Privacy Policy
How Deepwaves handles information across its websites, mobile games, mini games, applications and related services.
This Privacy Policy explains how Deepwaves Technology Co., Limited (“Deepwaves,” “Sunlight Games,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use our websites, mobile games, mini games, applications, and related services (collectively, the “Services”).
It applies to Services distributed through the Apple App Store, Google Play, TikTok Mini Games, other application stores, social or mini-game platforms, and our websites. Because games may use different accounts, advertising services, analytics tools, and platform features, each game has a Game Privacy Schedule identifying its applicable practices.
1. Privacy Controller
The responsible entity is Deepwaves Technology Co., Limited, 704 PRINCE EDWARD RD EAST, SAN PO KONG, HONG KONG. Website: https://www.deepwaves.hk. Privacy contact: sunlightgames@deepwaves.hk.
2. Information We May Collect
2.1 Account and Platform Information
Depending on the Service, we may receive or generate a platform user ID, game or guest ID, authentication token, display name, avatar, region or age-range signal made available by a platform; contact information you voluntarily provide; and account, login, consent, or linking records. We do not receive your platform password.
2.2 Device, Network, and Technical Information
This may include device and software type, language, time zone, approximate region, IP address, network and connection information, app or advertising identifiers where permitted, crash logs, diagnostics, performance data, error codes, and security events. Precise location is collected only if a Service specifically requests it, explains why, and obtains required permission.
2.3 Gameplay and Usage Information
This may include sessions, progress, levels, score, achievements, virtual items, rewards, settings, screens, feature interactions, tutorial and gameplay events, advertising entry and reward events, campaign attribution, retention, and anti-fraud or abuse signals.
2.4 Purchases
Where offered, we may receive product and transaction identifiers, purchase time, price, currency, country, subscription status, receipt validation, refunds, or chargebacks. Platform or payment providers process payment credentials; we generally do not receive complete card details.
2.5 Advertising Information
Advertising-supported Services may process advertising identifiers, device and app information, approximate location derived from IP, consent signals, requests, impressions, clicks, completions, rewards, frequency, attribution, and invalid-traffic signals. Each Game Privacy Schedule states the verified model and providers.
2.6 Support and Communications
If you contact us, we may collect your email and name, game and platform, player identifier, message, screenshots, attachments, diagnostics, and support history.
2.7 User Content
Where enabled, we may process content you submit. A Service without user-content features does not collect this category through such functionality.
3. Sources of Information
Information may come directly from you; automatically from your device or use; from Apple, Google, TikTok, or another platform; from payment, advertising, analytics, hosting, security, or support providers; from lawful user reports; or from business partners where law permits.
4. How We Use Information
We use information to operate and authenticate Services; save progress; deliver purchases, Virtual Items and rewards; configure gameplay; provide permitted advertising; measure engagement and quality; diagnose errors; prevent fraud, cheating, abuse and security incidents; provide support; respond to rights requests; comply with law and enforce Terms; conduct internal research and improvements; and support protected business transfers. We do not adopt a materially incompatible purpose without notice and consent where required.
5. Legal Bases for Processing
Where GDPR, UK GDPR, or similar laws apply, bases may include contract, legitimate interests, consent, legal obligation, protection of vital interests, or legal claims. Consent can be withdrawn without affecting earlier lawful processing.
6. Advertising and Privacy Choices
Depending on game, region, age, platform, and consent, advertising may be contextual or personalized. The applicable Game Privacy Schedule identifies verified practices. Where required, consent is requested before using advertising identifiers or personalized advertising. Choices may include in-game settings, Apple tracking controls, Android advertising settings, TikTok controls, provider tools, or our privacy request page. Opting out of personalization may not remove contextual ads.
We do not sell personal information for monetary consideration. Some laws may define advertising disclosures as sale, sharing, or targeted advertising; where applicable, required notices and opt-outs are provided.
7. How We Disclose Information
Information may be disclosed to distribution and social platforms; authorized hosting, analytics, diagnostic, advertising, attribution, payment, support, fraud-prevention, security, communication, legal, and professional providers; authorities or parties where reasonably necessary for law, safety, fraud investigation, or legal claims; a recipient in a protected business transfer; or another party at your direction. Specific SDKs and providers appear only in the applicable Game Privacy Schedule after verification.
8. International Data Transfers
We and providers may process information outside your country. Where required, safeguards may include contractual protections, adequacy decisions, data-transfer agreements, or other lawful mechanisms. Local authorities may have lawful access under applicable law.
9. Data Retention
We retain information only as reasonably necessary to provide and secure Services, measure and improve them, resolve disputes, enforce agreements, and meet legal obligations. Relevant factors include account activity, analytics needs, advertising reconciliation, fraud prevention, purchase and accounting rules, support history, legal claims, and normal backup rotation. Game schedules state specific periods only when verified. Data no longer needed is deleted, de-identified, aggregated, or securely isolated unless law requires retention.
10. Account and Data Deletion
Submit deletion requests through Data Deletion and Privacy Requests. Services supporting account creation will also provide an in-service method where platform rules or law require. We may reasonably verify a request. Information may be retained for law, tax, accounting, fraud prevention, security, disputes, legal rights, or inseparable de-identified datasets. Deleting a game profile does not delete the underlying platform account.
11. Security
We use reasonable administrative, technical, and organizational measures including access controls, secure transmission, credential management, logging, and provider review. No system is completely secure. Legally reportable incidents will be notified as required.
12. Children’s Privacy
Unless a Game Privacy Schedule states otherwise, Services are not directed to children under 13. We do not knowingly collect children’s personal information in violation of law and will take reasonable deletion steps if this occurs. A child-directed or mixed-audience Service will use age-appropriate design, data minimization, legally required advertising limits and parental consent, and a specific notice where necessary.
13. Your Privacy Rights
Depending on location, rights may include access, correction, deletion, portability, restriction, objection, consent withdrawal, advertising opt-outs, appeal, and complaint to an authority. We do not discriminate for exercising rights. Submit a request through our request page. Identity and authorized-agent authority may be verified.
14. Regional Disclosures
EEA, United Kingdom, and Switzerland
Rights may include access, correction, deletion, restriction, objection, portability, consent withdrawal, and complaint to a supervisory authority.
California and Certain U.S. States
Applicable rights may include know, access, correct, delete, copy, and opt out of sale, sharing, targeted advertising, or certain profiling. Categories are described above and in Game Privacy Schedules. Sensitive information is not used for purposes requiring a right to limit unless a schedule states otherwise.
Brazil
Applicable rights may include confirmation, access, correction, anonymization, blocking, deletion, portability, sharing information, consent withdrawal, and review of certain automated decisions. Mandatory local rights apply.
15. Third-Party Links and Platform Services
Apple, Google, TikTok, advertising partners, and other third parties may provide links or features. Their policies govern information they independently process.
16. Changes to This Policy
We may update this policy for changes in Services, technology, providers, law, or business practices. We will update the Effective Date and give additional notice where required. Material changes will not apply retroactively where prohibited.
17. Contact
Deepwaves Technology Co., Limited
704 PRINCE EDWARD RD EAST, SAN PO KONG, HONG KONG
Website: https://www.deepwaves.hk
Privacy contact: sunlightgames@deepwaves.hk