Privacy Policy

Dear User, thank you for choosing Cloud Joy Games.

Below is our Privacy Policy (hereinafter referred to as the "Privacy Policy"), which explains how we process your personal data, with whom we share it, and how long we retain it. You will also learn about the rights you have and how to exercise them.

This Privacy Policy applies to the electronic services provided by HONG KONG ZHONGYUEYUN TECHNOLOGY CO., LIMITED (hereinafter collectively referred to as "Cloud Joy Games" or "we"), including in the form of mobile games and mobile applications, as well as services provided through our website or third-party websites such as Facebook (hereinafter referred to as the "Services").

Please read the Privacy Policy and the accompanying Terms of Service carefully.

1. Who Do We Share Data With? Meet the Personal Data Controller

Below are the name and detailed contact information of the entity acting as the personal data controller.

Controller Name: HONG KONG ZHONGYUEYUN TECHNOLOGY CO., LIMITED

Email: support@mhfish.com

2. Contact Us

We welcome you to contact us, and we will do our best to provide you with a satisfactory response.

You can reach us through the following methods:

Send an email to support@mhfish.com

3. Data Protection Officer

Cloud Joy Games has appointed a Data Protection Officer. To request deletion of personal data or to raise any questions regarding the processing of personal data, you may contact the Data Protection Officer via email.

Personal Data Controller

Cloud Joy Games

Email: support@mhfish.com

4. For What Purposes and on What Legal Bases Do We Process Personal Data?

We process your personal data primarily to fulfill the contract you entered into with Cloud Joy Games by accepting the Terms of Service. We need your personal data and other information to manage game user accounts, enable you to connect with other players, update player profiles, and provide other game-related services. In this case, the legal basis for processing personal data is the necessity of contract performance.

We may also process your personal data for other purposes, such as:

Fulfilling legal obligations, such as those related to in-game payments;

Processing and verifying payments and handling complaints related to purchase transactions;

Player services, i.e., answering questions, messages, live chat support, and providing technical support;

Conducting marketing activities, including activities based on profiling results, i.e., recommending other Cloud Joy Games games that may interest players and providing personalized marketing content;

Organizing and conducting competitions;

Improving the quality of the Services provided, including ensuring players enjoy a safe gaming environment: sending updates, security alerts, and other messages from the technical support team, and preventing system attacks;

Developing and improving the Services and player experience;

Determining, investigating, and defending against legal claims.

5. What Personal Data We Collect

The types of data we collect depend on how you interact with us, the services you use, and the authorization choices you make. When you use our services, we obtain your information through multiple channels and methods, including information you actively provide, system-automatically collected information, third-party data source information, and derived information generated based on existing data.

The categories of personal data we obtain are determined by your behavior in using the App and services. The following lists all categories of personal data we collect and their specific content. The data statistics period includes information generated within the past 12 months.

(I) Information You Actively Provide

We collect personal data that you actively submit to us, as shown below:

Contact Information: Name, username/nickname, date of birth, gender, email, mailing address, phone number;

Content and Files: Avatar images you upload when using the App; emails and various communication messages you send to us will be retained;

Payment and Transaction Information: Transaction details generated when you make in-app purchases or activate service subscriptions, including amounts, payment methods, and transaction records generated through third-party payment channels such as Google Play Store and Apple App Store;

Customer Service Communication Information: All data you submit when contacting customer service, including consultation text, images, other attachments, and user ID and character ID used to identify accounts.

(II) System-Automatically Collected Information

During your use of our services, the system automatically collects certain information, as shown below:

Device Identification and Device Information: Internet Protocol address (IP address), unique device identifiers (device serial number, Android ID, advertising identifier IDFA, Google advertising identifier GAID, device vendor identifier IDFV, open advertising identifier OAID, Android advertising identifier AAID, MAC address), device brand, device name, model, system type, system detailed settings and version; device operating system, browser and other software types, versions, languages, and configuration settings. See the "Internet Storage Technology / Mobile Identifiers" section below;

Log Information: To identify abnormal user behavior, network-related data is collected: IP address, carrier information, network access type and connection status, application launch records, router identification information (BSSID, SSID, MAC address);

Application Information: To detect application execution anomalies, collected information includes installation package name, application name, version number, application signature, and process name;

Geolocation Information: Based on device and App permission settings, geolocation data is collected when you use the App and online services;

Usage Behavior Data: Automatically records your operation traces on the official website, App, and linked products, including referral web page addresses, browsed pages, page dwell time, access time, and all your operational behaviors within the product;

Sensor Data: Based on device permission settings, reads data from device motion sensors, location sensors, and environmental sensors for security verification, anti-cheat detection, and service optimization.

