Privacy Policy

Last updated: June 20, 2025

This Privacy Policy outlines our methods and practices regarding the gathering, utilization, and sharing of Your information when You engage with our Service. It also informs You of Your privacy rights and the legal protections afforded to You.

By engaging with our Service, You consent to our collection and use of Your personal data as described in this Privacy Policy, aimed at enhancing and delivering the Service.

Definitions And Interpretation

Interpretation

The terms with capitalized initial letters have specific meanings as defined below. These definitions apply consistently, whether the terms are used in the singular or plural form.

Definitions

For the purposes of this Privacy Policy:

You, Your – means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as You are the individual using the Service.

Company (referred to as either “Bonus Level”, “Bonus Level Ltd.”, "the Company", "We", "Us" or "Our" in this Agreement) refers to BONUS LEVEL LTD. Nikou & Despoinas Pattichi, 37, EVI COURT, 2nd floor, Office 202, 3071, Limassol, Cyprus, email address support@bonuslevel.eu.

For the purpose of the GDPR, the Company is the Data Controller.

Controller (“Data Controller”) – the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal data.

Joint Controllers – two or more Controllers jointly determine the purposes and means of processing the same Personal data.

Games – any game that the Company provides to You through Mobile App or other platforms or Websites.

Mobile App (“Mobile Application”) – any mobile application through which the Company grants access to some Games and/or provides any Service.

Website – any Bonus Level website through which We may grant access to Games and/or provide any Service. 

Service – any other service We provide to You through any Mobile App or any Website or any third party platform.

Account means a unique account created for You to access our Games and Service or parts of our Service.

Personal data is any information that relates to an identified or identifiable individual.

For the purposes for GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.

For the purposes of the CCPA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.

Service Provider – any natural or legal person who processes the data on behalf of Bonus Level. It refers to third-party companies or individuals employed by Bonus Level to facilitate the Service, to provide the Service on behalf of Bonus Level, to perform services related to the Service or to assist Bonus Level in analyzing how the Service is used.

For the purpose of the GDPR, Service Providers are considered Data Processors.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC. The GDPR imposes specific obligations on entities that perform operations on Personal data (whether on their own behalf or on behalf of another entity). It guarantees the exercise of Your data protection rights.

Game Currency – in-game virtual currency. 

Virtual Goods – in-game virtual items such as game virtual currency, boosters etc. 

Personal Data Controllers

The Controller of Your Personal data is Bonus Level Ltd., with its registered office at Nikou & Despoinas Pattichi, 37, EVI COURT, 2nd floor, Office 202, 3071, Limassol, Cyprus, email address support@bonuslevel.eu.

Facebook Ireland Limited and Bonus Level Ltd. are Joint – Controllers when it comes to operating of Our Facebook Fan Pages and using a Facebook technology which enables You to connect Your Facebook accounts to a Mobile App (Facebook Login). The Joint – Controller addendum can be found here

Collecting And Using Your Personal Data

Data Collection During Service Use

We utilize data to deliver our Services, enhance their functionality, personalize Your experience, and continuously improve our offerings. This data may be stored on our servers, those of our Service Providers, or directly on Your device.

When You interact with our Services, the Company may gather and log the information You provide, whether directly through the Services, or other third-party platforms. We collect information about You both directly from You and from third parties, and automatically through Your use of our Websites, Mobile Apps, or Services. We may also combine information from various sources.

Cookies, Mobile Identifiers, and Other Similar Technologies

Cookies

We collect Data about Your device and how You use our Games or Services, utilizing cookies, similar technologies, and mobile identifiers. These tools are primarily used to provide You with our Games and Services and to enhance their quality, to tailor recommendations to interests and serve targeted ads.

When You use the Service, Bonus Level along with our service providers and third parties, may deploy cookies on Your device. Cookies are small data files stored on Your device that are used primarily for record-keeping. These cookies may store information that is linked to Your personal data. Additionally, third-party advertisers might utilize cookies and other related technologies on Your device according to their own policies.

For details on how to opt out or disable cookies, please refer to the Your Personal Data Protection Rights section below.

Other Technologies

Alongside cookies, We, our service providers, and third parties, may use various tracking technologies such as (i) web beacons, which help us determine if a specific page has been visited or if an email has been opened; and (ii) tracking pixels, which assist us and our advertising partners in recognizing Your devices across different services and devices, enhancing the efficiency of ad campaigns.

For analytics and demographic insights, we employ tools like Facebook Audience Insights and Firebase Analytics, among others.

Local Storage on Mobile Devices

The Android and iOS versions of the App store a small amount of data directly on your device to ensure continuous, high-performance gameplay. Depending on the platform, this data is saved in Android SharedPreferences / internal files / SQLite databases or in iOS NSUserDefaults / sandboxed files / Core Data.

This locally stored data never leaves your device unless expressly stated elsewhere in this Policy. You can clear it at any time:

Removing the App deletes this local data. Any cloud-synchronised data (where applicable) will remain unless you request its deletion under the relevant sections of this Privacy Policy.

