GAMEWISE PVT LTD — GLOBAL PRIVACY POLICY

1. Introduction

This Privacy Policy ("Policy") is issued by GAMEWISE PVT LTD ("Company," "we," "us," or "our"), a mobile gaming publisher and developer. This Policy explains how we collect, use, process, store, share, and delete personal information obtained through our mobile games, applications, in-app services, player accounts, virtual storefronts, and any related services we operate (collectively, the "Services").

This Policy applies to all players and users worldwide who access or use our Services, including those playing on Android and iOS platforms. It is designed to comply with the General Data Protection Regulation (GDPR), the California Privacy Rights Act (CPRA), the California Consumer Privacy Act (CCPA), the Children's Online Privacy Protection Act (COPPA), applicable mobile platform privacy requirements imposed by Google Play and the Apple App Store, and other applicable global data protection laws.

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY. WHERE REQUIRED BY APPLICABLE LAW, WE WILL REQUEST YOUR CONSENT BEFORE PROCESSING PERSONAL DATA FOR SPECIFIC PURPOSES SUCH AS PERSONALIZED ADVERTISING OR CROSS-APP TRACKING.

2. Who We Are

Company Name: GAMEWISE PVT. LTD. Registered Address: CP1 & 2 Agro Food Park RIICO Industrial Area Boranada, Jodhpur, Rajasthan-342012 Privacy Contact Email: gamewise@capsitech.com

For purposes of applicable data protection legislation, GAMEWISE PVT LTD is the data controller responsible for your personal data.

3. Applicability by Region

This Policy applies globally to all users of our Services regardless of location. Where regional laws impose specific requirements beyond this global baseline, we provide supplemental disclosures in Section 21 of this Policy. California residents should refer to Section 21 for CPRA and CCPA-specific disclosures, or visit Gamewise.com/linkofpolicy for additional state-specific information. Users in other U.S. states with applicable privacy legislation should also refer to Section 21 and Gamewise.com/linkofpolicy. Where our Services are directed at or accessed by children, the additional protections described in Section 16 apply

4. Information We Collect

Information You Provide

We collect personal information that you voluntarily provide when interacting with our Services, including:

Username or player tag selected during account creation or gameplay. Email address, used for account registration, authentication, and communications. Password or authentication credentials, which are stored in encrypted and hashed form — we do not store plain-text passwords. Profile information such as avatar image or display name. Customer support and help-desk communications, including the content of support tickets, emails, or chat messages you send to us. User-generated content (UGC), including in-game chat messages, player-to-player communications, and content you create or submit within the Services. Responses to surveys, questionnaires, promotions, and contests we administer.

Information Collected Automatically

We and our third-party service providers automatically collect technical and device-level data when you access or use our Services, including:

Device identifiers, including device model name, manufacturer, and hardware specifications. Android Advertising ID (AAID) on Android devices. Identifier for Advertisers (IDFA) on iOS devices, collected only with your explicit consent pursuant to Apple's App Tracking Transparency (ATT) framework. Device vendor identifier (IDFV) on iOS devices. IP address, used to derive approximate geographic location, detect fraud, and provide regionally appropriate Services. Operating system type and version. Mobile carrier and network type, including Wi-Fi, cellular, and network speed. Device language settings and time zone. Application version and build number. Log files and diagnostic data, including error messages, crash reports, stack traces, and application performance metrics. Battery status and available storage, collected only to optimize application performance.

Gameplay Data

We collect data about how you interact with our Services in order to operate and improve them, including:

Session duration, login and logout timestamps, and session frequency. Match history, game results, win/loss records, and competitive rankings. Gameplay activity, including levels completed, characters used, and in-game actions. In-app purchase transactions, including item purchased, price, transaction timestamp, and transaction identifier. Real-money transaction records, including amounts paid, currency, payment method type (not full payment card data), and refund history. Virtual currency balance, acquisition history, and expenditure records. Achievement and progression data, including badges earned, milestones reached, and event participation. Leaderboard data, including your ranking and associated player profile. Anti-cheat and fraud prevention data, including game state integrity checks, behavioral anomaly signals, and flagged event logs. Behavioral analytics data, including feature usage patterns, click and interaction heatmaps, and player funnel analysis.

