This policy explains what personal data the GudangGames mobile app
(Android package id.co.lds.bandargames) and its services collect,
why, who it is shared with, and the choices you have. GudangGames
is operated by PT KI89 ("we", "us"), which is
the controller of your personal data under Indonesia's Personal Data Protection
Law (Law No. 27 of 2022).
In short
- We collect what you give us (your account, profile, posts, comments and messages) and what the app needs to work (sign-in tokens and a push notification token).
- We do not show ads, sell your data, or use third-party analytics or advertising trackers.
- Your profile, posts and comments are public to other users. Your private messages are visible only to the people in the conversation, subject to the moderation described below.
- You can ask us to delete your account and its data at any time — see Deleting your account.
1. Data we collect
Information you give us
- Account details — your name, email address and, if you sign in with an email address, a password (stored only as a one-way hash).
- Google Sign-In — if you choose "Continue with Google", Google shares your name, email address, Google account identifier and profile picture with us. We do not receive your Google password or access to your other Google data.
- Profile — username, bio, location (a free-text field you fill in yourself; we do not use your device's location), profile photo, accent colour and the game you are currently playing.
- Content — posts, comments, likes, friend requests and friends list, and messages you send in chat.
- Photos — when you choose to set a profile photo, the app opens your camera or photo gallery at your request and uploads only the photo you pick. The app has no ongoing access to your photos.
- Reports and blocks — the reason and note you submit when reporting content or a user, and the list of users you have blocked.
- Settings — your notification preferences.
Information collected automatically
- Sign-in tokens — a token that keeps you signed in, stored on your device and on our server, with the time it was last used.
- Push notification token — if you allow notifications, Firebase Cloud Messaging gives the app a device token which we store with your account so we can deliver chat and news notifications. It identifies the app installation, not you personally.
- Game activity — when a game is opened we increase that game's public play counter. This counter is not linked to your account.
- Technical logs — like any web service, our servers record IP addresses, request times and error details in logs used for security and troubleshooting.
- On your device — the app stores your sign-in token and a few preferences locally so you stay signed in.
We do not collect your precise or approximate location, contacts, call logs, SMS, advertising ID, or payment information.
2. How we use it
- To create and run your account and let you sign in.
- To show your profile, posts and comments to other users, and deliver your messages.
- To send the notifications you have switched on (new messages, news). You can turn these off in the app or in your device settings.
- To keep the community safe: text you post, comment or send in chat is automatically checked for abusive language and spam before it is published, and blocked text is logged so we can review how the filter behaves. Reported content is reviewed by our moderators.
- To secure the service, prevent abuse, fix problems and comply with the law.
Our legal bases are performing our agreement with you (the Terms of Service), our legitimate interest in keeping the service secure and safe, your consent (for notifications and photo uploads, which you can withdraw at any time), and legal obligations.
3. What other users can see
- Public to everyone using the app, including people who are not signed in: your name, username, bio, location, profile photo, accent colour, the game you are playing, game statistics on your profile, and your posts, comments and like counts.
- Visible only to conversation participants: your chat messages and whether you have read them.
- Never shown to other users: your email address, password, Google account identifier, device tokens, notification settings, reports you make, and your block list. A blocked user is not told that you blocked them.
4. Who we share it with
We do not sell or rent personal data. We share it only with:
| Recipient | What and why |
|---|---|
| Google (Google Sign-In) | If you use Google to sign in, Google handles the sign-in and gives us your basic profile. Google Privacy Policy. |
| Google Firebase Cloud Messaging | Delivers push notifications. It receives your device token and the notification text (for example, the sender's name and a preview of a message). Firebase privacy information. |
| Hosting and infrastructure providers | Store and serve our servers, database and files on our behalf, under contracts that limit their use of the data. |
| Authorities | When required by law, or when necessary to protect the safety of our users or the public. |
| A successor | If GudangGames is merged or transferred, under this policy or one that protects you at least as well. |
Some of these providers process data outside Indonesia. Where they do, we rely on their contractual and technical safeguards to protect it as required by applicable law.
Games and links from third parties
Some games in the catalogue are hosted by their own developers and open inside the app. Those games, and any external links, are governed by their own privacy policies; we do not control what they collect. We do not pass your account details to them.
5. Security
Data between the app and our servers is sent over encrypted connections (HTTPS/TLS). Passwords are stored as one-way hashes, access to production systems is restricted to staff who need it, and uploaded game files are kept in protected storage. Chat messages are encrypted in transit but are not end-to-end encrypted, which is what allows reported messages to be reviewed. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.
6. How long we keep it
- Account, profile, posts, comments, likes, friendships and messages: for as long as your account exists.
- Push notification tokens: until you sign out, the token stops working, or your account is deleted.
- Sign-in tokens: until you sign out or your account is deleted.
- Reports and moderation records: for as long as needed to keep the community safe and handle disputes. When an account is deleted, these records are detached from it.
- Server logs: for a limited period for security, then deleted.
7. Deleting your account
You can ask us to delete your GudangGames account and its associated data at any time:
- Email hello@example.com from the email address linked to your account, with the subject "GudangGames account deletion".
- Include your username so we can find the account. We may ask you to confirm the request.
- We delete the account within 30 days and confirm by email.
What is deleted: your account and profile, profile photo, posts, comments, likes, chat messages, friendships, block list, reports you made, notification settings, device tokens and sign-in tokens.
What may be kept: moderation records and reports that other users made about your content, detached from your account, where needed for safety or legal reasons; and data in encrypted backups until those backups expire in their normal cycle. Anonymous game play counts are not personal data and are not affected.
You can also ask us to delete specific data without deleting your account, using the same address.
8. Your rights
Subject to applicable law, you have the right to be informed about how we use your data, to access and obtain a copy of it, to correct it, to have it deleted, to withdraw consent, to object to or restrict certain processing, and to lodge a complaint with the relevant authority. You can edit most of your profile directly in the app. For anything else, contact us at hello@example.com; we reply within the time the law allows.
9. Children
GudangGames is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it. Users between 13 and the age of majority in their country should use the app with the permission of a parent or guardian.
10. Changes to this policy
We may update this policy. The date at the top shows when the current version took effect. If a change materially affects how we use your data, we will notify you in the app or by email before it applies.
11. Contact
PT KI89
Email: hello@example.com
Website: https://ki89.co.id
If this policy and its Indonesian version differ, the Indonesian version prevails.