Types of Personal Data Collected and Processed, the Purposes, and Legal Bases

While using our Mobile Apps, visiting our Websites, playing our Games, or utilizing other Services We offer, We collect and process only the Personal data necessary to provide You with the Service. The types of information collected may vary based on the activity and the specific Game You play.

Purpose of Data Collection and Processing

Data Type

Legal Basis for Data Collection and Processing

Identifying if You are a minor or adult to apply the correct data protection measures and comply with legal processing requirements.

Age Classification (21 or older)

This processing is crucial for adherence to legal obligations, as specified in Article 6(1)(c) of the GDPR. Regulation (EU) 2016/679 by the European Parliament and of the Council from 27 April 2016 focuses on the protection of natural persons regarding personal data processing and the free movement of such data.

Establishing and Managing an In-Game Account

Required data types

User ID

Your Device’s Unique Identifier (UDID)

Country

Internet Protocol (IP) address

 

Necessity for the performance of a contract to which You are party or in order to take steps at Your request prior to entering into a contract (Article 6 (1)(b) of GDPR);

Providing Access to Service (providing access to the content of the Games and Services) 

Information about Your use of Our Games or Services, such as Your game progress, scores, session durations and times, achievements, in-app purchases, and interactions with game features and other players.

Crash information including crash logs, stack traces, and device specifications (iOS only).

Necessity for the performance of a contract to which You are party or in order to take steps at Your request prior to entering into a contract (Article 6(1)(b) of GDPR) 

Analyzing Your activity within our Games or Services to optimize performance, tailor gameplay and offers to Your preferences, conduct marketing activities, deliver personalized ads, and detect fraud.

IP address or other location data,

language,

time zone,

type of Your computer or mobile device,

platform type (like Apple iOS or Android),

operating system version,

network information, like mobile carrier,

Mobile device’s identifiers, like Your Device’s Unique Identifier (UDID), Your MAC Address, Apple Identifier For Advertising (IDFA), Android Advertising ID (AAID), App Set ID and/or Google Advertising ID (GAID), and/or International Mobile Equipment Identity (IMEI);

browser type and language,

referring and exit pages and URLs,

the number of clicks on a page or feature,

domain names,

landing pages,

pages viewed and the order of those pages,

the amount of time spent on particular pages,

product preferences, privacy preferences or other users’ choices.

The status of the game and the specific dates and times of Your activities within the game.

Data about Your use of Our Games or Services, such as Your game progress, scores, session durations and times, achievements, in-app purchases, and interactions with game features and other players.

Crash information including crash logs, stack traces, and device specifications.

We might connect this information with Your social network ID and/or Game Player  ID.

Your consent (Article 6(1)(a) of GDPR)  

Necessity for the performance of a contract (Article 6(1)(b) of GDPR).

The Company's legitimate interest (Article 6(1)(f) of GDPR) involves analyzing Our players’ behavior to improve and optimize our Services, including offering Service that is free to play.

Fulfilling a submitted purchase order and providing the Virtual Goods

User ID

Transaction  Information

Necessity for the performance of a contract (Article 6(1)(b) of GDPR)

Sending direct marketing communications or conducting satisfaction surveys to maintain our relationship with You. We may reach out to You with direct marketing messages via Mobile App, or push notifications.

Device push tokens

Legitimate interest pursued by Bonus Level (Article 6(1)(f) of GDPR) consisting of conducting marketing activities and satisfaction surveys    

Managing our social media profiles to keep You updated on our activities, games, and services, as well as to promote various events, services, and products.

When You visit our social media profiles (such as Facebook, YouTube, Instagram), We use Your personal data solely for the purpose of maintaining and managing these profiles.

Personal data You share publicly on the respective social media platform

The legitimate interest pursued by the Company (Article 6(1)(f) of GDPR) involves promoting its own brand.

Managing complaints

Your name

Email address

User ID

Subject of the complaint 

Content of the complaint

Necessity for the performance of a contract (Article 6(1)(b) of GDPR)  

Managing data subject requests

Your name

Email address

User ID

Subject of the request 

Content of the request

Legal duty (Article 6(1)(c) of GDPR)  

Managing other requests and applications  

Your name

Email address

User ID

Subject of the request 

Content of the request

The legitimate interest pursued by Bonus Level (Article 6(1)(f) of GDPR) includes responding to inquiries related to its business activities. For data provided optionally, the legal basis for processing is consent (Article 6(1)(a) of GDPR).

Improving Services quality

Data about Your use of Our Games or Services, such as Your game progress, scores, session durations and times, achievements, in-app purchases, and interactions with game features and other players.

Data regarding Your activities on the Mobile App and Websites

Interactions with our support team, along with any extra Data shared during those communications, to provide assistance and improve our Games and Services.

The Bonus Level's legitimate interest (Article 6(1)(f) of GDPR) involves analyzing Your activities on the Mobile Apps and Websites to enhance the functionalities You use.