Information from Third Parties

If you choose to register or log in using a third-party account, we may receive limited information from that platform, subject to your privacy settings and the third party's own policies. The third-party accounts we support include:

Google Sign-In, from which we receive your Google account ID, email address, and display name. Apple ID / Sign in with Apple, from which we receive your Apple ID, an email address (which you may choose to mask), and display name. Google Play Games, from which we receive your Google Play Games profile ID, player name, and achievement data. Apple Game Center, from which we receive your Game Center player ID and alias. Facebook Login (Meta), from which we receive your Facebook user ID, name, and profile picture, subject to your Meta privacy settings.

We do not receive or store your third-party login passwords. We access only the information expressly authorized by you on the relevant platform.

Advertising and Attribution Data

To operate our ad-supported Services and to enable our advertising partners to serve relevant advertisements, we and our third-party advertising SDK partners collect:

Ad impression data, including which advertisements were served to you, when, and in what context. Ad interaction data, including whether you tapped, clicked, or otherwise interacted with an advertisement. Attribution and install tracking data, connecting a game download or in-app action to a specific advertising campaign or media source. Campaign analytics, including aggregated and individual-level data used to measure advertising effectiveness. Behavioral advertising identifiers, including IDFA (iOS, consent required) and AAID (Android, opt-out available). Contextual data from advertising SDKs, including device type, operating system, app version, and IP address. On iOS, collection and use of IDFA for cross-app tracking requires your explicit opt-in consent via the ATT prompt. On Android, you may opt out of interest-based advertising at any time in your device settings.

5. How We Use Information

Service operation and account management. We use personal information to create and maintain player accounts, enable gameplay, facilitate matchmaking and multiplayer systems, manage cloud saves, process in-app purchases and virtual currency transactions, verify payments, manage live events, send push notifications, enable in-game communications, and operate leaderboards and achievement tracking.

Analytics, improvement, and personalization. We analyze gameplay behavior and player preferences to improve game design, develop new features, balance gameplay systems, fix technical issues, conduct A/B testing and product research, and deliver personalized in-game content and recommendations.

Advertising and marketing. Subject to applicable consent requirements, we use data to serve contextual and interest-based advertisements, measure advertising performance, share advertising identifiers with advertising SDK partners, conduct attribution tracking, and optimize ad delivery.

Safety, security, and fraud prevention. We use information to detect and prevent cheating, abuse, fraud, unauthorized account access, account takeovers, and other security threats, as well as to enforce our Terms of Service and acceptable use policies and to operate anti-cheat and integrity monitoring systems.

Legal compliance and regulatory obligations. We use information to comply with applicable data protection laws, respond to legal requests, court orders, and regulatory inquiries, maintain tax and financial records, fulfill record-keeping obligations, and conduct age verification and COPPA compliance measures.

Communications. We use contact information to send transactional communications such as account confirmations, purchase receipts, and support responses; service-related updates including maintenance notices, security alerts, and policy updates; and, where consent is required, promotional communications, marketing emails, and push notifications

6. Legal Bases for Processing (GDPR)

For users in the EEA, UK, and other jurisdictions requiring a legal basis for data processing, we rely on the following bases:

Contractual necessity (Article 6(1)(b) GDPR). Processing your account data, gameplay data, multiplayer functionality data, and payment data is necessary to perform our contract with you and to provide the Services you have requested. This also covers processing required for third-party social login authentication where you have chosen to use those features.

Legitimate interests (Article 6(1)(f) GDPR). We process certain data based on our legitimate interests in operating, securing, and improving our Services. This includes crash diagnostics, security monitoring, technical stability, fraud prevention, anti-cheat operations, and service optimization. We have assessed that these interests are not overridden by your rights and freedoms.

Consent (Article 6(1)(a) GDPR). Where required by applicable law, we rely on your freely given, specific, informed, and unambiguous consent before processing your data for behavioral analytics, personalized advertising, advertising measurement, cross-app tracking, and other activities that require permission under applicable data protection or ePrivacy laws. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Legal obligation (Article 6(1)(c) GDPR). We process data as necessary to comply with legal obligations, including regulatory requirements, court orders, tax and financial record-keeping mandates, and applicable law enforcement requests.

