Privacy Policy

The short version

• You can play as a guest. The game creates an account for you from an identifier your phone gives the app. You can add Sign in with Apple or Google to keep your progress on a new phone. We never ask for your real name, phone number or payment card.
• We keep your game data on our servers: your player name, friends, coins, items, ranked points, season pass progress and a record of the online games you play, so the game works and stays fair.
• Chat at online tables is filtered for offensive words and kept for 90 days. You can mute, block and report players.
• Most technical event data is deleted after 90 days. Game records and coin records are kept until you delete your account.
• Crash reports go to Sentry with your name, chat and email stripped out. You can turn them off in Settings.
• Ads are optional. You only see a video ad when you tap "Watch ad". Google AdMob serves it and asks for your consent where the law requires it. We never give Google your account ID.
• Purchases are handled by Apple. We never see your card. We keep a record of each purchase to deliver it, handle refunds and meet tax rules.
• We don't sell your information, and we don't use it for marketing.
• You can delete your account in the app: Settings › Account › Delete account.

1. Who we are

Baida 百搭麻雀 ("Baida", "the game") is made by Baida Gaming of Ontario, Canada ("we", "us"). We are responsible for the personal information described here.

• Email: support@baidagaming.com
• Post: Baida Gaming, 570 Hood Road, Unit 14 #1697, Markham, ON L3R 4G7, Canada

Baida Gaming is a business name of Pacioli Technologies Inc.

2. Your account and signing in

• Guest account. The first time you open the game it creates an account for you. To recognise your phone next time, the app uses an identifier your phone's system provides to apps: on iPhone and iPad the "identifier for vendor", on Android the Android ID. If the phone gives none, the app makes a random one. The app saves it and sends it to our server when it signs in. It is not your advertising identifier.
• Account details on our server: a random player ID, a username, your player name, and when the account was created and last changed. The app keeps a sign-in session token on your phone.
• Sign in with Apple (iPhone and iPad). We receive Apple's identifier for your Apple account in our app. We don't ask Apple for your name or email. We keep a token Apple gives us, so that we can cancel the app's access to your Apple account when you unlink Apple or delete your account, as Apple requires.
• Sign in with Google. We receive Google's identifier for your Google account. Google's sign-in can also include your name, email address and profile picture; our server does not keep them.
• Linking and switching. Adding Apple or Google to a guest account keeps your progress. If you sign in to an account you already have, the game switches to that account and the guest account on the phone is deleted (accounts are never merged). We record when a sign-in method is linked or unlinked.
• Email sign-in is not available today. If we add it, we will update this policy first.

3. Player name, avatar and friends

• Player name. You choose it. Other players see it. It is checked against a list of offensive words and refused if it matches. If a name breaks our rules, our team can change it (we keep a record when we do). Your username is unique, is used to add friends, and starts as the name you first chose or a random one.
• Avatar. Your avatar picture is drawn by DiceBear (api.dicebear.com), an avatar service. Our server gives each account a random avatar code that is not your name or player ID, and the app sends DiceBear only a scrambled (hashed) form of it plus the avatar style. Like any website, DiceBear sees your phone's IP address. Pictures are then saved on your phone. The avatar style, colour and cosmetic items you equip are part of your profile.
• Friends. Friend requests you send and accept, your friends list, and whether you are online (your friends can see this). Game invites carry your player name, player ID and the room, and are not kept after they are delivered.
• Blocked players. Your list of blocked players (up to 100) is kept on our server so it works on any phone.

4. Games, coins, season pass and replays

• Coins and items. Your coin balance, the items you own and equip, and a record of every coin change (amount, new balance, the reason such as a game, ad, mission or purchase, and the time). Daily counters enforce coin limits.
• Progress. Ranked points and season rank, game statistics (games, win rate, best hands), missions, saved fan presets and promo codes you redeemed.
• Season pass and XP. Your XP, the tiers you have claimed, the last 20 XP gains and the daily and weekly XP limits. Owning the paid pass is recorded as a purchase (section 10).
• Game records. For every online game our server records every move: each tile drawn and discarded, claims, kongs and wins, the tiles in each hand, the order of the wall, the random seed used to shuffle it, the scores, the player IDs of the people at the table, and the room settings. We use it to run replays, check disputed results, catch cheating, fix bugs and balance the game. Other players' tiles and the wall are never sent to anyone during a game.
• Solo games. When you are signed in and online, the app sends the record of the solo games you played so our server can check them and award coins and XP. We keep the latest 20 per account.
• Replays. After an online game ends, the people who played it can watch a replay of it. They see your player name and your moves. By default each player sees what their own seat saw plus the hands shown at the end of each round; a server setting can show every hand. Replays never show player IDs, the shuffle seed or the wall, are never available while the game is being played, and nobody can replay a game they weren't in.
• What other players can see. Your player name, avatar, equipped items, seat, chat, moves and results at a table; your player card (games, win rate, best hands, rank and look); your name, player ID, points and tier on the season leaderboard; your name in the room list when you host a room; and community win conditions you publish, with your name.