Personal Data Retention

We retain Your Personal data only for as long as necessary for the purposes outlined in this Privacy Policy. Your data is used to fulfill legal obligations, resolve disputes, and enforce agreements and policies.

Usage data is kept for internal analysis and is generally retained briefly unless it is used to enhance security or functionality, or if We are legally required to retain it longer.

The duration of data processing may be extended if necessary to establish, assert, or defend against legal claims. After the end of the processing period, the data is irreversibly deleted or anonymized.

We process Your personal data for the following purposes:

Transfer of Personal Data

Data Transfer for EU Residents

If You are a resident of the EU, please note that when You use our Games or Services, Your Personal data may be processed outside of European countries, such as in the United States, and possibly other countries. When We transfer, store, and use Personal data collected in European countries outside of these regions, We comply with Our legal obligations and ensure that Your Personal data is subject to appropriate safeguards (such as encrypted communication or the use of Standard Contractual Clauses) or transferred to "approved" territories with adequate protection equivalent to EU standards. We are responsible for Your Personal data and strive to protect it diligently.

International Data Transfer

We may transfer Your Personal data to third parties located in various countries. When transferring Your personal data internationally, We take reasonable steps to ensure that Your data is treated securely and in compliance with legal requirements.

Handling Concerns and Complaints

If You have any questions, concerns, or complaints regarding Bonus Level's handling of personal data or compliance with safeguards related to transfers outside European countries, You can contact our Data Protection Officer (see contact details in section “Contact Us”). If Your complaint is not resolved through these channels, an additional binding arbitration option may be available to You.

Personal Data Sharing

We may share Your Personal data with third parties or allow third parties to collect this information from our Games or Services as described below.

We ensure that any third party with whom We share Your Personal data provides the same level of protection as outlined in this Privacy Policy.

 

Security Measures

We share Your Personal data if necessary for safety, security, or compliance with the law. Your Personal data and the contents of all Your online communications in Our Games and between You and Bonus Level may be accessed and monitored as needed to provide our Games and Services and may be disclosed:

Service Providers and Other Third Parties

In connection with providing Games and Services, Your Personal data may be disclosed to external entities such as, service providers and vendors responsible for IT system maintenance, payment operators, and entities related to Bonus Level.

With Your consent, We might also use and share Your Personal data with some trusted advertising network companies to tailor advertisements to Your interests. The list of such advertising network companies and their privacy policies can be found here and may be updated from time to time.

Additionally, We may share Your personal data with other third parties or allow them to collect Your information from our games or services in ways not specifically described in this Privacy Policy if We have Your consent.

Only designated Service Providers have access to Your Personal Data, strictly for carrying out their duties. We share Your details with specified categories of recipients under GDPR's legal frameworks detailed in Sections 6(1)(b), 6(1)(c), and 6(1)(f).

Main Service Features

We may use third-party service providers to offer main and additional features of our service.

Playfab

We use Playfab to support ongoing service development. This provider stores Your in-game progress, achievements, and logs Your activity. For more information, see Playfab's Privacy Policy https://playfab.com/privacy and Terms of Service https://playfab.com/terms/ .

Zoho Desk

Provided by Zoho Corporation Pvt. Ltd., We use Zoho Desk for customer support. For details, see Zoho Desk's Privacy Policy: https://www.zoho.com/privacy.html.

Analytics

We may use third-party service providers to monitor and analyze the use of our service.

To facilitate our processing, We utilize data processors such as server hosting providers, technical service providers for supporting internal operations, user login services, and analytics service providers.

Devtodev

Provided by Devtodev Ltd. For more information, see their Privacy Policy page: https://www.devtodev.com/policy/ and Data Processing Addendum page: https://www.devtodev.com/dpa/.

Facebook Analytics

Facebook Analytics is provided by Facebook. For more information on what type of information Facebook Analytics collects, please visit their Privacy Policy page: https://www.facebook.com/about/privacy/

AppsFlyer

Provided by AppsFlyer Ltd. For more information, see their Privacy Policy page: https://www.appsflyer.com/privacy-policy/.

Firebase

Firebase, a service developed by Google Inc., is used by our Services both for collecting analytics data and for sending push notifications. See their Privacy Policy page: https://policies.google.com/privacy.

Bugsnag

We use Bugsnag (SmartBear Inc.) solely for crash reporting and device integrity checks. The categories of data and purposes match the “Crash Reporting / App functionality & security” row in the data-purpose table above. In short, Bugsnag receives stack traces, app- and device-metadata and a boolean jailbreak/simulator flag. It never receives user identifiers, payment data or precise location.

Crash logs are transmitted over TLS to Bugsnag’s EU-based servers and are not used for advertising or profiling.

For more information on what type of information Bugsnag collects, please visit their Privacy Policy page: https://smartbear.com/privacy/.