(III) Derived Information Generated from Existing Data

We use automated means to derive information based on collected data, including user profile data (age, gender), preferences and characteristic inferences (collectively, "Derived Information"). For example: estimating your approximate city, province, and country through IP address.

(IV) Information Obtained from Third-Party Channels

We also obtain any of the above categories of information from third-party organizations. Third-party channels include:

Data Service Providers: Data aggregation platforms used to supplement our own data;

Third-Party Partner Platforms: Third-party applications and social platforms that you log into or link through our services. For example, when you log into our App using a Facebook account, Facebook will share your name, linked email, avatar, and friends list with us; if you link a Google account, we may obtain that platform's personal data;

Co-Brand Partners: Enterprises that jointly launch co-branded services and conduct joint marketing;

Service Providers: Third-party organizations commissioned by us to collect and provide data, such as geolocation service providers via IP;

Public Data Sources: Public information channels such as government public databases.

You may choose to refuse to provide personal data, and you may also disable some automatic data collection functions through browser and system settings. However, if you refuse to provide or disable information collection permissions necessary for a service, the corresponding functions may not be available or may malfunction.

6. How Long We Store Personal Data

The retention period for personal data depends on the purpose for which we obtained the data. Most importantly, we will continue to store your personal data as needed to provide the Services.

We may also store your personal data during the period of maintaining legitimate interests related to data processing, or until the time specified by law.

If necessary to protect our rights, we may also extend the retention period for personal data.

Players may delete their game accounts at any time. In such cases, we will delete personal data, except for personal data that must be stored to comply with legal requirements or to maintain our legitimate interests in determining, investigating, and defending against legal claims.

7. Account Deletion and Data Erasure

In-Game Account Deletion Process

To delete your game account, please follow these steps:

Tap the avatar in the upper-left corner of the game screen > Settings > User Center > Account Deletion, and submit a deletion request following the instructions.

Deletion Process Details

After submission, a 30-day cooling-off period will begin. During this period, logging into the game will cancel the deletion request;

Upon expiration, we will permanently erase all your game saves, character data, Facebook/Apple/Google login binding information, advertising attribution records, crash logs, and other personal data;

Account deletion will not automatically cancel App Store/Google Play subscriptions. You must manually go to the corresponding account management page to terminate subscription charges;

When deleting an account logged in with Apple, the system will simultaneously revoke the Apple ID authorization token and will no longer collect your Apple account information.

If you wish to request account deletion or data erasure through other methods, you may also submit a request by sending an email to support@mhfish.com. To the extent permitted by law, we reserve the right to charge service fees for or directly reject unreasonable or repeated requests; if the information provided violates laws, infringes on others' privacy rights, or we are unable to verify the applicant's identity, we may also refuse to process the request.

8. With Whom We Share Personal Data

We only disclose players' personal data under the following circumstances:

Cloud Joy Games' Contracted Partners

Cloud Joy Games uses the services of its partners. Partners only process player data in accordance with Cloud Joy Games' requirements and instructions to provide the Services. Our partners include marketing agencies, other entities that assist us in conducting marketing activities, external IT service providers (including IT system providers), entities that assist us with communications, entities that provide consulting, advisory and auditing services, entities that provide legal, tax or accounting support services, entities that provide postal or shipping services, online payment platform operators, and entities that cooperate with us in sales.

