PRIVACY POLICY
Last Updated: August 31, 2026
Application: Win Lobby
Data Controller: SYKJ GROUP LTD
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. INTRODUCTION
SYKJ GROUP LTD ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application Win Lobby (the "App").
The App is designed to be fully compliant with the Google Play Families Policy and is suitable for users of all ages, including children under the age of 13.
Please read this Privacy Policy carefully. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use the App.
SOCIAL CASINO / VIRTUAL CURRENCY NOTICE
Win Lobby is a free social casino game intended for entertainment only. It is played with virtual coins that have no real-world value: they cannot be purchased, sold, cashed out, exchanged for money or goods, or won as prizes. The App contains no in-app purchases, no deposits, no wagering with real money and no links to real-money gambling services. Practice or success at social casino gaming does not imply future success at real money gambling. The App is intended for an adult audience (18+).
Because there are no purchases and no accounts, we do not collect or process any payment data, financial information, or gambling history.
WHO WE ARE
Controller: SYKJ GROUP LTD
Registered address: 26 Cambridge Road LONDON, SW20 0SF United Kingdom
Privacy contact: support@sykjgroupltd.com
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. INFORMATION WE COLLECT
2.1 Information Collected Automatically
When you use the App, we automatically collect certain technical information. This data is processed by the App and transmitted to our third-party processors (Google Firebase, AppsFlyer and OneSignal) described in Section 4.
• Technical Data Identifiers — AppsFlyer ID, Firebase Installation ID, Firebase Cloud Messaging (FCM) token and OneSignal Player ID (Subscription ID). These identifiers are used for internal analytics, app functionality and push notifications. We do not collect or process advertising identifiers (such as Google Advertising ID) for child audiences.
• Device Information — device model, manufacturer, operating system version, system language, time zone, screen resolution, and mobile network / carrier information.
• App Activity / App Interactions — features you interact with, screens viewed, time spent in the App, session start and end times, in-app events, and navigation patterns.
• Crash Logs and Diagnostics — stack traces, error logs, performance metrics, and application state at the time of a crash.
• Approximate Location — derived from your IP address by our third-party processors to infer country / region. We do not collect precise GPS location.
• Push Notification Tokens — if you grant permission, we collect a Firebase Cloud Messaging (FCM) token and a OneSignal Player ID (Subscription ID) to deliver notifications. You may withdraw this permission at any time in your device settings.
2.2 Information You Provide
The App does not require account registration. We do not collect your name, surname, password, or payment information unless explicitly stated in a specific feature.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. HOW WE USE YOUR INFORMATION
We use the collected information to:
• Operate, maintain, and improve the App and its features.
• Personalise your local in-app experience based on usage patterns.
• Send push notifications and in-app messages via OneSignal and Firebase Cloud Messaging (only with your permission).
• Detect, prevent, and address technical issues, bugs, and security threats.
• Analyse aggregated usage statistics to understand how users interact with the App.
• Comply with applicable laws and legal obligations.
We do not sell your personal data to third parties, nor do we use it for behavioral or interest-based advertising.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. THIRD-PARTY SERVICES
Our App integrates the following third-party SDKs and services that process technical information to provide app functionality. Each provider operates under its own privacy policy and in compliance with applicable children's privacy regulations. We do not integrate advertising SDKs that perform behavioral or interest-based advertising.
• Google Firebase (Google LLC / Google Ireland Limited)
Services used: Firebase Analytics, Firebase Crashlytics, Firebase Remote Config, Firebase Cloud Messaging (push notifications), Firebase Installations.
Data collected: Firebase Installation ID, FCM token, device and OS information, app version, crash logs, diagnostics, app interactions, approximate location (IP-based).
Purpose: internal app analytics, crash reporting, feature configuration, push delivery.
Privacy Policy: https://policies.google.com/privacy
Data processing terms: https://firebase.google.com/terms/data-processing-terms
• AppsFlyer Ltd
Services used: mobile attribution SDK, marketing analytics, campaign measurement, install referrer tracking.