App Tracking Transparency (ATT) Consent

To comply with Apple’s App Tracking Transparency (ATT) framework, the iOS version shows a system prompt asking whether you allow the App “to track your activity across other companies’ apps and websites.” If you tap “Ask App Not to Track”, the App does not access the IDFA and does not combine your data for personalised ads. You can modify this choice at any time in Settings → Privacy & Security → Tracking.

iOS App Permissions

Advertising

We work with trusted advertising network companies through AdMob mediation. The following advertising partners are integrated in this build via AdMob mediation and may receive your advertising ID and other device information for the purpose of serving personalized ads:

AdMob by Google

AdMob by Google is provided by Google Ireland Limited.

Opt-Out: You can opt out of AdMob by following the instructions provided by Google: https://support.google.com/ads/answer/2662922?hl=en.

More Information: To learn how Google uses the collected data, visit: https://policies.google.com/technologies/partner-sites or view the Google Privacy Policy.

Chartboost

Chartboost is provided by Chartboost, Inc. Used only via AdMob mediation.

Opt-Out: You can opt out of Chartboost by following the instructions on their Privacy Policy page: https://answers.chartboost.com/hc/en-us/articles/200780269.

More Information: For more details, visit the Chartboost Privacy Policy: https://answers.chartboost.com/hc/en-us/articles/200780269.

Facebook Audience Network

Facebook Audience Network is provided by Facebook. Used only via AdMob mediation.

Opt-Out: You can opt out of Facebook Audience Network by following the instructions on their Privacy Policy page: https://www.facebook.com/about/privacy/.

More Information: For additional information, see the Facebook Privacy Policy: https://www.facebook.com/about/privacy/.

Mintegral

Mintegral is provided by Mintegral International Limited. Used only via AdMob mediation.

Opt-Out: You can opt out of Mintegral targeted advertising by following the instructions provided on their Privacy Policy page: https://www.mintegral.com/en/privacy.

More Information: For additional details, visit the Mintegral Privacy Policy: https://www.mintegral.com/en/privacy.

Unity Ads

Unity Ads is provided by Unity Technologies. Used only via AdMob mediation.

Opt-Out: You may opt out of personalized ads served by Unity by following the instructions provided in Unity's Privacy Policy. Typically, this involves adjusting your device-level privacy and advertising preferences (for example, selecting "Limit Ad Tracking" on iOS devices or opting out of "Interest-Based Ads" on Android devices).

More Information: For additional details, please review the Unity Privacy Policy: https://unity3d.com/legal/privacy-policy.

Vungle (Liftoff)

Vungle (now Liftoff) is provided by Liftoff Mobile, Inc. Used only via AdMob mediation.

Opt-Out: You can opt out of targeted advertising from Liftoff by following the instructions provided on their Opt out page.

More Information: For additional details, please review the Liftoff Privacy Policy: https://liftoff.io/privacy-policy/.

InMobi

InMobi is a service provided by InMobi Pte Ltd. You may opt out of InMobi's services by following the instructions available on their Opt-Out page: http://www.inmobi.com/page/opt-out/

More Information: For detailed information regarding InMobi's privacy practices, please refer to their Privacy Policy: http://www.inmobi.com/privacy-policy/

Pangle

Pangle is a service provided by TikTok Pte. Ltd.

More Information: For detailed information about Pangle's data practices and privacy policies, please refer to their Privacy Policy: https://www.pangleglobal.com/privacy.

Android Advertising ID (Android version only)

Our application may collect and use your Android Advertising ID (AAID) for advertising purposes. The Android Advertising ID is a user-resettable, unique identifier provided by Google Play services. It gives users better controls and provides developers with a simple, standard system to continue to monetize their apps.

Opt-Out for Android Users: You can reset your Android Advertising ID at any time by going to: Settings → Google → Ads → Reset advertising ID. Additionally, you can opt out of personalized advertising by enabling "Opt out of Ads Personalization" in the same settings menu. Please note that opting out of personalized advertising does not mean you will no longer receive ads, but they may be less relevant to your interests.

Identifier for Advertisers (IDFA – iOS version only)

The iOS build may collect and use your Apple Identifier for Advertisers (IDFA) for personalised advertising, attribution and fraud-prevention, but only after you have granted permission via the ATT prompt. You can reset the IDFA or disable tracking in Settings → Privacy & Security → Tracking. Opting out does not remove ads, but the ads shown will be non-personalised.

The use of the disclosed information by these recipients will not be covered by this Privacy Policy. If You have any questions regarding how these third parties process Your data, You should review their respective privacy policies.

 

Behavioral Remarketing

The Company uses remarketing services to advertise on third-party websites to You after You visit Our Service. We and Our third-party vendors use cookies to inform, optimize, and serve ads based on Your past visits to Our Service.

Google Ads (AdWords)

Google Ads (AdWords) remarketing service is provided by Google Inc.

Opt-Out: You can opt out of Google Analytics for Display Advertising and customize Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads.

