Privacy Policy

What data do we process?

Account data

• Anonymous player identifier (Firebase uid), the player name you choose, and your avatar.
• If you sign in with Google: the name, e-mail address and profile photo shared by the provider. The e-mail is kept in Firebase Authentication to recognise your account and prevent conflicts across sign-in methods; it is NOT VISIBLE to other players and is never used as your player name.
• If you sign in with Facebook: name and profile photo. We do not request your Facebook friend list or e-mail (only the public_profile permission is used).
• Your friend code (17-XXXXXXXX): a permanent, shareable identifier tied to your account. Nobody can find you by code unless you share it yourself.

Game data

• Chip balance, level/XP, title, game statistics (hands/matches played, penalties).
• Quest, wheel, daily reward, piggy bank and gift records; table participation and match history.
• Fair-play records: how many matches you played with which players and the net chip flow — used only to detect cheating/collusion; identities are masked in reports.

Social data

• Your friend list and friend requests.
• "Recent opponents": players you met at a table, how many hands you played together and when you last met (to make adding friends easier; last 20 people).
• Private messages (DM): only between mutual friends; the last 50 messages per conversation are stored, passed through a profanity filter and limited to 200 characters.
• Table and club chat messages, stickers and quick phrases.
• Your club membership and contribution points; management actions if you are the founder.
• Gift history, players you blocked and reports you filed (the last 5 messages are attached as evidence).
• Voice table (optional): push-to-talk voice chat at every table (all rooms, friend tables and duels). It is off by default; if you enable it, audio is transmitted via Unity Vivox, conversations are not recorded, and the microphone is only active while you hold the talk button. You can mute any player and report voice harassment.
• Table spectating: your friends can watch the open table you are sitting at; a spectator only sees what everyone at the table sees (hands are never visible) and the spectator count is shown to everyone. Private/coded tables cannot be watched.

What is visible to other players?

• Your player name, avatar/photo, level and title are visible to everyone at the table and in lists. Being searchable by your player name is optional: turn it on in Settings → Privacy ("let others find me by my player name"; off by default — your friend code always works). You can also opt out of public leaderboards there.
• While you are seated at a table, your chip balance is visible to the others at that table.
• Your friends additionally see your last-seen time and the public table you are currently sitting at. Private/coded tables are never shown.
• Not visible: your e-mail address, your account identifier, your purchase data, and the tiles in your hand.

Notification data

To send notifications we store your device's notification token (Firebase Cloud Messaging). When you turn notifications off in Settings, the token is deleted.

Advertising data

The game shows rewarded ads (Google AdMob). For serving and measuring ads, AdMob may process your device's Advertising ID and technical data. You can reset the Advertising ID or turn off personalisation in your device settings. Details: Rewarded ad views are verified on our server via Google's signed server-side callback (SSV) to prevent fraud. Google advertising policies.

YouTube API Services

We run an internal tool that uses YouTube API Services to upload our social clips to our own YouTube channel. The tool works only with 17 OKEY's own account; it does not collect, store or share any YouTube data from players. Uploaded video IDs are kept only to avoid uploading the same clip twice and are deleted on request. This use is subject to the YouTube Terms of Service and the Google Privacy Policy; the permissions granted to the tool can be revoked at any time from the Google account permissions page: YouTube Terms of Service · Google Privacy Policy · myaccount.google.com/permissions

Technical data

Device model, operating system, app version, crash logs, session durations, freeze (ANR) measurements and in-game events (analytics).

Purchase data

Payments run through Google Play / App Store; your card details NEVER reach us. We only receive the transaction's validation receipt and order identifier.

What do we use it for?

Running the game (matchmaking, balance, progression, social features), preventing cheating/collusion, fighting harassment and abuse (reports/blocking/filter), fixing crashes and errors, improving the product (aggregated analytics), serving ads, and legal obligations.

Who do we share it with?

• Hosting: Oracle Cloud — Frankfurt / Germany (EU).
• Google Firebase: authentication, notifications, analytics, crash reporting.
• Google AdMob: ad serving and measurement.
• Google Play / App Store: purchase validation and refund control.
• We do not sell your data. Fields visible to other players are listed separately above.
• Unity Technologies (Vivox): transmission of the optional voice chat — only if you enable voice tables; no audio recordings are kept.

Retention and deletion

• Account data is kept for as long as your account exists.
• In the app, Settings → ACCOUNT → DELETE ACCOUNT permanently deletes your account, chip/progress data, friendships, messages and club membership — this cannot be undone.
• Records we are legally required to keep (e.g. purchase receipts) are stored separately for the legal retention period.
• Conversation records are limited by design (last 50 messages per DM conversation, last 20 people in "recent opponents").

Your rights (GDPR / Turkish DPL art. 11)

Write to us to access, rectify or erase your data, to object to processing, or to request data portability. Requests are answered within 30 days. support@17okey.com

Children

The game is not directed at anyone under 18; virtual chips are not real money and cannot be converted into money.