Privacy Policy

Bonfire Gathering Co., Ltd. and its affiliates recognize the importance of privacy and are dedicated to safeguarding your personal information. This Privacy Policy outlines how we collect, use, disclose, transfer, store, and process your personal data when you access our website, game applications, or services (collectively referred to as “Services”). We encourage you to review this Privacy Policy carefully to understand our privacy practices before using our Services or sharing your personal data.

Data Controller: Bonfire Gathering Co., Ltd. (hereinafter referred to as “we”, “us” or “Bonfire Gathering”) are the joint controllers of your personal data processed in connection with this Privacy Policy.

This Privacy Policy will help you understand the following:

A. General Provisions
  I. How We Collect and Use of Your Personal Data
  II. How We Use Cookies and Similar Technologies
  III. How We Disclose Your Personal Data
  IV. How Your Personal Data Is Transferred Globally
  V. How Long We Keep Your Personal Data
  VI. How We Protect Your Personal Data
  VII. Your Rights Regarding Your Personal Data
  VIII. How We Process Children’s Personal Data
  IX. Third-Party Websites
  X. How This Privacy Policy is Updated
B. Contact Us

In addition to this Privacy Policy, certain Services may be subject to specific privacy policies. When applicable, we will provide you with the relevant Privacy Policy.

The general provisions of Section A shall apply to you, regardless of your location.

A. General Provisions

I. How We Collect and Use Your Personal Data

Personal data includes any information that can directly or indirectly identify, relate to, describe, or be associated with a specific individual or household. The type of personal data we collect depends on how you interact with us, your selected privacy settings, and the features and Services you use.

You may choose to provide personal data to us directly, and in most cases, you have the discretion to decide which information to share. However, certain personal data may be necessary for us to deliver our Services. If you choose not to provide such data, we may be unable to fulfill your request or provide specific features.

We collect and process your personal data using the following methods and for the purposes outlined below, including providing and enhancing our Services and ensuring the security of your account.

1. Registration and login services. To facilitate your registration and login to our Services, we require you to provide your email address. If you choose not to provide this information, you may be unable to access our Services. Alternatively, you have the option to log in using third-party social accounts, such as Facebook, Google, Apple ID, or Game Center.

2. Maintenance of basic functions and account security. To provide the core functionality of our Services, ensure the security of your game account, and maintain a fair, healthy, and safe gaming environment, we require your permission to access and modify your device’s external storage. For Android devices, this includes reading external storage, reading and writing SD card content, and modifying or deleting SD card content. Additionally, we collect device and software information, such as your user ID, device ID, device name, device type, model and version, system version, IP address, unique device identifiers (IMEI and Android ID for Android devices, IDFA for iOS devices), network type, and MAC address.

3. Logs and application information of game. When you play our online games, we collect game log information, including login log, item log, game match information, friends record, game identification information, hardware and operating system information, application list, progress and game crash record, etc. If you choose not to provide this information, you may be unable to access certain essential features and services of our products.

4. Transaction information. In order to provide you with transaction services, we will collect necessary information, recharge records, consumption records, payment records (including Google payment and iOS payment records), and only related information to transactions so that you can check your transaction records and protect the security of your virtual property to the greatest extent possible. Your consumption records, payment records and other necessary information related to transactions may be sensitive personal data. The collection of the above information is necessary to realize the consumption function of our Services, otherwise the transaction cannot be completed, but it does not affect your normal use of our Services with basic functions.

5. Interactive game information. To promote a safe and healthy online gaming environment, we will collect the text, images, voice, and video content you share in the game to filter out inappropriate material such as pornography, violence, politically incorrect content, abuse, and malicious advertisements, etc. If you wish to interact with other players through images, voice, or video (if applicable to game functions), we will seek your authorization and consent to access your photo or file storage, microphone, or camera for features such as saving screenshots, uploading images, and voice chatting. If you decline to provide the necessary permissions, you may be unable to use these specific features; however, your ability to use the basic functions of the game will remain unaffected. You can also revoke these permissions at any time through your privacy settings. We will only collect images, recordings, and other information if you choose to upload them voluntarily.

6. Customer service information. In response to your request for customer service, we will collect data generated during your request for customer support.

7. Additional service. To provide you with additional functions/services besides other basic services and functions, including gifts, prizes, birthday wishes, questionnaire survey, etc., subject to your consent, we may collect your personal data, including such as date of birth, address, email, nickname and profile image. If you choose not to provide this information, the additional features may not be available, and we may not achieve the desired outcomes. However, your ability to use the basic functions of our services will not be impacted.