7. Cookies, SDKs, and Tracking Technologies

Our Services are mobile applications and do not use browser cookies in the traditional sense. Instead, we and our third-party partners use mobile SDKs, device identifiers, and related tracking technologies to collect data and enable advertising and analytics functionality.

The primary tracking technologies we use include mobile SDK integrations embedded in our applications, advertising identifiers (IDFA on iOS and AAID on Android), device vendor identifiers (IDFV), IP-address-based location signals, and session and event logging technologies.

On iOS devices, we present Apple's ATT prompt before accessing your IDFA for cross-app advertising or tracking purposes. You may decline this prompt, in which case we will not access your IDFA for tracking. On Android devices, you may opt out of interest-based advertising by navigating to your device's Google Settings and selecting the appropriate advertising opt-out option. These choices do not affect contextual advertising that does not rely on cross-app behavioral tracking.

Consent for behavioral advertising and analytics tracking is managed through our in-app consent interface. You may withdraw or update your preferences at any time through the privacy settings available within the Services.

8. Third-Party SDKs and Service Providers

Our Services integrate third-party SDKs and service providers. Each provider processes your data in accordance with their own privacy policies. Where required by GDPR, we have entered into Data Processing Agreements (DPAs) with each provider.

Firebase and Google Analytics for Firebase (Google LLC) Purpose: Mobile and in-game analytics, crash reporting, performance monitoring, player funnel analysis, monetization tracking, and service optimization. Data processed includes device identifiers, crash logs, gameplay events, session duration, technical diagnostics, and app performance data. Legal basis: Legitimate interests (Article 6(1)(f) GDPR) for crash diagnostics, security monitoring, and technical stability. Consent (Article 6(1)(a) GDPR) for behavioral analytics, advertising measurement, and player profiling where required by applicable law.


Privacy Policy: https://policies.google.com/privacy

AppLovin (AppLovin Corporation) Purpose: Advertising, ad mediation, monetization, user acquisition, campaign performance measurement, and revenue analytics. Data processed includes advertising identifiers, IP addresses, device information, ad engagement data, attribution information, and audience-related analytics. Legal basis: Consent (Article 6(1)(a) GDPR) for personalized advertising and advertising tracking technologies. Legitimate interests (Article 6(1)(f) GDPR) in certain limited cases involving fraud prevention, security, or non-personalized advertising operations.


Privacy Policy: https://www.applovin.com/privacy/

Meta for Developers (Meta Platforms, Inc.) Purpose: Facebook Login, advertising attribution, audience analytics, and social integration features. Data processed includes Facebook account identifiers, authentication credentials, device identifiers, advertising data, attribution information, and interaction metrics. Legal basis: Contractual necessity (Article 6(1)(b) GDPR) for users who choose Facebook Login or social authentication features. Consent (Article 6(1)(a) GDPR) for advertising personalization, tracking technologies, and audience measurement where required by law.


Privacy Policy: https://www.facebook.com/privacy/policy/

Google Analytics (Google LLC) Purpose: Understanding player interactions with our Services, including gameplay behavior, session activity, retention, engagement metrics, and user interactions. Data processed includes device identifiers, IP addresses, usage data, session information, and in-game event data. Legal basis: Consent (Article 6(1)(a) GDPR) where required by applicable law, particularly within the EEA, before enabling analytics tracking. Legitimate interests (Article 6(1)(f) GDPR) in limited circumstances permitted by law for service improvement and optimization.


Privacy Policy: https://policies.google.com/privacy

9. How We Share Information

Service providers. We share personal information with vendors and service providers acting as data processors on our behalf, including analytics providers (such as Firebase), customer support platforms, and payment processors. These providers process data only as directed by us and pursuant to contractual data processing agreements.

Advertising and attribution partners. Subject to applicable consent requirements, we share advertising identifiers, behavioral signals, and attribution data with our advertising SDK partners for the purpose of serving targeted in-game advertisements and measuring campaign effectiveness, as described in Section 8.

Social and login platforms. If you use a third-party login such as Google, Apple, or Facebook, we may share limited data — such as your account ID and display name — with the relevant platform to authenticate your session and synchronize profile data.

