers subject to permission, IP-derived approximate location, device model, operating system, language, network details, advertising interactions, advertisement-related crash and performance information, and other technical advertising data. These data may be used for advertising, analytics, app functionality, security and fraud prevention. Pangle describes its SDK data practices in its Google Play data disclosure, App Store data disclosure, and privacy policy. Advertising data is encrypted in transit. The SDK is activated only where the app and service permit advertising; regions whose required consent flow is unavailable remain disabled. Apple tracking permission is requested before any tracking that requires it.
Storage and international processing
Cloud account and progress records are retained while needed to provide your account and requested features. After deletion, we retain minimal pseudonymous account tombstones and account generations to isolate expired sessions. Short-lived deletion retry receipts have a 600-second expiry and confirm an already completed deletion after a lost response. Advertisement transaction anti-duplication records retain only the necessary provider and transaction identifiers without account or reward-intent associations. Hosting, database and advertising providers may process information in countries outside your own under their applicable arrangements. Their independent retention periods are governed by their policies; we do not assign them a fixed retention period here.
Your choices and deletion
You can disconnect cloud saving to stop new uploads, export cloud data, or delete the cloud account in game settings. Android players and dedicated account reviewers can also delete their cloud account on the web without installing the app. Account deletion clears cloud progress, consent, reward state, linked receipts and account diagnostics, including scoped migration copies. Minimal account tombstones isolate expired sessions and anonymous transaction identifiers prevent repeated rewards. A deletion retry receipt stores a hash of the old session token and its account generation for up to ten minutes to confirm a completed deletion if its response is lost. Device progress remains until you clear it in the app or remove the app. Contact us to request access, correction or deletion, or to raise a privacy concern. We may verify account ownership before acting.
Age requirement and changes
Golden Plinko is intended for adults aged 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a person under 18 has provided information so we can investigate and delete it. We publish material policy changes on this page and request additional consent when required.