Bhabhi Thulla Multiplayer Privacy Policy

Bhabhi Thulla Multiplayer is an Android multiplayer card game developed and published by Adnan Mahmood.

This Privacy Policy explains how Bhabhi Thulla Multiplayer collects, uses, processes, stores, and shares information when players access or use the application. By using the application, players can review how their information is handled and how to contact the developer regarding privacy concerns.

In this policy, “we”, “us”, and “our” refer to Adnan Mahmood, the developer and Google Play publisher of Bhabhi Thulla Multiplayer. This policy is hosted on the DevQues website, https://www.devques.com/

Account and Profile Information. Registered players provide an email address and a password, or sign in with Google or Facebook, when creating an account. Passwords are stored by our servers in hashed form rather than as plain text. Player information includes a display name, a unique player ID, and an optional profile avatar uploaded by the player. Players may also choose to add a phone number to their profile; this is optional and is not used to sign in. Players can also access the game in guest mode without creating a registered email account (see Section 9).

Authentication Information. The game supports email-based registration, email address verification, and password reset using one-time codes sent by email. Players may instead sign in with Google Sign-In or Facebook Login. When a player uses one of these options, the provider confirms the player’s identity and shares basic account details with us, such as a provider account identifier, email address, name, and profile photo, depending on the player’s settings with that provider. Google Firebase Authentication is used to complete Google and Facebook sign-in. We never receive or store a player’s Google or Facebook password; these providers process sign-in information under their own privacy policies.

Gameplay Information. To provide multiplayer gameplay, the application processes information such as game sessions and rooms, player activity during matches, match results, statistics, rankings and leaderboard positions, levels and progress, virtual coin balances and coin transactions, daily rewards and bonuses, friends lists, private table invitations, and other game-related information. Virtual coins have no real-world monetary value.

Player-Generated Content. Players may upload a profile image and may use voice messaging to send short voice messages to other players during a game, which requires microphone permission. Profile images and voice messages are uploaded to and stored by our cloud storage provider so that they can be shown or played to other players.

Device and Technical Information. The application and its integrated services process technical information needed for app functionality, security, and advertising. This includes an installation identifier generated by the app (used for guest access), push notification tokens, the advertising identifier used by Google AdMob, IP addresses (used by our servers for security and abuse prevention, and by advertising services), app version, device and operating-system information, and diagnostic information. The application does not request access to precise GPS location, contacts, or payment card details.

Advertising Information. Google AdMob is integrated into the game to show rewarded and interstitial advertisements. AdMob may process the advertising identifier, device information, IP address, ad interactions, and related information to provide advertisements, measure ad performance, and prevent advertising fraud. When a player watches a rewarded ad, our servers receive a confirmation from AdMob so that the in-game reward can be granted.

Bhabhi Thulla Multiplayer uses third-party providers to operate certain features. Some of these providers act as service providers that process information on our behalf and under our instructions. Others, such as advertising and sign-in providers, also receive information that they use for their own purposes under their own privacy policies.

Cloud Infrastructure and Email Services. Our game servers, databases, and file storage are hosted on Amazon Web Services (AWS) infrastructure. Profile images and voice messages are stored in Amazon S3, and account-related emails (such as verification codes, password reset codes, and account deletion messages) are sent through Amazon SES. AWS processes this information on our behalf to provide these services.

Push Notification Services. Push notifications are delivered through Google Firebase Cloud Messaging. Firebase processes device push tokens and notification content on our behalf in order to deliver notifications. Players can turn off notifications at any time in their Android device settings.

We do not sell players’ personal information. However, some information is disclosed to third parties as described in this policy, and some information, such as display names, avatars, statistics, rankings, and voice messages, is visible to other players as part of the game.

We use reasonable technical and organizational safeguards to protect player information. Communication between the app and our servers uses encrypted connections (HTTPS). Passwords and one-time codes are stored in hashed form. Profile images and voice messages held in our cloud storage are kept private and are made available to the app only through short-lived access links. Access to account features requires authentication, and access to our infrastructure is restricted.

No internet-based service or method of electronic storage can guarantee complete security, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by a breach of these safeguards.

Account information. We keep a registered player’s account and profile information, including email address, display name, avatar, and optional phone number, for as long as the account exists. If a player deletes their account from within the app, the account is scheduled for deletion and permanently deleted after a 15-day recovery period. Signing back in during those 15 days restores the account and cancels the deletion.

Gameplay records and statistics. Game statistics, progress, rankings, rewards, and coin transactions are kept for as long as the account exists and are deleted when the account is permanently deleted.

Profile images and voice messages. A profile image is stored for as long as the account exists and is deleted from our storage when the account is permanently deleted. Voice messages are temporary: they are automatically deleted from our servers by a periodic cleanup process once they are three hours old.

Information that remains after deletion. When an account is permanently deleted, its personal information is removed. Results of matches the player took part in are kept in an anonymized form, with the player’s account removed from those records, because they also form part of other players’ match history and statistics. Information already received by third-party providers, such as Google AdMob, Google, or Meta, is retained under those providers’ own policies.

Players can request deletion of their Bhabhi Thulla Multiplayer account and associated personal data.

Please include your registered email address or player ID, if available, to help us identify your account. We may verify account ownership before processing a deletion request. Deletion requests are handled according to our Privacy Policy and applicable data retention requirements.

Registered players can also delete their account from within the app using the Delete Account option in their profile. Deletion requested in the app follows the 15-day recovery period described in Section 7.

Bhabhi Thulla Multiplayer supports guest players, who can use the game without registering an email address. A guest profile is linked to an installation identifier generated by the app, and may still be associated with a player ID, display name, game activity, statistics, coin balances, and other gameplay information in the same way as a registered account.

Guest profiles cannot be deleted using the in-app Delete Account option. Guest players can request deletion of data associated with their guest profile by contacting us at the email address in Section 15, including their player ID and display name. Because guest profiles are not linked to an email address, we may not be able to identify or recover a guest profile without enough information to confirm which profile belongs to the requester.

Bhabhi Thulla Multiplayer uses Google AdMob to display advertisements. Our ad requests ask for non-personalized ads, but AdMob and related Google advertising services may still use the advertising identifier and technical information for purposes such as frequency capping, measurement, and fraud prevention, according to Google’s privacy practices.

Players may be able to manage advertising preferences through their device or Google settings, for example by resetting or deleting their Android advertising ID, subject to the features available on their device. These settings may not stop all advertising-related processing, and the game will continue to show advertisements.

Bhabhi Thulla Multiplayer is not designed for or directed to children under the age of 13, and the advertising in the app is not configured as child-directed. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that a child under 13 has provided personal information through the application, please contact us at the email address in Section 15. We will take reasonable steps to delete that information.

Application data may be processed and stored by our cloud infrastructure and third-party service providers in countries other than the one in which a player lives, where data protection laws may differ. Where applicable, we rely on our providers’ safeguards for such processing.

Players can update their display name, avatar, and other profile details directly in the app. Requests sent to us are handled subject to applicable laws, verification of the requester’s identity, and legitimate retention obligations.

We may update this Privacy Policy to reflect changes in application functionality, legal requirements, or data handling practices.

When changes are made, the updated Privacy Policy will be published on this page with a revised Last Updated date.