More Information: For more details on Google's privacy practices, visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Facebook

Facebook remarketing service is provided by Facebook Inc.

Interest-Based Advertising: Learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950.

Opt-Out: To opt out of Facebook's interest-based ads, follow these instructions: https://www.facebook.com/help/568137493302217.

Self-Regulatory Principles: Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising established by the Digital Advertising Alliance. You can also opt out from Facebook and other participating companies through the Digital Advertising Alliance in the USA: http://www.aboutads.info/choices/, the Digital Advertising Alliance of Canada in Canada: http://Youradchoices.ca, or the European Interactive Digital Advertising Alliance in Europe: http://www.Youronlinechoices.eu/, or by using Your mobile device settings.

More Information: For more details on Facebook's privacy practices, visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation .

Payments

We may offer paid products and/or services within the Service. In such cases, We may use third-party services for payment processing (e.g., payment processors).

We do not store or collect Your payment card details. This information is provided directly to our third-party payment processors, whose use of Your personal information is governed by their Privacy Policy.

Apple Store In-App Payments

Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/en-ww/.

Google Play In-App Payments

Their Privacy Policy can be viewed at https://www.google.com/policies/privacy/.

Your Personal Data Protection Rights

The Company is committed to respecting the confidentiality of Your Personal Data and ensuring You can exercise Your rights. If You are within the EU, You have the following rights under this Privacy Policy and by law:

You have the right to know what categories of Your Personal Data We collect and who it is shared with.

Right to Access: You can request access to Your Personal Data. You can view, update, or request deletion of Your Personal Data directly within Your account settings under “Support” section. If You are unable to perform these actions Yourself, please contact Us for assistance. This right also allows You to receive a copy of the Personal Data We hold about You.

Right to Correction: You have the right to request correction of any incomplete or inaccurate Personal Data We hold about You.

Right to Object: You can object to the processing of Your Personal Data if We are relying on a legitimate interest as the legal basis for Our processing, and there is something about Your particular situation that makes You want to object. You also have the right to object if We are processing Your Personal Data for direct marketing purposes.

Right to Data Portability: You can request the transfer of Your Personal Data to You or a third party in a structured, commonly used, machine-readable format. This right only applies to automated information You initially provided consent for Us to use or where We used the information to perform a contract with You.

Right to Withdraw Consent: You can withdraw Your consent to use Your Personal Data at any time. To withdraw Your consent, open the application’s Main Menu and select the Withdraw Consent option under the “Support”. Please note that if You withdraw Your consent, We may not be able to provide You with access to the Service.

Right to Erasure: You can request the deletion or removal of Your Personal Data when there is no good reason for Us to continue processing it.

Data Export for Android Users

In accordance with both GDPR requirements and Google Play's User Data policies, you can request an export of your personal data in a machine-readable format. To initiate this process:

  1. Send an email request to privacy@bonuslevel.eu with the subject "Data Export Request"
  2. Include your User ID (found in the Support section of the game) and the email address associated with your account
  3. Specify which data you would like to export (game progress, purchase history, etc.)

We will process your request within 30 days and provide your data in a common, machine-readable format (such as JSON or CSV). This exported data will include all personal information we store about you, with the exception of data we are legally required to retain for other purposes.

Delete Your Account

To delete Your Account and associated data, please send a request to privacy@bonuslevel.eu. Include the following in Your email with the subject line: “Delete My Account”:

Alternatively, You can send this email from within the Game by navigating to the “Delete My Account” section under “Support” in the main menu.

Providing this information helps us process your request quickly and accurately. We will start the deletion process after verifying your account and may contact you for additional details. Once complete, all game progress and virtual items will be permanently removed and cannot be recovered. No refunds or compensation will be provided for unused virtual items.

Note that some of our Games do not create an account for You, so there may be no Account to delete in those cases.

Managing Data Collection

You can manage all aspects of data collection and usage from Your device or third-party applications by visiting the "Settings" and following the instructions of such applications, mobile devices, or web browsers to check access permissions.

Opt-Out of Push Notifications

Push notifications are alerts sent to Your mobile device, even when the Game is closed. To disable these notifications, go to Your mobile device's “Settings”.

Specifically for Android Users

For Android users, you can manage push notifications by following these steps:

  1. Open your device Settings
  2. Tap on Apps or Application Manager
  3. Find our application
  4. Tap on Notifications
  5. Toggle the notifications on/off or manage specific notification channels

Alternatively, you can disable push notifications directly from our app by navigating to Settings → Notifications within the application.

Opt-Out of Facebook Messages

To stop receiving messages from our Game pages on Facebook, adjust Your settings through Facebook’s “Settings”.

Opt-Out of Third-Party Personalized Advertisements

For more information about personalized advertising and how to opt-out, You can visit the following websites:

These opt-out tools are managed by third parties, not by Us. We do not control these tools or the options provided by advertisers through them.