Our services include third-party features such as social media tools, APIs or SDKs, and in-game advertisements. These partners may obtain your personal data. These entities process the personal information they obtain in accordance with their own privacy policies and principles. We recommend that you read these documents to understand in detail how they handle personal data:

Appsflyer - https://www.appsflyer.com/legal/privacy-policy/

Google Firebase - https://firebase.google.com/support/privacy

Meta - https://developers.facebook.com/terms/dfc_platform_terms/

Unity - https://unity.com/legal/privacy-policy

Admob - https://policies.google.com/technologies/ads

Google Play Games - https://policies.google.com/privacy

Apple - https://www.apple.com/legal/privacy/

Other Entities

In the event of a merger, sale of assets, financing, or acquisition of all or part of our business by another company, we may share player-related information as a result. If there is a change in the ownership or user of player personal data, players will be notified via email and/or in the Services.

Social features (such as forums or chats) are important elements of our games. When players use these features, other players and users may be able to view their personal data and in-game activity data, and read their posts.

Information shared by players will also be public, which means that not only might we collect and use information shared by players, but in some cases, other parties who can access such information without the user's knowledge may also collect and use it. It is entirely up to the player to decide what information to share with other players. Cloud Joy Games does not share any player data with other players.

9. Transferring Personal Data to Other Countries/Regions

We provide Services worldwide, and to give players the best experience, we may transfer players' personal data to different countries/regions. Data protection laws in other countries/regions may differ from those in the player's country/region.

To further protect personal data, we will take additional supplementary measures (such as encryption) as needed to ensure the secure transfer of personal data.

We hereby inform you that you may at any time request to receive a copy of the security measures we have taken in an appropriate document form. To do so, please contact us at the following email address: support@mhfish.com.

10. Your Rights

Players have the following rights:

The right to request access to their personal data;

The right to request correction of their personal data;

The right to request erasure of their personal data;

The right to request restriction of processing their personal data;

The right to request transfer of their personal data;

The right to object to the processing of their personal data.

Even if you have consented to our processing of your personal data, you have the right to revoke this consent at any time. However, this revocation should not affect the lawfulness of our processing of personal data based on your consent before the revocation. If a user revokes consent, prohibiting us from processing specific data, certain full features of the services may not be available or participation in specific activities may not be possible.

In some cases, if player data is linked to the player's account on other websites (especially social network websites and mobile platform operator services), we may technically be unable to completely delete this data.

The exercise of certain rights may be subject to legal provisions or the controller's legitimate interests.

If you believe your rights have been violated or a breach of personal data processing rules has occurred, you have the right to file a complaint with the appropriate supervisory authority. All player requests related to personal data should be sent to support@mhfish.com.

11. EU User Data Protection Rights

If the processing of your personal data is subject to EU data protection regulations, you enjoy the following statutory rights:

The right to request access to, correction of, and deletion of your personal data;

When automated data processing is based on your consent or a contract between both parties, you have the right to obtain a copy of your personal data in an exportable, transferable format;

When data processing is based on your consent, you may withdraw consent at any time (effective only for future processing);

Under specific conditions, the right to object to our data processing and request restriction of the scope of data processing;

French residents may submit specific instructions to us regarding the use and disposition of personal data after death.

To submit a rights request or contact our Data Protection Officer, please use the contact information at the end of this policy. If we act only as a third-party data processor and the data controller is another enterprise, you need to submit the request directly to that data controller. You have the right to file a complaint with the local supervisory authority, but we recommend contacting us first for negotiation.

We collect and process personal data based on the following legal grounds: (1) obtaining your consent; (2) fulfilling the service contract with you; (3) fulfilling legal obligations; (4) our or third-party legitimate interests (not conflicting with your fundamental rights).

Minor's Data Processing: The General Data Protection Regulation (GDPR) sets the minimum age of consent at 16; if EU member state local law sets a lower age standard, the local minimum applies, but no lower than 13. Without verifiable written parental consent, we will not actively process the personal data of minors below the legal age.

12. US and California User Privacy Rights

The processing of California residents' personal information is subject to the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). You enjoy the following statutory rights:

(I) Right to Know

You may request that we disclose all personal information we have collected about you, along with a complete description of information collection, use, disclosure, and sale. This policy already contains most of the relevant information; you may submit a request by sending an email to support@mhfish.com.