5. Game events and diagnostics

To keep the game running, find bugs and balance the economy, the app and our servers record events such as: game results, discards and claims, the steps of a store, purchase, pass or ad, settings that had to be adjusted, connection problems, offline sync, ranked results and coin changes. Each event carries your player ID, a random ID for that app session, the time, the release channel (test or live) and the game or match ID. Events don't include your device model, phone number, location or advertising ID.

These events go only to our own servers. The app contains no third-party analytics or advertising-attribution tools.

Our servers also keep technical logs (for example web server and game server logs) that include IP addresses, player IDs and error details.

How long: event data and logs are deleted after 90 days. Two kinds are kept until you delete your account, because the game needs them: the game records of online games (section 4) and coin records.

6. Crash reports

If the game crashes or hits an error, the app can send a crash report to Sentry (Functional Software, Inc., USA), a crash-reporting service. A report contains technical details of the error and your device (such as model, system version and memory), the app version, the screen you were on, game IDs and the last few steps before the crash. Instead of your player ID it carries a one-way scrambled (hashed) code. Before it leaves your phone, the app removes player names, chat, email addresses, IDs and sign-in tokens, and it never attaches screenshots or logs. Sentry sees the IP address the report comes from.

You can turn this off at any time: Settings › Send crash reports (on by default). Sentry keeps reports for up to 90 days.

7. Chat, reports and moderation

• Chat exists only at online tables. You can send quick phrases at any time, and typed messages (up to 200 characters) after you have finished 3 online games. Our server checks each message against a list of offensive words: matching words are hidden with asterisks (*), and some messages are not shown at all.
• What we keep: each message, with your player ID, player name, seat, the time and the game, including the original text before filtering. Kept for 90 days.
• Improving the filter: when a message comes close to a filtered word, we keep up to 3 short snippets (80 characters at most, already filtered, without player IDs) for 90 days.
• Mute, block and report. Mute hides a player's chat for the rest of that game, on your phone only. Block hides their chat in every game and stops their invites and friend requests. Report sends us the player, a reason and, from a table, the recent chat around it (up to 40 messages with names and player IDs), which our server copies from its own record. Our team reviews reports. Reports are kept for 2 years after the case is closed.
• Chat bans. If someone breaks the chat rules, we can stop them typing chat for 24 hours, 7 days, 30 days or permanently. They can still play and use quick phrases. We keep a history of warnings, bans and appeals with the account.
• Please don't share personal information in chat.

8. Bug reports and contacting us

• Report a problem (Settings › About › Report a problem) sends us your message (up to 2,000 characters), a screenshot of the screen you were on, the app version, platform and release channel, the screen, game and match IDs, and for a solo game the record of that game. Our server adds your player ID and username. The screenshot can show other players' names and chat. No screenshot is taken while a private screen is open.
• Reports and screenshots are stored on our server. Our team also tracks each report as an issue in our private GitHub repository (GitHub, Inc., USA); that issue holds the message, your username and player ID and the technical details, but not the screenshot or the game record.
• One year after a report is resolved (or one year after it was sent, if it never became an issue), we delete your player ID, username, platform, the screenshot and the game record, and delete the GitHub issue. We keep the technical description without anything that identifies you.
• Contact us (Settings › About › Contact us, or email support@baidagaming.com). The email the app prepares has the build number and the first 8 characters of your player ID in its subject, so we can find your account. We then have your email address and whatever you write. We keep support emails as long as we need them to answer you and to keep a record of the request.