To opt-out of personalized in-app advertisements on Your mobile device, adjust the ad tracking settings in Your device's settings. You can also reset the “Advertising Identifier” (such as IDFA) from Your device’s settings, which will stop the use of existing behavioral data linked to the previous identifier.

Depending on Your platform provider (like Apple or Google), You might be able to download apps such as the Digital Advertising Alliance’s “AppChoices” app, which gives You control over the collection and use of cross-app data for tailored advertising. Similar to the web opt-out tools, these mobile tools are provided by third parties and not controlled by Us.

Please note that even if You opt out of personalized advertising, You may still receive non-personalized ads from us and third parties within our Games.

Opt-Out of Cookie Tracking

Note: the following cookie controls apply only when you visit our websites; the mobile App itself does not use browser cookies.

You can configure Your web browser to alert You when cookies are being placed on Your device or to restrict the types of cookies allowed.

Please note, disabling cookies might affect the functionality and features of our Service, as cookies are essential for providing the Service.

On our websites that utilize cookies, You can also set Your preferences by using the cookie banner or clicking on the "Cookies Settings" link.

Do Not Track

Please be aware that we currently do not respond to Do Not Track signals, regardless of whether the signal is received from a computer or a mobile device.

Exercising Your Data Protection Rights

You may exercise Your rights of access, rectification, cancellation, and opposition by contacting Us. Please note that We may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond as soon as possible.

You may contact us in the following manner:

You also have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority.

Right to Object to Processing for Direct Marketing

You have the right to object at any time to the processing of Your Personal Data for direct marketing purposes, including profiling related to such direct marketing. When You object to processing for direct marketing purposes, We will no longer process Your Personal Data for these purposes. To exercise this right, You may use any of the contact methods provided in the "Exercising Your Data Protection Rights" section below or utilize the opt-out mechanisms provided in our marketing communications.

Children's Privacy

The App is intended only for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from anyone under 21. If you are a parent or guardian and believe a person under 21 has provided Personal Data, please contact us so we can delete it promptly.

Age Gate. When the App is opened for the first time, an age-verification prompt appears. By tapping Accept, the user confirms that they are 21 years of age or older and that they have read and agreed to the App’s Terms of Use and Privacy Policy. Selecting Decline immediately blocks access and deletes any temporary data generated before this confirmation.

Links to Other Websites and Services

Our Service may feature links to external sites not operated by us. Clicking on a third-party link will direct You to that site. We strongly advise reviewing the Privacy Policy of each site You visit. We do not control and are not liable for the content, privacy policies, or practices of any third-party sites or services.

Data Security

We store Personal Data on secure servers  and comply with international security standards. All Personal Data is treated as confidential by those with access, and We limit access to only those who need it. Regular audits and internal controls ensure our measures comply with international security standards and internal procedures.

Protecting Your Personal Data is a priority for us, but no method of digital transmission or storage is completely secure. Despite our efforts to use industry-standard measures, We cannot guarantee absolute security.

Contact Us

We have a Data Protection Officer (the “DPO”), who is the person at Bonus Level Ltd. responsible for all matters related to data protection and privacy matters. The DPO is the designated contact for data protection issues for Bonus Level Ltd. You can reach Bonus Level’s DPO at the following address: 

Data Protection Officer, BONUS LEVEL LTD., Nikou & Despoinas Pattichi, 37, EVI COURT, 2nd floor, Office 202, 3071, Limassol, Cyprus;

Email: privacy@bonuslevel.eu

Please be sure to include Your name or Your User ID or address and email address in any correspondence to us so that We can respond to Your inquiry in a timely manner. 

U.S. RESIDENTS SUPPLEMENT

While We treat all our users equally, this section offers additional insights into how We handle personal information for players residing in the United States. Terms used here have the same meanings as elsewhere in this policy, and "You" refers to both players and visitors to our Websites, Games or other Services. 

Our Services might gather details that identify, relate to, describe, reference, are reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a specific consumer, household, or device (“personal information”) as outlined below.

Personal information does not include publicly available information or deidentified or aggregated consumer information.

We DO NOT (i) sell Your personal information; (ii) knowingly collect, sell, or share personal information of users under 13 years of age; (iii) collect, sell, disclose, or share sensitive personal information. By sensitive personal information, We mean data on race or ethnic origin, religious beliefs, genetic data, biometric data, health data, sexual orientation, philosophical beliefs, the contents of a consumer’s mail, email, text messages that are not directed to us, and personal data from a known child under 13 years of age.

Categories of Personal Information Collected

The following categories of Personal Information We collected within the last twelve (12) months, along with the sources of collection and the business purposes for collection, are detailed in the list below.

Category of Personal Information

Categories of Sources

Identifiers, for example: real name, alias, unique personal identifier, online or advertising identifier (ex. device numbers, ADFA, GAAID etc.), IP address, device or WiFi location.