(II) Right to Request Deletion

Under statutory circumstances, you may request that we delete all personal information (except for statutory exemption scenarios). Request email: support@mhfish.com.

(III) Right to Correct Information

You may request correction of inaccurate personal information we retain by sending an email to support@mhfish.com.

(IV) Right to Opt-Out of Data Sale/Sharing

You may permanently disable our subsequent sale and sharing of your personal information through two methods: (1) Adjust device ad tracking settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads > Reset Advertising ID); (2) Send an email to support@mhfish.com with the subject line "Do Not Sell/Share My Personal Information".

(V) Right to Limit Use of Sensitive Information

When applicable conditions are met, you may request that we limit the use and disclosure of sensitive personal information to only what is permitted under CCPA/CPRA.

(VI) Basic Protection Rights

We must inform you of privacy processing rules before/at the time of information collection; when you exercise any of the above statutory rights, we must not discriminate against or treat users differently.

(VII) Right to Appeal

If we deny your privacy rights request, you may send an appeal email to support@mhfish.com with the subject line "Privacy Rights Appeal." We will acknowledge receipt within 45 days and inform you of the appeal outcome.

California Supplementary Regulations

California Shine the Light Law (California Civil Code Section 1798.83): If a California resident provides personal information to a business for personal or household purposes, they may request to know whether the business has provided their information to third parties for direct marketing purposes. We do not make information available to third parties for their direct marketing; to verify compliance, you may send an email inquiry. The law stipulates that each California user may submit only one request per year.

Residents of other US states may exercise corresponding rights under their state's privacy laws by contacting us at support@mhfish.com.

13. UK Supplementary Terms

If you are located in the United Kingdom, the following additional rules apply to the processing of your personal data:

Applicable Law: This privacy policy is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018;

Minor Age Restriction: In compliance with the Age Appropriate Design Code published by the UK Information Commissioner's Office, we do not actively collect personal data of UK users under 18 years of age;

Regulatory Authority: You have the right to file a complaint with the UK Information Commissioner's Office (ICO), website: www.ico.org.uk.

14. Obligation to Provide Personal Data

In accordance with relevant personal data protection regulations, our company collects your personal data following the principles of good faith and minimum necessity within the scope of purpose:

Essential Data for Basic Services

To fulfill the service contract, you need to provide minimal data sufficient to identify your account (such as a mobile phone number or email), with which you can use the basic gameplay functions of this game.

Supplementary Data for Paid and Value-Added Services

If you wish to use paid mechanisms, reward redemption, and other value-added services, based on payment security and fulfillment requirements, you may need to additionally provide identity verification or payment instrument-related data. You may choose not to provide such data, but you will not be able to use those value-added services; however, our company will not restrict your use of the game's basic functions as a result.

15. Collecting User-Related Data Through Indirect Means

If a player uses a third-party platform to create or log into their account, chooses to link third-party tools (such as Facebook, Messenger, or Google), or uses the Services through any third-party application (especially when playing our games), we may obtain some user data provided by the suppliers of those third-party applications. The information we obtain depends on the Services used by the user, the third-party applications used, the user's privacy settings, and the user's friends' privacy settings in the third-party application (if applicable). We may collect and store some or all of the following information provided by third-party application suppliers:

Name;

Profile picture, player ID that may be associated with public user information (profile picture) (Facebook ID);

Player's friends list and other public data;

Email addresses provided in the third-party application;

Player's location, and the location of the device used by the user to access the Services;

Gender;

Age;

Information related to other activities conducted through the third-party application;

Other public data provided in the third-party application.

We may also collect data related to players' purchase transactions. If a player makes a payment, our payment partners will collect the billing and payment information needed to process the player's charges. This data may include the player's mailing address, email address, and financial data. Payment partners will not share the player's financial information such as credit card numbers with us, but may share non-financial data related to the player's purchase transactions, such as the player's name and purchased items.

