Privacy Policy

Last updated: October 11, 2026

This Privacy Policy describes how Ade Rizki Wahyudi ("Koentji", "we", "us" or "our") collects, uses, shares and protects personal data when you use The Cats Royale and our other games, websites and related services (together, the "Service"). It also explains your rights and how to exercise them.

Please read it together with our Terms of Service. If you do not agree with this policy, please do not use the Service.

1. Who we are and how to contact us

Ade Rizki Wahyudi, Indonesia, is the data controller responsible for your personal data. For any privacy question or request, contact our privacy team at support@koentji.games (subject: "Privacy"). The fastest way to reach us about your game account is through in-game Settings › Help & Support.

2. The data we collect

2.1 Data you give us

• Account data: player name, avatar and frame you choose; if you sign in with Google or Apple, the account identifier and the email address the provider shares with us (Apple users may hide their email with "Hide My Email").
• Support communications: the content of messages you send us, your email address and any attachments.

2.2 Data collected automatically

• Identifiers: user ID, player ID, Firebase installation identifiers and, only if you allow it, your advertising identifier (IDFA on iOS, Advertising ID on Android).
• Game data: progress, cards, deck, virtual currency balances, missions, achievements, battle and Arena results, match history and timestamps of game actions.
• Purchase data: product purchased, price tier, store transaction ID and date. Payments are processed by Apple or Google; we never receive your card or bank details.
• Device and network data: device model, operating system and version, app version, language, platform, IP address and approximate (country-level) location derived from the IP address.
• Integrity signals: results of app and device integrity checks (Google Play Integrity, Apple App Attest) used to detect modified clients and cheating.
• Advertising data: whether a rewarded ad was offered, watched and completed.

2.3 Data from partners

• Sign-in providers (Google, Apple) confirm your identity.
• App stores (Apple, Google) confirm purchases and refunds.
• Our advertising partner (Google AdMob) confirms that a rewarded ad was completed.

We do not collect precise location, contacts, photos, camera or microphone data. The Service contains no chat, and we do not use third-party analytics or crash-reporting tools.

3. Why we use your data and our legal bases

We do not use your data for automated decisions that produce legal or similarly significant effects on you. Our anti-cheat systems may flag suspicious activity automatically; account actions are reviewed before they become permanent, and you may contest them by contacting us.

4. Who can see your data

• Other players: your player name, avatar, frame, player ID, Arena rank, crowns and deck in matches and profiles.
• Service providers that process data on our behalf under contract and our instructions:
  • Google Firebase (Authentication, Cloud Firestore, Cloud Functions, App Check) for hosting and servers. Our database and servers are in the Google Cloud asia-southeast2 (Jakarta, Indonesia) region.
  • Photon by Exit Games for real-time multiplayer connections.
• Advertising partner: Google AdMob, which acts as an independent controller for ad delivery and measurement. See how Google uses data from apps that use its services.
• Platforms: Apple and Google for sign-in, purchases and integrity checks, under their own privacy policies.
• Authorities: when required by law, to respond to valid legal process, or to protect the rights, safety and property of players, us or others.
• Business transfers: a successor entity if Koentji is involved in a merger, acquisition or sale of assets. This policy will continue to apply.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising except through the AdMob consent described in section 7.

5. International data transfers

Our primary servers are in Indonesia. Our service providers may process data in other countries, including the United States, the European Union and Singapore. Where we transfer personal data from the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses and our providers' data processing terms. Transfers from Indonesia follow the requirements of Law No. 27 of 2022 on Personal Data Protection (UU PDP).

6. How long we keep your data

• Active accounts: for as long as your account exists.
• Inactive guest accounts (not linked to Google or Apple): deleted automatically after 90 days without a login.
• Deleted accounts: profile, progress, inventory, battle, Arena and purchase records stored in your account are deleted immediately when you delete your account.
• Records kept after deletion: your account ID with the deletion date, and store transaction IDs of past purchases, to prevent fraud and duplicate purchase claims, for as long as reasonably necessary for that purpose.
• Support emails: up to 2 years after the conversation ends.
• Server logs: up to 30 days, unless needed longer to investigate abuse.

We may keep data longer where the law requires it or to establish, exercise or defend legal claims.

7. Advertising and your choices

The Service shows ads only when you choose to watch a rewarded ad. Before personalized ads are shown, we ask for your consent where required by law (for example in the EEA, UK and Switzerland) through Google's consent message. On iOS we use your advertising identifier only if you allow tracking through Apple's App Tracking Transparency prompt.

You can change these choices at any time:

• iOS: Settings › Privacy & Security › Tracking.
• Android: Settings › Google › Ads (reset or delete your Advertising ID).
• Contact us to re-display the consent message.

If you refuse, you will still be offered ads, but they will not be personalized.

8. Your rights

Depending on where you live, you have the right to:

• Access your personal data and receive a copy in a portable format;
• Correct inaccurate data (you can change your player name and avatar in the game);
• Delete your data (see how to delete your account);
• Object to or restrict processing based on legitimate interests;
• Withdraw consent at any time, without affecting earlier processing;
• Lodge a complaint with your data protection authority, for example an EU/EEA supervisory authority, the UK ICO, or the Indonesian personal data protection authority.

To exercise a right, email support@koentji.games with your Player ID (Profile screen). We may ask you to verify that you own the account. We respond within 30 days, or within the shorter period required by local law, for example 72 hours for certain requests under UU PDP. We will not discriminate against you for exercising your rights.

9. Security

All traffic between the app and our servers is encrypted with TLS. Access to our systems is restricted and authenticated. Game economy and rewards are calculated on our servers, and requests are protected by app integrity checks. No method of transmission or storage is 100% secure. If a personal data breach occurs that is likely to affect you, we will notify you and the competent authority as required by law.

10. Children

The Service is not directed to children under 13. In the EEA and the UK, players under 16 (or the lower age set by local law) need consent from a parent or guardian. In Indonesia, players under 18 need it. We do not knowingly collect personal data from children under 13 and do not show them personalized ads.

If you are a parent or guardian and believe your child has provided us personal data without your consent, contact us. We will delete the data and the account.

11. Additional information for residents of certain U.S. states

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another state with a comprehensive privacy law:

• Categories collected in the last 12 months:
  • identifiers (user ID, advertising ID, IP address);
  • commercial information (purchase records);
  • internet or network activity (gameplay and ad interactions);
  • approximate geolocation (from the IP address);
  • inferences limited to game balance and fraud prevention.
• Sources and purposes: as described in sections 2 and 3.
• No sale: we do not sell personal information.
• Sharing for targeted advertising: sharing your advertising ID with AdMob for personalized ads may count as "sharing" for targeted advertising. To opt out, disable tracking or reset your Advertising ID as described in section 7, or email us with the subject "Do Not Share". We honor Global Privacy Control signals where technically possible.
• No sensitive personal information is collected.
• Your rights to know, access, correct and delete your data can be exercised as described in section 8. An authorized agent may submit a request on your behalf with your written permission. If we deny your request, you may appeal by replying to our decision.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date shows when it was last revised. If we make material changes, we will notify you in the game or by other appropriate means before the changes take effect.

13. Contact

Ade Rizki Wahyudi
Indonesia
Email: support@koentji.games