1. Who we are
WBD Technologies LTD operates GGSHARK GAMES, the VELES: GOD OF FORTUNE Android game and this website. In this policy, “we” and “us” mean WBD Technologies LTD. For privacy questions or requests, email office@ggshark.com.
2. Information we handle
- Guest accounts and profiles: a generated player ID, nickname, selected avatar, account creation date and your public-sharing preference. Playing as Guest still creates a server-side profile when the account service is available.
- Optional sign-in: if you choose Google sign-in when available, we receive your Google account identifier and verified email address. Google ID tokens and a one-time nonce are processed to verify the sign-in. If you choose email sign-in when available, we use your email address, verification challenge and a hashed one-time code. We do not receive your Google password.
- Game progress and social features: saved game state, virtual balance, progression, achievements, committed round records, virtual stake and win information, tumble counts, weekly Fortune Points, leaderboard entries and Fortune Moments.
- Security and synchronization: account/session identifiers, a randomly generated installation identifier, round sequence counters, signed receipts, round validation claims and security events. Integrity-related context may be sent by supported builds; this is not a claim that a production device-attestation service is active.
- Website and API traffic: IP address, requested URL, request time, browser or app user-agent, response status and related technical request information. Hosting and network providers also handle traffic metadata.
- Support: your email address and information you choose to send when contacting us. Please do not send passwords, sign-in tokens or verification codes.
3. Why we use information
We use this information to run and protect the website and game; create and authenticate accounts; link accounts; save and synchronize progress; deliver requested sign-in codes; calculate and display social rankings; publish the Fortune Moments you choose to share; prevent duplicate or altered round submissions; troubleshoot failures; respond to requests; and meet applicable legal obligations.
Where applicable data-protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing it, your consent where required, and compliance with legal obligations. We do not sell personal information or use Google user data for advertising or to train generalized AI models.
4. Google sign-in and your choices
Google sign-in is optional and is shown only when configured. We use basic identity permissions to verify your identity and connect you to your game account. Our backend stores your Google account identifier and email address; it does not store your Google password or request access to Gmail, Drive, Contacts or Calendar. Google may include basic profile claims in a sign-in token, but our account integration does not save your Google profile name or picture.
Google user data is used only for the disclosed authentication and account functions. It is not sold, used for targeted advertising or transferred for unrelated purposes. Our use of information received from Google APIs follows the Google API Services User Data Policy, including applicable Limited Use requirements.
You may revoke VELES access in your Google Account connections. Revocation does not itself delete your VELES account or its data; see account deletion. Guest play does not require Google sign-in.
6. Storage, retention and security
Account, cloud-save, round and related security records are stored in our server database and retained while the account exists, unless removed earlier for operational reasons. The current database does not automatically delete inactive accounts. Active session credentials expire after 30 days, although expired session rows may remain until the account is deleted. OTP challenges expire after 10 minutes; Google sign-in nonces expire after 5 minutes. Temporary rate-limiting records expire automatically.
Deleting an account removes its active database record and related cloud saves, sessions, rounds, social moments and account-linked security records. Copies in rotating local database backups age out, normally within nine days. Technical access logs are retained until log rotation replaces them; current rotation is size-based, not a fixed number of days. Support correspondence is retained as needed to handle the request and applicable obligations. If a specific legal obligation requires longer retention, we limit the retained information to that purpose.
Progress, preferences and session data are also stored on your device. Deleting the online account does not erase the local game save. Use Android’s app storage controls or uninstall the app to remove device-local data; any Android or device-provider backup is controlled separately by your device settings.
We use HTTPS, hashed authentication tokens, restricted server access and private database/network connections. No system can guarantee absolute security. Providers and infrastructure may process data outside your country; applicable data-transfer safeguards and rights depend on your location.
7. Your controls and privacy requests
You can edit your nickname/avatar and change public Fortune Moments sharing in the app, use Guest play, sign out, or delete the online account. For access, correction, deletion, portability, objection or restriction requests where available under applicable law, contact office@ggshark.com. We may need reasonable proof of account ownership before disclosing or deleting information. We respond within the time required by applicable law. You may also complain to your local data-protection authority where that right applies.
See our dedicated account and data deletion page for both in-app instructions and an external email request route.
9. Adults and policy changes
VELES is intended for adults aged 18 or older and is not directed to children. If you believe a child has provided information, contact us so we can investigate and remove it where appropriate.
We update this policy when the service or our data practices change. The effective date appears above. Material changes will be brought to your attention as required; new uses of Google user data require appropriate updated disclosure and consent.