Privacy Policy

Information we process

• Accounts and sign-in: Google or Facebook sign-in can provide your account identifier, name, email address and profile image. Email sign-in uses authentication links or codes. We do not receive your Google or Facebook password. Website guest practice runs locally without requiring an online account. Mobile guest play saves and reuses an anonymous account identifier.
• Profile and friends: your chosen name, uploaded photo or selected avatar, Player ID, preferences, friend requests, friendships, invitations and presence information. A chosen profile image is saved to our account service so it can appear across devices. Player discovery requires an exact Player ID, not a name or email search.
• Gameplay: rooms, seats, game actions and state, results, level progress, statistics, MP balances, legacy table entitlements, hosting payments, rewards and wallet activity. Other players see information needed for their room, including your display name, image, level and game state.
• Purchases: product and pack identifiers, purchase tokens or their hashes, transaction/order references, verification status and entitlements. Google Play handles Android checkout; Apple handles iOS in-app checkout where offered; we do not receive your full payment-card details.
• Security and reliability: a random installation identifier, server-side IP signals, timestamps and connection or error information. Updated clients do not collect a browser or device fingerprint. We use these to protect accounts, prevent duplicate welcome rewards, investigate abuse and maintain multiplayer sessions.
• Support: your email address and the information you send us.

Website analytics

We use Google Analytics to understand website sessions, pages visited, broad location, device information and traffic sources. Google Analytics uses cookies and identifiers to measure visits. We do not intentionally send your name, email, Player ID, room codes or authentication tokens as analytics parameters. Page addresses supplied by our integration omit query strings and fragments. Google signals and advertising personalization are disabled in this integration.

Google processes this information under its Privacy Policy. You can block analytics through your browser settings or use Google's Analytics opt-out browser add-on. Blocking analytics does not prevent free practice.

Advertising

The Android app uses Google AdMob. Google's advertising SDK processes IP addresses, advertising or app-set identifiers, ad interactions and diagnostics for ad delivery, measurement and fraud prevention. An IP address can be used to estimate general location. The website is being prepared for Newor Media Elevate. Newor ad serving is not active in this website release; its code and advertising privacy information will be added during approved onboarding. The website does not show simulated advertisements or reward videos. Consent and device settings affect personalized advertising. Ad-free entitlements suppress the applicable ad placements; they do not remove account or gameplay processing.

Reward verification associates an ad transaction with your account to grant the appropriate reward once. See Google's Privacy Policy and your device's advertising and privacy settings.

Who receives information and why

We use Supabase for authentication, databases, storage and real-time game services, our hosting provider for website delivery, Google and Facebook for their selected sign-in services, Google for advertising and Android purchases, Apple for iOS purchases where offered, and email providers for support. These providers process information to deliver their services and may process it outside your country. Players can see your public player profile when they have your Player ID, and appropriate information in shared games. Your login email is not included in Player ID lookup results.

We use information to operate games and accounts, save progress, deliver packs and rewards, prevent fraud, resolve support requests and meet applicable obligations. We do not sell personal information. We may disclose limited information when required by law or to protect the service and its users.

Chat, microphone and older data

The updated game does not offer player text chat, voice calls or voice-note recording and does not request microphone access. Game music, sound effects and prerecorded announcements remain.

Older versions could send chat or voice data. Removing those features does not by itself erase every historical record. The existing voice-note cleanup process targets notes older than 24 hours and runs every 15 minutes; outages may delay removal. Historical account-linked information can be included in a deletion request.

Storage, retention and choices

Local storage keeps the signed-in session, settings and a profile cache. Account, progress and transaction records are retained while needed to provide the service and process verified deletion requests. Limited transaction, dispute, security or legal records may need to be retained afterward. We explain applicable exceptions when handling a request. Backup copies and provider logs may remain under the relevant provider's retention settings; they are not necessarily removed at the same time as active account records.

You can change your name or avatar, remove friends, sign out, clear browser/app data, manage sign-in-provider access and adjust device advertising settings. Clearing local data or removing a provider connection does not delete the online account. Follow our Data Deletion instructions to request account deletion or ask about retained information.

Security, age and updates

We use access controls and encrypted service connections to protect information. No service can guarantee absolute security. Morocco Play is intended for people aged 13 and older, subject to higher minimum ages required locally. Contact us if you believe a child below the applicable age provided information. We update this policy when the service changes; the revision date appears above.