Privacy Policy

Privacy Policy
Effective Date: 23/09/2025

Golden Genius Ltd (“we”, “us”, “our”), registered in the United Kingdom, respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, share, store, and delete personal and non-personal data when you use Juicy Roll and our related services (apps, website, customer support etc.) (collectively, “Services”).

1. Data We Collect

We collect data in the following categories:

• Account / Registration Data (if any): username, age, platform / login provider identifiers (e.g. Facebook, Apple).

• Device & Technical Data: Device model, operating system version, hardware identifiers (e.g. advertising identifiers like IDFA / GAID), IP address, language & locale, time zone.

• Usage Data: Level progress, gameplay events, session times, interactions, crash logs, performance diagnostics.

• Advertising & Analytics Data: identifiers, events relating to ad exposure / clicks, ad performance metrics.

• In-App Purchases / Virtual Item Purchases: purchase timestamps, item types, transaction metadata (but not sensitive financial info like full card numbers).

• Optional / Social Data: if the user opts-in or connects via a social platform: Facebook — avatar/profile picture, social login ID, friends list.
  When you use the optional social login (Facebook or Apple), we receive basic profile information such as your name, and a unique identifier from that provider.

• Children’s Data: We do not knowingly collect personal data from children under 13 (or under 16 in jurisdictions where that is the GDPR standard) without parental consent / verifiable consent.

2. How We Use Your Data (Purposes + Legal Basis)

We process your data for these purposes, under the following legal bases (UK GDPR / EU GDPR / other applicable laws):

3. Sharing & Third-Parties

We may share your data with:

• Analytics & Advertising Partners (e.g. Meta/Facebook, Google, other ad networks) for ad-serving, measurement, optimization.

• Payment Processors / Platforms for in-app purchase verification.

• Social platforms  under your control / with your permission.

• Hosting, Cloud, or Support Vendors who provide services (hosting, server infrastructure, email & support) under contract.

• Legal & Regulatory Authorities when required by law, to enforce rights, or in investigations or under court orders.

We ensure third parties are bound by contract to handle your data according to applicable data protection laws.

Social Login & Third-Party Authentication
You may choose to authenticate with our Services using a social login provider (e.g., Facebook Login, Sign in with Apple). When you do so, the provider will supply us with certain data (such as your unique provider identifier, your name, your profile picture, and any friends list data you permit). We use this data to: create or link your account, personalise your experience, enable social features, and where permitted, for analytics and advertising optimisation.

We may associate the social login identifier with your account and other device or usage identifiers for fraud prevention, analytics, or advertising. You may unlink your social login method at any time by clicking on Settings/Accounts or contacting the support. If you request deletion of your account, we will remove or anonymise your social login identifier along with your other personal data (except where retention is required for legal obligations).

We do not share your social-login identifier with third parties for their independent advertising profiling or cross-app tracking without your explicit consent.

4. International Data Transfers

Because our services may use servers or vendors outside the UK or the EEA, your data may be transferred internationally. We take steps to ensure such transfers have adequate safeguards—such as:

• Standard Contractual Clauses approved by the UK/EU;

• Ensuring the third party adheres to GDPR-equivalent protections;

• Only transferring what is needed.

5. Data Retention & Deletion

• We retain data only as long as needed for the purposes listed (operation, legal obligations, user support etc.).

• For example:

  • Usage & analytics data: retained for 7 years after last use.

  • Account registration & purchase data: retained as required for legal / tax / financial auditing obligations (UK law) — possibly longer.

• You may request deletion of your personal data. Upon deletion, we will remove or anonymize data, though some may remain where required by law or for legitimate business reasons (fraud prevention, legal claims etc.).

6. Security

• We use technical and organizational measures to protect against unauthorized access, destruction, or misuse of your data.

• Examples: encryption in transit and at rest (where possible), access controls, regular security audits.

• In case of a data breach, where required by law, we will notify affected users and regulatory authorities without undue delay.

7. Children’s Privacy

• The Services are not intended for children under 18 years (or under 21 in areas where that’s the standard). You cannot play if you are younger than 18 years old.

• If we discover we have collected personal data from children without consent, we will delete it as soon as possible.

8. Your Rights

Depending on where you live, you have rights under data protection laws, such as:

• Access: to request copies of the data we hold about you.

• Rectification: to correct inaccurate or incomplete data.

• Erasure (“right to be forgotten”) in certain circumstances.

• Restriction of processing.

• Data portability: obtain your data in a structured, commonly used format, where possible.

• Object: to certain processing (e.g. direct marketing, profiling).

• Withdraw consent: for processing based on your consent.

• Lodge a complaint with your local data protection authority (in the UK, the ICO).

We will respond to valid requests within legal deadlines (e.g. 1 month under UK/EU GDPR, with possible extension if complex).

9. Opt-Outs and Preferences

• You may opt out of personalized ads (via device settings or in-app controls).

• You may opt out of marketing communications (emails, push notifications) via in-app settings or links in emails.

• You may adjust cookie / tracking preferences for website usage.

10. Changes to this Policy

• We may update this Privacy Policy from time to time. When we make material changes, we will notify users (in-app, email or via a prominent notice) and update the “Effective Date.”

• Continued use after changes means you accept them.

11. Contact Information

For any questions about this Privacy Policy or your rights:

Golden Genius Ltd
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

12. Legal Jurisdiction & Applicable Laws

• Because we are registered in the UK, this policy is governed by UK law, especially UK GDPR and Data Protection Act.

• If you are in the EU, you have rights under EU GDPR as well.

• For California or other US states, additional privacy rights may apply if you have users there — we may include supplemental notices as required.