You acknowledge and agree that the features and services we offer are continuously updated and developed. If a new feature or service that processes your personal data is introduced and is not mentioned in the previous statements, we will inform you of the updated data processing activities, and we may also use your personal data for other purposes not incompatible with the disclosed purposes (such as archiving in the public interest, scientific or historical research, or statistical purposes) if permitted by applicable data protection laws, or we may get your additional consent for those purposes at that time.

You acknowledge and agree that certain features of our Services may require you to grant specific permissions on your device to collect and use your personal data. However, obtaining such permission does not automatically mean that we will collect your personal data. Even if permission is granted, we will only collect your personal data when necessary and in line with this Privacy Policy. You can revoke any permissions at any time via your device settings. Please note that once you revoke a permission, you are cancelling your authorization, and we will no longer collect or use relevant data based on that permission, nor will we be able to provide the corresponding services. However, revoking permissions does not affect the collection and use of personal data that was previously obtained with your authorization.

II. How We Use Cookies and Similar Technologies

1. Cookies are small text files that websites store on your browser, computer, or mobile device when you visit them. They enable websites to recognize your device. Only the server that created the cookies can retrieve or read their content. Each cookie is unique to your browser or mobile application and typically contains identifiers, common information, and other details.

2. Cookies and similar technologies are primarily used for remembering your identity, analyzing your usage of services, optimizing advertising, and other commercial, market analysis, or academic purposes. These technologies may collect non-personally identifiable information about you, which can be used to analyze your usage of services, send you advertisements that may interest you, or assess the effectiveness of advertising services.

3. We utilize third-party analytics tools in our Services, which may use cookies to collect, store, and track relevant user data over time. The collection and use of data through third-party cookies and similar technologies are governed by their respective privacy policies, not this Privacy Policy, and we do not take responsibility for third-party cookies or their collection and use of your information.

4. Cookies are not the only means of recognizing or tracking visitors or players. We may occasionally use other similar technologies, such as SDKs, to identify you when you log in our Game or for advertising statistics and risk management purposes.

5. We use local storage technologies, including Shared Preferences (for Android device) and NSUserDefault (for iOS device), on our website to store user information and user login token.

III. How We Disclose Your Personal Data

At times, Bonfire Gathering may share certain personal data with other companies that are wholly or jointly controlled by us (referred to as “Affiliates”) and other third parties who collaborate with Bonfire Gathering to provide Services to you.

– Affiliates: Your personal data may be shared with Bonfire Gathering’s Affiliates to help deliver our Services to you. If Affiliates intend to process your personal data for purposes other than providing Services, they must obtain your consent first, unless there is another lawful basis for processing.

– Service Providers and Partners: Some of our Services may be delivered with the support of third parties. We occasionally enlist third parties to manage the collection of your personal data. Additionally, if you opt to log into our Services using social media accounts or utilize Apple Pay, we may share your user ID with those platforms and other partners (e.g., Apple). We may also share certain personal data with our partners specifically to enhance your service experience and improve your overall user experience. For instance, we might share your email address with advertising service providers that assist in marketing efforts, such as displaying targeted advertisements, managing campaigns, tracking effectiveness, and analyzing performance to provide you with more relevant content.

– Purchasers and third parties in connection with a business transaction: In the event of a merger, acquisition, bankruptcy liquidation, or similar event, we may transfer or disclose your personal data as part of that transaction or during the evaluation process leading up to the transfer. If your information is transferred in this manner, it will continue to be governed by this Privacy Policy or by a privacy policy that offers at least an equivalent level of privacy protection as outlined in this Privacy Policy.

– Law enforcement, regulators and other parties for legal reasons: We may share your personal data with third parties as required by law or when we reasonably believe such action is necessary: (a) to comply with a subpoena, legal proceedings, or requests from government agencies; (b) when we have a good faith belief that disclosure is necessary to adhere to the law and the legitimate requests of law enforcement; (c) to protect and assert our legal claims, rights, and property; (d) to safeguard your rights, property, or personal safety, as well as that of others; (e) to investigate potential fraud; and (f) to ensure the security and integrity of our Services.

– The public, when posted in certain public spaces: Certain Services we offer enable you to connect and interact with others. By default, your profile information or any information you post in a public space, including personal data, will be visible to other users or the general public upon creation. The visibility of such content will depend on the specific Services being utilized.