If a player plays a Cloud Joy Games game linked to a third-party application or its platform (such as Facebook, Apple, or Google), all purchase transactions made by the player will be processed by the respective third-party application and will be subject to the respective third-party's terms of service and privacy policy. Cloud Joy Games will not obtain financial data related to the aforementioned purchase transactions, but may obtain non-financial information related to the purchase transactions, such as the player's name and purchased items. The types of information we obtain depend on the game played by the player and the third-party application.

16. Profiling

When players use our Services, we collect data related to their interactions with websites and other players through server logs. To display personalized advertisements based on user preferences or needs, ensure the security of the Services, and analyze and monitor users' use of the Services for various purposes (such as improving our games), we may automatically profile and categorize all collected user-related data (information provided by users may be linked to their player ID, IP address, or device ID). We may also conduct marketing activities to provide users with personalized offers and benefits. When preparing for such activities, we analyze users' data and behavior, and based on the analysis results, we conduct various activities, such as determining offer content and/or whether to provide specific (special) offers to users. The legal basis for this type of personal data processing is the service contract (contract performance) and our legitimate interests.

If data processing (profiling) is based on our legitimate interests, users have the right to object to such data processing at any time based on their specific situation. In such cases, unless Cloud Joy Games provides compelling legitimate grounds for the data processing that override the user's interests, rights, and freedoms, or we must process data to establish, conduct, or defend against legal claims, Cloud Joy Games has no right to process (profile) user data.

If we profile user data for direct marketing purposes, users have the right to unconditionally object to such data processing at any time. In such cases, regardless of our interests, rights, and freedoms, we will no longer process users' personal data for such purposes.

17. Push Notifications in Games

We may send push notifications to players through the game to provide information about game updates and new records, as well as to send other Service-related notifications that may be important to players. Players may at any time disable the relevant settings on their devices to opt out of receiving such notifications.

18. User Data Security

To ensure players enjoy a safe gaming experience, we continuously develop and adopt management, technical, and physical security measures to prevent user data loss and unauthorized access, misuse, and modification by others.

However, please note that none of these measures can guarantee that the data users provide to us is absolutely secure. No server, communication network, or internet data transmission technology is zero-risk in terms of security. Users may decide for themselves whether to provide data to us. If they decide to provide it, users must bear the risk of sharing data.

19. Age Restriction

The use of this Service is limited to natural persons who have reached 18 years of age or the legal age of majority stipulated by the applicable law of your place of residence (hereinafter referred to as the "age of majority"), and who have full capacity to engage in legal acts. Those who have not reached the age of majority may not use this Service.

Our company strictly prohibits the knowing collection, gathering, or attempted acquisition of any personal data from persons who have not reached the age of majority; nor will it knowingly target persons who have not reached the age of majority for advertising or display targeted advertisements to them.

Persons who have not reached the age of majority should not send or provide any personal data to our company in any way, including but not limited to name, address, phone number, email address, and other information that can identify an individual.

If our company discovers that it has inadvertently collected personal data from a person who has not reached the age of majority, it will immediately initiate disposal procedures and delete such data as soon as reasonably practicable. If you have reasonable grounds to suspect that our company holds personal data provided by a person who has not reached the age of majority, or personal data related to a person who has not reached the age of majority, please contact us immediately through the contact methods published in this Service.

20. Internet Storage Technology / Mobile Identifiers

We use internet storage technologies such as mobile identifiers in the game for the following purposes:

Enabling players to use the game and its features;

Ensuring game security;

Improving game quality;

Conducting analytical activities to improve the game;

Conducting marketing activities;

Sending push notifications to players;

Enabling players to interact with each other;

Processing transactions.

The use of online storage technology is a common practice among mobile game providers. The technologies we use will not have any negative impact on your device, so you do not need to worry about device security. Furthermore, we only obtain basic data necessary to provide services through the technologies we use, and will not obtain any other unnecessary information.

Cookies and Similar Technologies

Cookies: Small text files sent by websites to browsers and stored on your device. When the browser accesses the same domain server again, the server can read the cookie content. Cookies contain a string of characters that can uniquely identify the device and store other information, enabling the server to identify the same browser over time.

Web Beacons: Electronic images embedded in web pages or emails (single-pixel transparent GIF images). When a browser opens a page/email containing a beacon, it automatically connects to the server that owns the image, and the server can record device information and read/write its own cookies.