9. Rewarded ads (Google AdMob)

• When: only when you tap "Watch ad", in the store or to double your coins at the end of a round. There are no ads during play.
• Consent first. Before any ad is loaded, Google's consent tool asks for your choices where the law requires it (for example in the EEA and the UK). On iPhone and iPad, Apple's tracking prompt asks whether Google may use your advertising identifier; if you say no, it isn't used, and your rewards don't change. Where it is required, you can change your choices any time under Settings › Ad privacy options.
• What Google collects. When an ad is requested or shown, Google may collect information such as your IP address, device and app information, your advertising identifier (only if you allowed it), approximate location from your IP address and how you interact with the ad, and use it under its own policies: How Google uses information from apps that use its services and the Google Privacy Policy. Ads are limited to teen-rated content.
• What we send Google: only a one-time random code for that ad. We never give Google your player ID. When the ad finishes, Google's server confirms it to ours with that code, a transaction ID, the ad unit, the ad network and the reward. We keep that confirmation with your account to make sure each ad pays out once, until you delete your account. The short-lived codes are deleted within about a day.

10. Purchases (Apple)

• Everything you can buy is cosmetic (tile sets, joker designs, frames, the season pass). Nothing for sale affects your draws, results or rank.
• Purchases go through Apple's App Store. Apple handles payment; we never see your card or billing details.
• What we keep: Apple sends the app a signed record of each purchase. We check it and keep: the transaction IDs, the product, the purchase date, the App Store country, the price and currency, whether it was a test purchase, and the account it belongs to. Apple tells us about refunds, and we remove the refunded item; repeated refunds (2 within 90 days) pause purchases on the account for 90 days.
• Restore Purchases (in the store) brings your purchases back to your account using your Apple ID; the app also restores quietly after you sign in. A purchase can move to a different account of yours at most once every 30 days. Family Sharing is not supported.
• After you delete your account we keep the purchase records, without the link to your account, for refunds, tax and accounting.
• Purchases on Google Play are not available yet.

11. Kept only on your phone

The app also stores on your phone: your settings (language, text size, sound, chat mode, crash-report choice and similar), the sign-in session and device identifier, a copy of your coins and items, the history of games played on the phone, unsent bug reports and events, and cached avatar pictures. Uninstalling the app deletes them. Deleting your account (section 17) clears the account's data from the phone too; settings stay.

12. What we don't collect

We don't ask for your real name, phone number, postal address, birthday or payment details. The app doesn't access your precise location, contacts, camera, microphone or photos. Apart from Google's ad software and Sentry's crash reporting, it contains no third-party analytics, tracking or attribution software. Anything you type into your player name, chat or a bug report is up to you.

13. How we use information

• To run the game: accounts, sign-in, online tables, friends, coins, items, purchases, the season pass, ranking, replays.
• To keep play fair and safe: filtering chat and names, reviewing reports, chat bans, catching cheating and coin farming, paying each game, ad and purchase once, daily limits.
• To fix and improve the game: events, game records, crash reports, bug reports and logs.
• To show rewarded ads and pay the reward, with your consent where the law requires it.
• To meet legal duties (for example tax records and lawful requests) and to protect players and us.

We do not sell your personal information, rent it, or use it for marketing. People, not machines, decide on reports and bans; the word filter only hides words.

14. Who can see or receive it

• Other players: what section 4 lists, plus your chat at a table.
• Our team: only the people who run and support the game, through access-controlled tools.
• Service providers that help us run the game, each for its own part:
  • Our hosting provider (today Oracle Cloud Infrastructure): hosts our servers and databases.
  • Apple: Sign in with Apple, App Store purchases and refunds.
  • Google: Sign in with Google, rewarded ads and ad consent.
  • Sentry (Functional Software, Inc.): crash reports.
  • DiceBear: avatar pictures.
  • GitHub, Inc.: bug-report tracking (no screenshots).
  • Cloudflare, Inc.: hosts this website.
  • Our email provider: support email.
• Legal reasons: when the law requires it, or to protect the rights, property or safety of our players, the public or us.
• If the business changes hands, your information may move to the new owner, who must respect this policy.

15. Where it is stored

Our game servers and databases are located in North America (Canada and/or the United States). Today they run on Oracle Cloud Infrastructure in Toronto, Canada. Database backups are kept on that server and in one restricted copy under our control. Your information may also be processed by our service providers (Apple, Google including AdMob, Sentry, Cloudflare, Oracle Cloud and GitHub) wherever they operate, including the United States.

This means your information may be stored and processed outside the place where you live, including outside Hong Kong. The laws there may differ from yours, and authorities there may be able to access it under their laws. We choose providers that protect data and limit what we send them.

