Bid Rivals — Privacy Policy
- Service: Bid Rivals (the "Game" / "Service")
- Operator (data controller): Crowned Games, New South Wales, Australia ("we", "us", "our")
- Privacy contact: crownedgames@protonmail.com
- EU/UK representative: none appointed; contact us at the address above
- Effective date: 30 September 2026
This policy covers only the Service operated by Crowned Games. Valve's own data practices for Steam are governed by Valve's Privacy Policy.
1. Summary
Bid Rivals is an online-only, server-authoritative game. To let you sign in with Steam and to keep your progress, collection, wallet, and purchase history, we store a small amount of data keyed to your Steam ID on our servers. We do not sell your personal data. We do not run ads, and we do not use your data for third-party advertising. You can request a copy of your data or its deletion (Section 8).
2. Who we are
The Service is operated by Crowned Games, based in New South Wales, Australia, acting as the data controller for the personal data described here. You can reach us about privacy at crownedgames@protonmail.com.
3. Data we collect
We collect only what the Service needs to function. We do not ask for your real name, postal address, or payment-card details (Steam handles payment).
| Data | Examples | Where it comes from |
|---|---|---|
| Steam account identifier | Your 64-bit Steam ID. We do not store your Steam persona name, avatar, or friends list. | Steam login (session ticket) and the Steam Web API ownership check |
| Account & gameplay records | Account level and XP, tutorial state, owned characters, costumes, cabinet rooms and other cosmetics, your collection and display board, match history and statistics (matches played, wins, and the other players seated at your tables), account creation time | Generated as you play and stored on our servers |
| Economy / wallet records | Gold wallet balance and the full transaction ledger — each entry records the amount, its source, and a timestamp | Generated by gameplay and purchases |
| Purchase records | Order ID, pack purchased, amount of Gold, price, Steam transaction ID, status, and timestamps | Created when you buy Gold through the Steam Wallet |
| Technical & session data | Session tokens and their revocation counter, and standard server logs (request metadata, IP address, timestamps, diagnostic events) | Generated automatically when your client connects |
We do not collect microphone/voice, precise location, contacts, biometric data, or special- category data. Payment-card data is processed by Valve/Steam and is never received or stored by us.
What other players can see. Other players see an automatically generated name (for example "Bidder 7F3A") — never your Steam name or Steam ID — together with your account level, chosen character and costume, badges, display board, and multiplayer statistics such as matches played and win rate. Players who have shared a table with you can find you in their recent rivals list.
4. Why we use it, and our legal bases
We use the data above to: authenticate your Steam login and verify you own the Game; create and maintain your account; run the server-authoritative economy, matchmaking, and collection; process and reconcile purchases and prevent fraud, chargeback abuse, and cheating; provide support; keep the Service secure and stable; and comply with legal obligations (for example tax/accounting records for purchases).
Where GDPR/UK GDPR applies, our legal bases are: performance of a contract (providing the Game you signed in to play, and processing your purchases), legitimate interests (security, fraud and cheat prevention, service integrity — balanced against your rights), and legal obligation (retaining transaction records). Where required, we rely on consent, which you may withdraw.
5. How the data is shared (third parties)
We share data only with the providers needed to run the Service. We do not sell personal data and do not share it for cross-context behavioral advertising.
- Valve Corporation (Steam): authentication, ownership verification, and payment processing. Your interaction with Steam is also governed by Valve's Privacy Policy and the Steam Subscriber Agreement. Steam transaction IDs we store originate from Valve.
- Hosting provider — Render (Render Services, Inc.): the game's API, multiplayer servers, and managed PostgreSQL database run on Render's infrastructure in Singapore, which stores the data described in Section 3 on our behalf as a processor.
- Other players: only the public profile information described in Section 3.
- Legal / safety: we may disclose data where required by law, to enforce our EULA, or to protect the rights, safety, and security of players, the public, or the Company.
- Business transfer: if the Company is involved in a merger, acquisition, or asset sale, data may transfer to the successor, subject to this policy.
Our servers are located in Singapore, and our providers may also process data in other countries, including the United States. Where the law of your country requires a safeguard for such international transfers (for example transfers from the EU or UK), we rely on an appropriate transfer mechanism such as the Standard Contractual Clauses offered in our providers' data processing terms.
6. Data retention
We keep account, gameplay, and economy data for as long as your account exists so the Service can function. Purchase and ledger records may be retained longer where needed to meet legal, tax, accounting, fraud-prevention, or dispute-resolution obligations. Server logs are kept for a limited period for security and debugging and are then deleted.
When you ask us to delete your account (Section 8), we irreversibly anonymize your personal data within 30 days: your Steam ID is replaced with a random placeholder everywhere it is stored, your profile data is cleared, and every session is signed out. Wallet and purchase amounts are kept only in that anonymized form, because they are accounting records. If you later sign in with the same Steam account, you start a new account.
7. Security
Access to the Service requires an authenticated Steam login, and the economy is server-authoritative so balances cannot be altered from the client. We use session tokens that can be revoked (for example on a ban or a forced sign-out), transport encryption (HTTPS) for client–server traffic, and access controls on the backend. No system is perfectly secure, but we take reasonable measures to protect your data.
8. Your rights and choices
Depending on where you live, you have rights over your personal data. We honor these regardless of location where practical.
EU / UK (GDPR / UK GDPR): access, rectification, erasure ("right to be forgotten"), restriction, objection, data portability, and the right to withdraw consent. You may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA): the right to know/access, delete, and correct your personal information, and the right to opt out of "sale" or "sharing" — we do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising your rights.
How to exercise your rights: email crownedgames@protonmail.com with your Steam ID and tell us what you would like: a copy of your data (we provide a machine-readable export of your account, gameplay, wallet, ledger, and purchase records), a correction, or deletion. Because accounts are keyed to your Steam ID, we will ask you to confirm control of that Steam account before acting. We respond within the period required by applicable law (generally within 30 days for GDPR and 45 days for CCPA, extendable where the law permits).
9. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under the minimum age of digital consent where you live, which is up to 16 in some countries). If you believe a child has provided us data, contact us and we will delete it. Age ratings for the Game are provided through Steam's rating systems (for example IARC).
10. Changes to this policy
We may update this policy as the Service evolves or the law changes. We will post the updated policy and revise the effective date, and will provide additional notice for material changes where required. Continued use of the Service after an update takes effect constitutes acceptance of the updated policy.
11. Contact
Questions or requests: crownedgames@protonmail.com · Crowned Games, New South Wales, Australia.