Bubble Craps — Privacy Policy

Effective Date: April 21, 2026
Last Updated: August 19, 2026

This Privacy Policy applies specifically to Bubble Craps, a mobile game published by Tappy Games, LLC ("Tappy Games," "we," "us," or "our"). It supplements and (for Bubble Craps) takes precedence over the general Tappy Games Privacy Policy. By using Bubble Craps, you agree to this Policy. If you do not agree, do not use Bubble Craps.

1. Who We Are

Tappy Games, LLC publishes Bubble Craps and related services (the "Service"). Contact us at privacy@tappygames.com for data-protection inquiries. The Service is directed to a United States audience.

2. Information We Collect

2.1 Information you provide

Account information: display name, device identifier, and platform account (Game Center ID or Google Play Games ID) when you sign in.
Support communications: messages, screenshots, or other content you send when contacting support.
Identity verification information: for Sweeps Coins prize review, we may request legal name, date of birth, residential address, a government-issued ID image, and confirmation that the payout destination belongs to you. Until a dedicated verification provider is introduced, requested documents are submitted by replying to our KYC email and are manually reviewed by authorized Tappy Games personnel. Do not send a Social Security number, password, full bank account number, or full payment-card number through this process.
Payment information: we do not collect or store full payment card numbers. Purchases are processed by Apple, Google, or our payments partner (RevenueCat); we receive only a confirmation token, product identifier, and purchase amount.

2.2 Information collected automatically

Device data: device model, OS version, unique device identifier (IDFA/AAID where permitted), app version, language, time zone, and crash logs.
Gameplay data: bets placed, dice rolls, chip and currency balances, session duration, features used, and in-app events.
Connection and approximate-location data: IP address and related network information. We may derive country or state from IP when a location service is configured, for eligibility, security, and fraud review.
Advertising identifiers: where permitted and where you have consented (App Tracking Transparency on iOS), for ad personalization and measurement.
Cookies and similar technologies: on our website and within the app, for session management, analytics, and advertising.

2.3 Information from third parties

Platform sign-in: verified platform identifier from Game Center or Google Play Games.
Verification provider: if a third-party identity provider is introduced, we may receive a verification result and related review information as disclosed at that time.
Advertising and analytics partners: aggregated reports about ad delivery and performance.

3. How We Use Your Information

Create and operate your account.
Deliver the Service and provide customer support.
Process in-app purchases and grant Gold Coins.
Operate the sweepstakes, including granting Sweeps Coins, validating eligibility, and processing redemption requests.
Verify your identity for redemption, detect fraud, and comply with applicable laws.
Determine geographic eligibility and enforce state and country exclusions.
Monitor, analyze, and improve the Service.
Send service-related notices (receipts, security alerts, policy updates).
With consent where required, send promotional communications and push notifications, which you can opt out of at any time.
Serve and measure advertisements where applicable.
Enforce our Terms of Use, detect abuse, prevent cheating, and protect game integrity.
Comply with legal obligations, including tax reporting, court orders, and regulatory requests.

4. Legal Bases (EU/UK users)

Where the GDPR or UK GDPR applies, we rely on: contract (to provide the Service you requested), legal obligation (tax and regulatory duties), legitimate interests (improvement, fraud prevention, security), and consent (marketing and advertising identifiers where required). You may withdraw consent at any time.

5. How We Share Your Information

We do not sell your personal information for money. We share information as follows:

5.1 Service providers

Cloud hosting and database: Fly.io and other hosting providers.
Purchase processing: RevenueCat, Apple, Google.
Analytics and crash reporting: Sentry and other analytics providers.
Advertising: Google AdMob and mediation partners.
Geographic eligibility: an approved IP-geolocation provider if and when configured.
Identity verification: current manual review through the company-managed KYC email workflow; a third-party provider will be identified before use.
Prize fulfillment: currently handled manually using an available electronic payout method accepted by the participant.
Fraud and compliance review: Sponsor's internal systems and manual review.
Email and push delivery: Postmark, Firebase Cloud Messaging, and Apple Push Notification service where applicable.

5.2 Legal and safety

We may disclose information to comply with law, enforce our Terms, investigate fraud or abuse, protect our rights and users, and in connection with a merger, acquisition, or sale of assets.

5.3 Advertising partners

We may share device identifiers and limited usage data with advertising partners for ad serving and measurement. You can limit this through your device's advertising settings and the App Tracking Transparency prompt on iOS.

6. Your Rights

6.1 All users

Contact privacy@tappygames.com to request a copy, correction, deletion, opt-out of marketing, or restriction of certain uses. We may retain information needed for legal obligations, fraud prevention, disputes, accounting, or enforcement of an account restriction.

6.2 California residents (CCPA/CPRA)

California residents have the right to know, delete, correct, opt out of sale or sharing of personal information, limit use of sensitive personal information, and not be discriminated against for exercising these rights. Email privacy@tappygames.com to exercise these rights. We will verify your identity.

Categories of personal information collected in the last 12 months: identifiers, commercial information, internet/network activity, geolocation (approximate, from IP), inferences, and (for redemption) sensitive personal information (government ID, financial account information).

"Sale" and "sharing": we do not sell personal information for money. Advertising disclosures and choices depend on device settings, consent prompts, and applicable law. California residents may also contact privacy@tappygames.com to exercise an opt-out right.

6.3 EEA, UK, and Switzerland users

You have additional rights under GDPR and UK GDPR, including data portability, objection to processing, restriction of processing, and the right to lodge a complaint with your national supervisory authority.

6.4 Other jurisdictions

Residents of Virginia, Colorado, Connecticut, Utah, and other jurisdictions with comprehensive privacy laws have substantially similar rights and may exercise them at privacy@tappygames.com.

7. Children

Bubble Craps is not directed to, and we do not knowingly collect personal information from, children under 18. You must be at least 18 to use the Service, and at least 21 to redeem Sweeps Coins. If we learn we have collected information from a person under 18, we will delete it promptly. Contact privacy@tappygames.com if you believe a child has provided information.

8. Data Retention

We retain information for as long as reasonably necessary to operate the Service, maintain game and financial integrity, complete identity and prize review, resolve disputes, enforce agreements, and satisfy accounting, tax, legal, or regulatory requirements. Email-submitted KYC documents may remain in the managed mailbox and associated records during the applicable review and retention period. Access is limited to personnel authorized to perform the review. We delete or de-identify information when it is no longer reasonably needed, subject to backups and legal holds.

9. Security

We use administrative and technical safeguards designed for the sensitivity of the information, including encrypted transport, access controls, and operational logging where applicable. Ordinary email is not a dedicated identity-document portal and carries additional risk; provide only the information specifically requested in the KYC email. No system is perfectly secure.

10. International Data Transfers

We are based in the United States and process data in the U.S. and in other countries where our service providers operate. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect data transferred outside the EEA, UK, or Switzerland.

11. Advertising

Bubble Craps displays advertisements including interstitial, banner, and rewarded video ads. You can limit personalization via your device's operating-system advertising settings. Users with an active "Remove Ads" subscription will not see advertisements.

12. Third-Party Services

The Service may contain links to third-party sites or services. This Privacy Policy does not apply to them. Review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last Updated" date and, for material changes, provide additional notice. Continued use after an update constitutes acceptance.

14. Contact Us

Tappy Games, LLC
Attn: Privacy
Email: privacy@tappygames.com
Website: www.tappygames.com