Data collected: AppsFlyer ID, device and OS information, IP address, approximate location (country / region derived from IP), install and in-app events, app interactions, campaign / referrer parameters.
Purpose: install measurement and app analytics (no advertising identifiers, no interest-based advertising).
Privacy Policy: https://www.appsflyer.com/legal/services-privacy-policy/
Opt-out: https://www.appsflyer.com/optout
• OneSignal, Inc.
Services used: push notification delivery SDK, notification scheduling, audience segmentation, delivery analytics.
Data collected: OneSignal Player ID (Subscription ID), push notification token, device and OS information, app language, time zone, country (derived from IP), notification interaction events (delivery, open, dismiss).
Purpose: delivery of push notifications and in-app messages, notification analytics.
Privacy Policy: https://onesignal.com/privacy_policy
We encourage you to review the privacy policies of these third-party providers to understand how they handle your data.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4A. DATA SAFETY SUMMARY (Google Play)
For transparency and consistency with our Google Play Data Safety declaration, the following table summarises data collected and shared by the App:
Data type | Collected | Shared | Purpose
───────────────────────────────────┼───────────┼────────┼─────────────────────────────────
Device or other IDs | Yes | Yes | Analytics, App Functionality
App interactions | Yes | Yes | Analytics
Crash logs | Yes | Yes | App functionality, Diagnostics
Diagnostics / Performance | Yes | Yes | App functionality, Diagnostics
Approximate location (from IP) | Yes | Yes | Analytics
Other app performance data | Yes | Yes | Analytics
Security practices:
• All data is encrypted in transit using industry-standard TLS / HTTPS.
• You can request that your data be deleted by contacting us (see Section 12).
• We comply with the Google Play Families Policy and do not collect or share advertising identifiers for personalized ads.
• Data collection is limited to what is strictly necessary for the App's core functionality and stability; you may clear the application cache or uninstall the App at any time.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. LEGAL BASIS FOR PROCESSING (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:
• Legitimate Interests — to operate and improve the App, detect fraud, and ensure security.
• Consent — for push notifications and internal analytics (you may withdraw at any time).
• Legal Obligation — when required to comply with applicable law.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.
Technical identifiers used by our SDKs are retained in accordance with the respective provider's standard retention policies.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. YOUR RIGHTS
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
• Right of Access — to obtain a copy of the personal data we hold about you.
• Right to Rectification — to correct inaccurate or incomplete data.
• Right to Erasure — to request deletion of your personal data ("right to be forgotten").
• Right to Restriction — to request that we limit how we use your data.
• Right to Objection — to object to processing based on legitimate interests.
• Right to Data Portability — to receive your data in a structured, machine-readable format.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at support@sykjgroupltd.com. We will respond within 30 days of receiving your request.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8. CHILDREN'S PRIVACY
The App is intended for a general audience and is designed to be fully safe for children (category 3+). We comply strictly with the Google Play Families Policy, COPPA (Children's Online Privacy Protection Act) in the United States, and the GDPR provisions regarding children in the EEA / UK.
Because the App does not include any third-party SDKs for behavioral advertising, we do not knowingly collect, transmit, or share personal data or persistent advertising identifiers from children. We only process limited technical and infrastructure identifiers (such as Firebase IDs) strictly necessary for internal operations and app support. If you are a parent or guardian and believe your child has provided personal information contrary to this policy, please contact us at support@sykjgroupltd.com and we will take steps to delete it.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9. DATA SECURITY
We implement commercially reasonable technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/HTTPS) and restricted access controls.
However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home country. Where we transfer data outside the EEA or the UK, we ensure appropriate safeguards are in place — such as the European Commission's Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Addendum — so that your data remains protected to the standard required by applicable law.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy.
Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
12. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
SYKJ GROUP LTD
Registered address: 26 Cambridge Road LONDON, SW20 0SF United Kingdom
Email: support@sykjgroupltd.com
Phone: +447537180871
We will respond to all legitimate enquiries within 30 days.