16. How long we keep it

Anything subject to a legal claim or request is kept until it is resolved.

17. Deleting your account

In the app: Settings › Account › Delete account. The game asks you to confirm it's you (sign in with Apple or Google again; a guest needs nothing more), then to type DELETE (or 刪除). Finish or leave any online game first. Deletion can't be undone; afterwards the game starts you as a new guest.

Can't open the app? Email support@baidagaming.com from an address we can reply to, with your player name, your platform and roughly when you started playing. We'll check the account is yours before we delete it.

Deleted: your account and sign-in methods, player name, avatar code, friends and blocked list, coins and items, coin records, ranked points and stats, missions, season pass, saved presets, synced solo games, ad confirmations, your chat messages, reports made against you, your chat-ban history, and the parts of your bug reports that identify you (with their GitHub issues). Online games in which you were the only real person are deleted. Items bought with real money are removed and not refunded; Restore Purchases with the same Apple ID can bring them to a new account.

Kept without your name:

• In other players' replays your seat shows as "Deleted player", with a random code that differs in every game so the games can't be linked. The moves stay, because they belong to the other players' games too.
• Community win conditions you published stay, credited to "Deleted player".
• Reports you filed stay, with you removed.
• Purchase records stay without the link to you, for refunds, tax and accounting.
• We keep a record that a deletion happened, without your player ID.

Apple: if you used Sign in with Apple, we also cancel the game's access to your Apple account. If that can't be done (for example from an older account), remove Baida in your iPhone's Settings › [your name] › Sign-In & Security › Sign in with Apple.

Timeline: your account is deleted at once; the rest of our server data within about 15 minutes; game records are checked again after 24 hours; crash reports expire within 90 days (or we delete them sooner on request); copies in backups disappear as the backups expire (section 16).

On your phone: the account's data is cleared; your settings stay. Uninstall the app to remove everything.

18. Your rights and choices

• In the app: change your player name; mute, block or report players; turn crash reports off; change your ad choices (Settings › Ad privacy options, where offered) or simply don't watch ads; delete your account.
• On your phone: on iPhone, Settings › Privacy & Security › Tracking controls tracking for each app. On Android, the Google settings let you reset or delete your advertising ID.
• Ask us. You can ask to see the personal information we hold about you, get a copy, correct it, or delete it, and you can withdraw consent you gave (for example for personalised ads). Email support@baidagaming.com with your player name, platform and roughly when you started playing. We may ask for more to confirm the account is yours. We aim to answer within 30 days and will tell you if we need longer or can't do something, and why.
• Canada. As a Canadian company we follow Canada's private-sector privacy law, PIPEDA. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
• Hong Kong. If you are in Hong Kong, the Personal Data (Privacy) Ordinance gives you the right to ask for a copy of your personal data and to have it corrected. You can send those requests to the email above. You can also contact the Office of the Privacy Commissioner for Personal Data. We don't use your personal data for direct marketing.
• Elsewhere: the laws where you live may give you similar rights. Contact us and we'll help.

We won't treat you differently for using your rights.

19. Children

Baida is not made for children and we don't knowingly collect personal information from children under 13. You must be at least 13 to play, or older if the age rating in your app store says so. On the App Store the game is rated 13+. Players earn in-game coins by playing. Coins are never bet or wagered, and they can't be bought, sold, transferred or cashed out. There is no real-money gambling. We don't ask your age. If you think a child under 13 has given us personal information, contact us and we'll delete it.

20. Security

We use encrypted connections between the app and our servers; only our server can change coins, items, ranks and purchases; hidden game information never leaves the server during a game; admin tools are on a private network and limited to our team; and secret keys are kept out of the app and our code. No system is perfectly secure, but we work to protect your information and fix problems quickly. If a breach puts you at real risk of significant harm, we will tell you and the authorities as the law requires.

21. This website

baidagaming.com is a plain website hosted by Cloudflare. It uses no cookies, analytics or ads, and loads nothing from other companies. It remembers your language choice in your browser only. Like any website host, Cloudflare handles your IP address to deliver the pages and protect them from attacks.

22. Changes to this policy

We'll update this policy when the game changes. We'll change the effective date at the top, and tell you in the app or on the store listing before important changes take effect.

23. Contact

Baida Gaming · 570 Hood Road, Unit 14 #1697, Markham, ON L3R 4G7, Canada · support@baidagaming.com

If the English and Chinese versions differ, the English version applies.