Version v0.3 (19.08.2026) — this text may be updated; significant changes are announced in the app.
Data controller / contact: 17 OKEY — support@17okey.com
What data do we process?
Account data
- Anonymous player identifier (Firebase uid), the player name you choose, and your avatar.
- If you sign in with Google: the name, e-mail address and profile photo shared by the provider. The e-mail is kept in Firebase Authentication to recognise your account and prevent conflicts across sign-in methods; it is NOT VISIBLE to other players and is never used as your player name.
- If you sign in with Facebook: name and profile photo. We do not request your Facebook friend list or e-mail (only the
public_profile permission is used). - Your friend code (17-XXXXXXXX): a permanent, shareable identifier tied to your account. Nobody can find you by code unless you share it yourself.
Game data
- Chip balance, level/XP, title, game statistics (hands/matches played, penalties).
- Quest, wheel, daily reward, piggy bank and gift records; table participation and match history.
- Fair-play records: how many matches you played with which players and the net chip flow — used only to detect cheating/collusion; identities are masked in reports.
Social data
- Your friend list and friend requests.
- "Recent opponents": players you met at a table, how many hands you played together and when you last met (to make adding friends easier; last 20 people).
- Private messages (DM): only between mutual friends; the last 50 messages per conversation are stored, passed through a profanity filter and limited to 200 characters.
- Table and club chat messages, stickers and quick phrases.
- Your club membership and contribution points; management actions if you are the founder.
- Gift history, players you blocked and reports you filed (the last 5 messages are attached as evidence).
- Voice table (optional): push-to-talk voice chat on private/friend tables. It is off by default; if you enable it, audio is transmitted via Unity Vivox, conversations are not recorded, and the microphone is only active while you hold the talk button. You can mute any player and report voice harassment.
- Table spectating: your friends can watch the open table you are sitting at; a spectator only sees what everyone at the table sees (hands are never visible) and the spectator count is shown to everyone. Private/coded tables cannot be watched.
What is visible to other players?
- Your player name, avatar/photo, level and title are visible to everyone at the table and in lists. Being searchable by your player name is optional: turn it on in Settings → Privacy ("let others find me by my player name"; off by default — your friend code always works). You can also opt out of public leaderboards there.
- While you are seated at a table, your chip balance is visible to the others at that table.
- Your friends additionally see your last-seen time and the public table you are currently sitting at. Private/coded tables are never shown.
- Not visible: your e-mail address, your account identifier, your purchase data, and the tiles in your hand.
Notification data
To send notifications we store your device's notification token (Firebase Cloud Messaging). When you turn notifications off in Settings, the token is deleted.
Advertising data
The game shows rewarded ads (Google AdMob). For serving and measuring ads, AdMob may process your device's Advertising ID and technical data. You can reset the Advertising ID or turn off personalisation in your device settings. Details: Rewarded ad views are verified on our server via Google's signed server-side callback (SSV) to prevent fraud.
Google advertising policies.
Technical data
Device model, operating system, app version, crash logs, session durations, freeze (ANR) measurements and in-game events (analytics).
Purchase data
Payments run through Google Play; your card details NEVER reach us. We only receive the transaction's validation receipt and order identifier.
What do we use it for?
Running the game (matchmaking, balance, progression, social features), preventing cheating/collusion, fighting harassment and abuse (reports/blocking/filter), fixing crashes and errors, improving the product (aggregated analytics), serving ads, and legal obligations.
Who do we share it with?
- Hosting: Oracle Cloud — Frankfurt / Germany (EU).
- Google Firebase: authentication, notifications, analytics, crash reporting.
- Google AdMob: ad serving and measurement.
- Google Play: purchase validation and refund control.
- We do not sell your data. Fields visible to other players are listed separately above.
- Unity Technologies (Vivox): transmission of the optional voice chat — only if you enable voice tables; no audio recordings are kept.
Retention and deletion
- Account data is kept for as long as your account exists.
- In the app, Settings → ACCOUNT → DELETE ACCOUNT permanently deletes your account, chip/progress data, friendships, messages and club membership — this cannot be undone.
- Records we are legally required to keep (e.g. purchase receipts) are stored separately for the legal retention period.
- Conversation records are limited by design (last 50 messages per DM conversation, last 20 people in "recent opponents").
Your rights (GDPR / Turkish DPL art. 11)
Write to us to access, rectify or erase your data, to object to processing, or to request data portability. Requests are answered within 30 days. support@17okey.com
Children
The game is not directed at anyone under 18; virtual chips are not real money and cannot be converted into money.