Other players. Certain information you generate through gameplay is inherently visible to other players within our Services, including your username, player tag, leaderboard ranking, and in-game chat messages. Please do not share sensitive personal information through in-game chat.

Corporate transactions. In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of our assets, personal information may be transferred as a business asset, subject to notice to affected individuals and applicable legal requirements.

Legal and safety disclosures. We may disclose personal information when required by law, court order, or regulatory request, or when we believe disclosure is necessary to protect the safety, rights, or property of our players, ourselves, or the public.

10. International Data Transfers

As a global company operating mobile services across multiple jurisdictions, personal data we collect may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your country of residence.

Where we transfer personal data from the EEA, UK, or Switzerland to third countries, we implement appropriate safeguards as required by applicable law. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement or addendum, adequacy decisions issued by the European Commission, or other legally recognized transfer mechanisms. Our advertising and analytics SDK partners who receive data as part of cross-border transfers are subject to contractual obligations requiring them to maintain appropriate protections for that data.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

Right to Know You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information was collected, the business or commercial purposes for collecting or selling that information, and the categories of third parties with whom we share that information.

Right to Access You have the right to access a copy of the specific pieces of personal information we hold about you, delivered in a portable and readily usable format where technically feasible.

Right to Delete You have the right to request that we delete personal information we have collected from you, subject to certain exceptions permitted by applicable law, such as where retention is necessary to complete a transaction, detect security incidents, comply with legal obligations, or fulfill other legitimate purposes.

Right to Correct You have the right to request correction of inaccurate personal information that we maintain about you. Upon receiving a verified correction request, we will use commercially reasonable efforts to correct the information.

Right to Opt-Out of Sale or Sharing You have the right to direct us not to sell or share your personal information with third parties.

Right to Limit Use of Sensitive Personal Information You have the right to direct us to limit the use and disclosure of your sensitive personal information to purposes that are necessary to perform the Services requested by you, or as otherwise permitted under applicable law.

Right to Non-Discrimination You have the right not to be discriminated against for exercising any of your privacy rights. We will not deny you our Services, charge you different prices, provide a different level of quality, or retaliate against you for exercising any rights described in this Policy.

GDPR Rights (EEA and UK Users)

In addition to the rights listed above, EEA and UK users have the right to data portability, the right to restriction of processing, the right to object to processing based on legitimate interests or for direct marketing purposes, the right to withdraw consent at any time, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the information in Section 20. We may need to verify your identity before processing your request and may contact you for additional information for this purpose. We aim to respond to all verifiable requests within the timeframes specified in applicable law.

12. Do Not Sell or Share My Personal Information

Under the CPRA and CCPA, California residents have the right to opt out of the sale or sharing of their personal information. We may share certain advertising identifiers and behavioral data with our advertising partners in ways that may constitute a "sale" or "sharing" under California law.

To opt out, California residents may use the in-app privacy portal, email us at gamewise@capsitech.com , or visit https://www.thegamewise.com/privacy-policy/. We also honor Global Privacy Control (GPC) signals to the extent required by applicable law. Exercising this right will not affect your ability to use our Services, though it may result in less relevant advertising being displayed to you.

13. Your Choices and Controls

ATT controls (iOS). On iOS, you may opt in to cross-app tracking via the ATT prompt presented at first launch, or update your preference at any time in your device Settings under Privacy & Security > Tracking.

Ad personalization settings (Android). On Android, you may opt out of interest-based advertising by navigating to Settings > Google > Ads and selecting the relevant opt-out option.

Push notification settings. You may enable or disable push notifications from our Services through your device's notification settings at any time.

Email marketing opt-outs. Where we send promotional email communications, each communication will include an unsubscribe link. You may also contact us directly to opt out of marketing emails.

In-app privacy preferences. Our Services include an in-app privacy settings panel where you can review and update your consent preferences for analytics, advertising, and personalization.

14. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law. Account data and gameplay data are generally retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements.