  • Players
  • Players' Devices
  • Service Providers including Internet Service Providers, Data Analytics Providers, Advertising Networks, Operating Systems and Platforms
  • Social Networks

California Customer Records(Cal. Civ. Code 1798.80(e)) such as address, name.

  • Players
  • Service Providers
  • Social Networks

Protected Classification Characteristics, such as age and gender.

  • Players
  • Service Providers
  • Social Networks

Commercial Information, such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

  • Players
  • Service Providers including Data Analytics Providers, Operating Systems and Platforms
  • Social Networks

Internet/Network Information, such as website or application or advertisement browsing history, information regarding a consumer’s interaction with an internet website, application, or advertisement.

  • Players
  • Players' Devices
  • Service Providers including Internet Service Providers, Data Analytics Providers, Advertising Networks, Operating Systems and Platforms

Geolocation Data, IP address, device shared location, and Wi-Fi connection location.

  • Players
  • Players' Devices
  • Service Providers including Internet Service Providers, Data Analytics Providers, Advertising Networks, Operating Systems and Platforms

Inferences such as derivation of information, data, assumptions, or conclusions from any of the above categories of personal information..

  • Players
  • Players' Devices
  • Service Providers including Internet Service Providers, Data Analytics Providers, Advertising Networks, Operating Systems and Platforms
  • Social Networks

Business Purposes 

We may use and/or disclose the Personal Information We collect for one or more of the following business or commercial purposes:

Disclosure of Personal Information 

In the last twelve (12) months, We have disclosed the following categories of Personal Information: Identifiers, California Customer Records (Cal. Civ. Code 1798.80(e)), Protected Classification Characteristics, Commercial Information, Internet/Network Information, Geolocation Data, and Inferences.

As outlined in the Privacy Policy, We share Personal Information with various recipients for business and commercial purposes. Besides the categories of recipients identified in the Privacy Policy, We disclose Personal Information to, or grant access to Personal Information by, the following categories of recipients:

We may also share Personal Information with Your social network friends, other users, and successor organizations in the event of Bonus Level’s sale, merger, acquisition, etc.

Bonus Level does not "sell" Personal Information about our players in the conventional sense. However, We may permit certain third-party advertising partners to gather information about consumers via our games and website. This is done to provide more relevant ads, measure ad campaign performance, conduct analytics, and detect and report ad fraud. If this practice could be construed as a "sale" under the CCPA, please refer to our Opt-Out section below for more details (Right to Opt-Out of Sale of Personal Information – Do Not Sell My Info).

Online Advertising

Below are the categories of Personal Information We may sell for business purposes, including those potentially sold in the past twelve (12) months.

When serving You personalized video ads, We may sell identifiers such as resettable identifiers provided by Your mobile device’s operating system to ad networks, social media companies, and other third-party businesses in the ad ecosystem. Common resettable advertising IDs include GAID (Android) and IDFA (Apple), which are considered Personal Information under the CCPA. These third parties may use Your Personal Information:

These third parties may use this Personal Information for their own commercial purposes per their own privacy policies, which might include sharing this information with additional third parties, including other advertising networks.

Financial Incentives

In certain financial incentives offered on select Games, We may provide You with Virtual Currency or other Virtual items across our various Games. These items and currency are virtual, hold no monetary or cash value, and cannot be used outside of the respective Game. For more information, please refer to our Terms of Service.

Financial Incentive

Categories of Personal Information Collected

How to Opt-In to the Financial Incentive

In-game ads

Identifiers, Internet or other electronic network activity information, Commercial information, Location Data, Inferences drawn

Watch in-game video ads that may be presented to You

In-game personalized ads

Identifiers, Internet or other electronic network activity information, commercial information, location data, inferences drawn 

Consent to be served with ads that are tailored to Your personal information and to sharing Your personal information with ad networks, social media companies and other third-party businesses

Reviews about the game

Identifiers, location data, inferences drawn

Follow the instructions that may be presented to You to submit a review about the game, or rate the game, in an application store such as Google Play.

You have the right to opt-out of the financial incentive at any time. For instance, You can decide not to watch in-game advertisements. Additionally, You may submit a consumer request as outlined below.

Your Rights and Choices  

Right to Know

You have the right to request disclosure of specific information regarding our collection and use of Your Personal Information over the past twelve (12) months. Once We receive and verify Your consumer request, We will provide You with the following details:

Right to Deletion

Upon receiving a verifiable request from You, We will:

However, please be aware that We may not be able to delete Your Personal Information if it is necessary to:

Right to Opt-Out of Sale of Personal Information – Do Not Sell My Info

You have the right to opt-out of the sale of Your Personal Information. As previously mentioned, We do not "sell" Personal Information about our players in the traditional sense. However, since some practices may be interpreted as a "sale" under the CCPA, You have the rights described below.

To exercise Your right to opt-out, please submit a request by contacting us at privacy@bonuslevel.eu.

If You decide to opt-out, You can change Your mind and revoke Your request at any time by contacting us at privacy@bonuslevel.eu .