We will not share your personal data with any third parties, aside from those mentioned above, without your consent.

IV. How Your Personal Data Is Transferred

Bonfire Gathering operates as a global business, and our Services are available worldwide. Consequently, we collect and transfer personal data on a global scale, which may involve transferring your personal data to locations outside of your country. For further information regarding this process, please reach out to us using the contact details provided in the “Contact Us” section.

Please be aware that varying countries have different levels of data protection. As a result, your personal data may be stored in a location that provides a level of protection that could, in some cases, be less stringent than that of your home country or region. Nevertheless, we will take necessary precautions to ensure that any personal data we collect is processed in accordance with this Privacy Policy and applicable laws, ensuring adequate protection for your information. For instance, we may seek your consent before transferring your personal data across borders, and we will implement appropriate security measures and establish the necessary data transmission or sharing agreements with the recipients of your personal data prior to any transfer. Furthermore, we will ensure compliance with any laws that mandate local data storage within a specific country or region, taking appropriate organizational and technical steps to safeguard your personal data effectively.

V. How Long We Keep Your Personal Data

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested, to perform a contract with you or to comply with applicable legal, tax or accounting requirements.

Once the retention periods have expired, we will either delete or anonymize your personal data. If deletion or anonymization is not technically feasible (for instance, if your personal data is stored in backup archives), we will securely store your personal data and restrict it from any further processing until deletion can be carried out.

VI. How We Protect Your Personal Data

We will implement security measures in accordance with industry standards, including establishing reasonable system protocols and security technologies, to prevent unauthorized access, use, or modification of your personal data, and to protect against data leakage or loss.

The Internet is not entirely secure, and we advise you to use strong passwords and take precautions to protect your information. It is essential to safeguard your account number, password, and other identifying information. When using our Services, we will verify your identity based on these details. Disclosing this information may lead to potential losses. If you suspect that your account number, password, or any other identifying information has been leaked, please contact us immediately so we can take appropriate measures to mitigate any potential damage.

When interacting with a third party or purchasing goods and services through our Service, you may need to share your personal information, such as contact details or email address, with the relevant parties. Please ensure that you protect your information and only share it when absolutely necessary. Additionally, if you are contacting a third party, we recommend that you verify whether they are an authorized party before sharing any personal data with them.

The Internet is not entirely secure, and while we will make every effort to protect the security of the information you send to us, please understand that due to technical and risk management limitations, we cannot guarantee 100% information security. The system and communication networks you use to access our Service may also experience issues beyond our control. Therefore, we cannot ensure the security of the information you transmit to us, and you acknowledge that any information you send is at your own risk. If we become aware of a security breach, we will make efforts to notify you electronically so you can take appropriate protective measures. By using our services or providing your personal data, you consent to electronic communication about security, privacy, and administrative matters related to your use of the services. In the event of a security breach, we may post a Policy through our Service and/or send an email to the address you have provided. Depending on your location, you may have the legal right to receive a written security breach notice.

VII. Your Rights Regarding Your Personal Data

Data protection laws may grant you various legal rights concerning the personal data we hold about you. These rights can vary by jurisdiction, meaning that not all rights may apply in every location. Additionally, some rights may have specific qualifications and limitations, and exercising them could affect the Services we can offer you. Nevertheless, we will implement suitable technical measures to allow you to manage how we use your personal data.

Subject to the data protection laws in your country, your rights may include:

1. The right to be informed: Bonfire Gathering offers this Privacy Policy to inform you about the handling of your personal data, including the purposes for processing it, the types of personal data collected, the parties with whom this data may be shared, and the length of time the data will be stored.

2. The right to access and request a copy: If you would like to access your personal data, some of our Services may offer an interface that allows you to directly search for or view certain personal data. Additionally, you can request access to the personal data and/or request to make a copy of personal data we hold about you by reaching out to us through the “Contact Us” section.

3. The right to rectification: If you discover that the personal data we hold about you is inaccurate, or incomplete, or obsolete, you have the right to request corrections without unnecessary delay and to ask for the completion of your personal data when applicable.

4. The right to erase (Right to Be Forgotten): You have the right to request the deletion or anonymization of your personal data under certain conditions. However, please be aware that in some instances, we may be legally permitted or required to retain your data despite your request for erasure.

5. The right of portability: In certain situations, you have the right to receive specific personal data in a structured, commonly used, and machine-readable format and/or request its transfer to a third party, provided that such a transfer is technically feasible. Please note that this right applies only to personal data that you have provided to us.