Inactive accounts may be subject to deletion after an extended period of inactivity, in accordance with our data minimization obligations. Advertising identifiers and behavioral analytics data are subject to retention limitations imposed by applicable law and platform policies. Certain financial and transactional records may be retained for longer periods as required by tax and accounting regulations.

You may request deletion of your personal data at any time, subject to any legal obligations that require us to retain certain information. Requests for deletion can be submitted as described in Section 20.

15. Security Measures

We implement technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and role-based permissions limiting internal access to personal data, multi-factor authentication for administrative systems, security monitoring and anomaly detection systems, and defined incident response procedures for data security events.

While we maintain appropriate safeguards, no security system is impenetrable. We cannot guarantee the absolute security of personal data transmitted to or processed through our Services. If you believe your account has been compromised, please contact us immediately using the information in Section 20.

16. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children below the applicable minimum age without verifiable parental consent as required by COPPA and applicable law.

We employ age-gating mechanisms to help identify and restrict access by underage users. If a user is identified as being below the applicable minimum age, we will not collect personal information beyond what is strictly necessary, will not serve behavioral advertising, and will seek verifiable parental consent for any continued data collection and processing where required by law.

Parents or legal guardians of children who believe their child has provided personal information to us without appropriate consent may contact us at privacy@[companydomain].com to request access, correction, or deletion of that information. We will take prompt action in response to verified parental requests.

17. Automated Decision-Making and Profiling

Our Services involve certain automated processing activities that may constitute profiling or automated decision-making under applicable law:

Personalization systems. We use automated systems to deliver personalized in-game content, recommendations, and experiences based on gameplay data and behavioral analytics.

Ad targeting. Subject to applicable consent requirements, our advertising partners use automated systems to select and deliver targeted advertisements based on behavioral and device data.

Anti-cheat systems. We operate automated systems that analyze gameplay data and behavioral signals to detect and respond to cheating, exploitation, and other violations of our Terms of Service.

Fraud detection. Our fraud prevention systems use automated analysis of device, account, and behavioral data to identify suspicious activity and protect the integrity of our Services.

EEA users have the right under Article 22 GDPR not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Where our automated processing activities fall within the scope of Article 22, we maintain appropriate human oversight mechanisms and provide you the ability to contest automated decisions. Contact us using the details in Section 20 for further information.

18. Data Breach Notifications

In the event of a personal data breach that poses a risk to your rights and freedoms, we will respond in accordance with our internal incident response procedures and applicable legal requirements. Where required by law, we will notify relevant supervisory authorities within the timeframes prescribed by applicable data protection legislation (such as 72 hours under GDPR). Where a breach is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay, using the contact information associated with your account. We will also take prompt action to investigate, contain, and remediate any breach to minimize harm.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Services. When we make material changes, we will post the updated Policy within the Services with a revised effective date, provide in-app notification of material changes prior to the change becoming effective, and, where required by law, obtain fresh consent for any material new uses of personal information.

We encourage you to review this Policy periodically. Your continued use of the Services following notice of material changes constitutes your acknowledgment of those changes.

20. Contact Information

To exercise your data protection rights, submit privacy inquiries, report a data breach, or request additional information about our privacy practices, please contact us using the details below:

Privacy Inquiries: gamewise@capsitech.com

Mailing Address: GAMEWISE PVT LTD, CP1 & 2 Agro Food Park RIICO Industrial Area Boranada, Jodhpur, Rajasthan-342012

We aim to respond to all verifiable requests within the timeframes specified in applicable law. We may need to verify your identity before processing certain requests and may contact you for additional information for this purpose.

21.For Residents Of Certain U.S. States

Please visit https://www.thegamewise.com/us-policy for special disclosures pertaining to residents of certain U.S .States

22. Effective Date and Version

Last Updated: 13/05/2026

GAMEWISE PVT LTD | gamewise@capsitech.com

The Game Wise Logo

We empower our team of skilled developers, designers, and artists to explore their creativity and transform innovative ideas into exceptional gaming experiences.

The Game Wise Logo

Capsitech IT Services Private Limited

CP1 & 2 Agro Food Park RIICO Industrial Area,
Boranada, Jodhpur, Rajasthan 342012

© Copyright 2026 TheGameWise - All Rights Reserved
Terms & Conditions | Privacy Policy