If You do not wish to receive interest-based in-application advertisements on Your mobile device, You can adjust the ad tracking settings on Your device (such as enabling “Limit Ad Tracking”). Additionally, You can reset the “Advertising Identifier” (such as an IDFA) from Your mobile device’s settings, which will prevent the continued use of existing behavioral data linked to Your previous “Advertising Identifier.” For instructions on limiting ad tracking on iOS devices, follow the link to Limit Ad Tracking. To opt out of personalized ads on Android devices, follow the link to Opt-out of Personalized Ads.

To prevent third parties from delivering personalized web and mobile web advertising, You may also visit the opt-out tools provided by the Network Advertising Alliance and the Digital Advertising Alliance, or download apps like the Digital Advertising Alliance’s “AppChoices” app, which offer controls regarding the collection and use of cross-app data for behavioral advertising.

These opt-out tools are provided by third parties, not Bonus Level. We do not control or manage these tools or the options that advertisers and others offer through them.

Right to Non-Discrimination for the Exercise of Your Privacy Rights

If You choose to exercise any of Your rights, We will not treat You any differently. This means we cannot deny goods or services to You, charge different prices or rates, provide a different level or quality of goods or services, or suggest that You will receive different treatment based on Your exercise of privacy rights.

Right to Designate an Authorized Agent to Submit Requests on Your Behalf

You may be allowed to use an authorized agent to submit requests on Your behalf, if You provide sufficient information to show that the requestor is an authorized agent with written permission to act on Your behalf and You verify Your identity with us.

Shine the Light

You have the right to request information once per calendar year regarding our disclosures of specific categories of Personal Information to third parties for their direct marketing purposes. To make such a request, please use the methods described below.

How to Exercise Your Rights

You may submit a verifiable consumer request to exercise Your right to know and right to deletion by:

The verifiable consumer request must:

We will verify Your request by matching identifying information You provide with the Personal Information We already maintain. We may use existing account authentication methods if applicable. We take all reasonable precautions to verify Your identity. Requests are evaluated based on the individual and information category. We cannot respond to Your request if We cannot verify Your identity or authority. No account creation is required to make a verifiable consumer request. Some requests may require additional Personal Information to verify Your identity. Verification may be done by email or other methods.

We will confirm receipt of Your request within ten (10) business days and explain how We will process it. We aim to respond within forty-five (45) calendar days. If more time is needed, We will inform You of the reason and extension period. Disclosures will cover the twelve (12) months preceding the request

Minors Under Age 16

As described in our Privacy Policy, we do not knowingly collect or share personal data about children.

Changes to this Privacy Policy

We may periodically update our Privacy Policy. We will notify You of changes by updating the date at the top of this policy. For significant changes, We will provide specific notice or obtain Your renewed consent as required. We encourage You to review our Privacy Policy regularly. Changes become effective when posted on this page.

Google Play's Data Safety

In accordance with Google Play's Data Safety requirements, we provide the following additional information for users of our Android applications:

Android App Permissions

Our Android application requires the following permissions to function properly:

You can review and manage most of these permissions through your device settings at any time.

Controlling Your Android Advertising ID

Our app uses your Android Advertising ID (AAID) for advertising purposes. You can reset this identifier or opt out of personalized ads at any time:

  1. Open your device Settings
  2. Go to Google → Ads
  3. To reset your advertising ID, tap "Reset advertising ID"
  4. To opt out of personalized ads, enable "Opt out of Ads Personalization"

Note that opting out of personalized ads doesn't mean you'll stop seeing ads, but they may be less relevant to your interests.

Types of Data Collected and Shared

Our application may collect and potentially share the following types of data:

Data Security Practices

We implement the following practices to ensure your data is secure:

Data Deletion

You can request deletion of your account and associated personal data by following the procedures outlined in the "Delete Your Account" section of this policy. For Android users, this process will delete data stored on our servers, but may not remove data stored locally on your device. To ensure complete data removal, you may need to uninstall the application.

Independent Verification

The data safety practices outlined in this Privacy Policy have not been independently verified by a security assessment firm.

App Updates and Data Collection

When our Android application is updated through Google Play Store, we may collect additional diagnostic information about the update process to ensure it completes successfully. This may include information about your device model, Android version, and app version. This information is used solely for optimizing the update process and troubleshooting any issues that might occur during updates. The collection of this data is compliant with Google Play's policies on data collection.

Any changes to data collection practices resulting from app updates will be reflected in updates to this Privacy Policy, and significant changes may require renewed consent.

Code Integrity & Compatibility

Our application uses the official AndroidX Multidex support library solely to enable compatibility with older Android versions that do not support a single DEX file above 65K methods. The additional code files (e.g., classes2.dex, classes3.dex, etc.) are bundled within the original APK and are loaded locally. No external code is ever downloaded or executed at runtime.

We do not use any dynamic code loading from remote sources, reflection-based code execution, or script interpreters. This ensures full compliance with Google Play’s Executable Code policy.