6. The right to withdraw your consent: You have the right to withdraw your consent for us to process your personal data at any time. However, please note that we may still be legally permitted to process your data if we have another valid legal basis for doing so. For instance, we may be required to retain certain personal data to comply with legal obligations.

7. The right to object to or restrict processing: You have the right to object to the processing of your personal data and to request restrictions on its processing under certain circumstances. However, please be aware that in some situations, even if you exercise these rights, we may still be legally permitted to continue processing your data.

8. The Right to Avoid Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, if such decisions have legal or similarly significant effects on you. However, this right does not apply in cases where the decision is necessary for a contract, authorized by law, or based on your explicit consent.

9. The Right to Non-Discrimination: Bonfire Gathering complies with data protection laws in Southeast Asia, including but not limited to Thailand’s PDPA, Singapore’s PDPA, and Malaysia’s PDPA. We will not discriminate against you for exercising your privacy rights, meaning we will not deny services, charge different prices, or alter service quality.

10. The right to lodge a complaint: You have the right to lodge a complaint with the supervisory authority if you think that any of your rights have been infringed by us or we do not comply with the applicable personal data protection laws.

11. The right to opt-out of targeted advertising: If you wish to opt out of targeted advertising, you have the right to do so at any time. You can also contact us through the “Contact Us” section for further assistance.

In addition to exercising your rights through your user account as stated above, you can also exercise your rights by contacting us using the details provided in the “Contact Us” section.

You may have additional data protection rights based on the applicable data protection laws in various countries or regions. If you wish to exercise any of these rights, please contact us using the details provided under the “Contact Us” heading below. Please note that for security purposes, we may ask you to verify your identity and provide further information about your request before responding, to ensure that you are authorized to access such data or make requests regarding other data rights.

We address all requests from individuals seeking to exercise their personal data protection rights in compliance with the relevant data protection laws.

Generally, we do not charge a fee for responding to reasonable requests. However, for multiple or repetitive requests that exceed a reasonable limit, we may impose a reasonable fee to cover some of our costs, depending on the nature of the request. We reserve the right to refuse requests in whole or in part, particularly those that are clearly unfounded, excessively repetitive, or that would require disproportionate technical effort (for example, requests necessitating the development of new systems). Additionally, we may decline to respond to requests that involve significant public interest issues or that could seriously harm the legitimate rights and interests of you or other individuals or entities.

VIII. How We Process Children’s Personal Data

Please be aware that the definition of a child or minor varies across jurisdictions. If you are a child or minor in your jurisdiction, this Game is not intended for you. We do not knowingly collect personal data from children or minors. If you are a child or minor, please refrain from using our products or sending us any personal data about yourself. If we discover that we have collected personal data from a child or minor, we will promptly delete that information.

If you believe that a child in your jurisdiction may have provided us with their personal data, or if you are a parent or legal guardian of a child and have any questions or concerns, please reach out to us using the contact details provided in the “Contact Us” section below.

Please also note that this will be applied to the case of incompetent or quasi-incompetent mutatis mutandis.

IX. Third-Party Websites

1. Bonfire Gathering Services may include links to third-party websites, products, and services. You have the option to choose whether to access these third-party websites or accept the products and services they offer.

2. We do not control the privacy and data protection policies of third parties and do not assume any responsibility or liability for their practices. These third parties are not governed by this Privacy Policy. Therefore, we strongly recommend that you review the privacy protection practices of any third parties before submitting your personal data to them.

3. You have the right to request a list of third parties with whom we share your personal data. To make this request, please contact us using the details provided in the “Contact Us” section below. We will respond to your request in accordance with applicable data protection laws. Please note that we may require additional information to verify your identity before processing your request.

X. How This Privacy Policy Is Updated

We reserve the right to update or modify this Privacy Policy periodically. When we make significant changes, we will notify you through appropriate means, which may include email, in-app notifications, or posting a prominent notice on our Services. We will update the “Last Updated” date at the beginning of this Privacy Policy to reflect the date of the most recent changes. We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your personal data.

B. Contact Us

If you have questions or concerns regarding our Privacy Policy or our data protection practices, please feel free to reach out to us at Bonfire Gathering. You can submit your request using the following contact information:
Email address: info@bonfiregathering.com
Postal address: 16, Soi Chok Chai Chong Chamroen, Bang Phongphang Sub-district, Yan Nawa District, Bangkok, Thailand 10120