Software Tools: Built-in programs integrated into the App to implement specific functions.

Mobile Analytics/Advertising Identifiers: Device-specific identifiers generated by iOS and Android systems that can be called and used by Apps, functioning similarly to website cookies. Built-in programs in our App support reading such device identifiers by us and third-party data analysis and advertising partners.

Related Permission Controls

Cookie Management: Most browsers allow cookies by default. You can delete or reject cookies in browser settings; after disabling, some website functions may not work; deleting cookies will simultaneously clear stored preferences and ad settings, requiring reconfiguration.

Mobile Advertising Identifier Management: Both Android and iOS systems support resetting advertising identifiers and limiting cross-app tracking.

Email Web Beacon Management: Mainstream email clients can disable automatic image loading to block embedded email beacons.

For further information about the technologies we use in the game, please feel free to contact us at any time.

21. SMS

By subscribing to our SMS, you agree to receive our marketing content, product and service information, and surveys.

With your consent to receive SMS, we will process your personal data based on our legitimate interests to send marketing content to you via SMS. Your data will also be used for analytical and statistical purposes. The legal basis for such data processing is our legitimate interest, i.e., analyzing and collecting statistical data to provide targeted content and services to SMS recipients. Additionally, to protect our rights, your data will be processed to establish, assert, or defend against our claims, in which case the legal basis for processing is our legitimate interest.

The subscription process is based on the double verification principle (double opt-in), requiring you to provide your email address in the subscription form, after which a verification email will be sent to the address provided in the subscription form. Clicking the link in the verification email confirms your consent to subscribe.

You may unsubscribe from SMS at any time. Each message sent as part of the SMS contains a link that allows you to unsubscribe.

Your information will be stored for the duration of the SMS subscription or until you unsubscribe, whichever comes first.

22. Updates

We may publish a new version of the Privacy Policy on our website and in related games to update the content of this Privacy Policy. If any material changes are made, we will notify players in the Services before the changes take effect. If users continue to use the Services after the changes take effect, the new version of the Privacy Policy will apply.

Last updated: July 10, 2026

親愛的使用者，感謝您選擇Cloud Joy Games的遊戲。

以下是我們的隱私政策（下稱《隱私政策》），當中說明了我們處理您個人資料的方式，以及這些資料的分享對象和儲存時間長度。您也將了解自己擁有的權利和權利行使方式。

本《隱私政策》適用於HONG KONG ZHONGYUEYUN TECHNOLOGY CO., LIMITED（以下統稱「Cloud Joy Games」或「我們」）提供的電子服務，包括以行動遊戲和行動應用程式的形式，以及透過我們的網站或Facebook等第三方網站提供的服務（以下簡稱「服務」）。

請詳閱《隱私政策》和隨附的《服務條款》。

1. 資料會分享給哪些對象？認識個人資料控制方

以下是擔任個人資料控制方的實體的名稱和詳細聯絡資訊。

控制方名稱：HONG KONG ZHONGYUEYUN TECHNOLOGY CO., LIMITED

電子信箱：support@mhfish.com

2. 歡迎玩家與我們聯絡

歡迎與我們聯絡，我們將盡己所能為您提供滿意的答覆。

您可以透過以下方式與我們聯絡：

傳送電子郵件至support@mhfish.com

3. 資料保護長

Cloud Joy Games已指派資料保護長。如要刪除個人資料或是針對個人資料處理事宜提出任何問題，您可以發送電子郵件與資料保護長聯絡。

Personal Data Controller

Cloud Joy Games

電子信箱：support@mhfish.com

4. 我們會基於哪些目的和哪些法律依據處理個人資料？

我們之所以處理您的個人資料，主要是為了履行您透過接受《服務條款》與Cloud Joy Games簽訂的合約。我們需要您的個人資料和其他資訊以管理遊戲使用者的帳號、讓您與其他玩家聯繫、更新玩家的個人資料，以及提供其他遊戲相關服務。在此情況下，處理個人資料的法律依據為履行合約的必要性。

我們也可能會基於其他目的處理您的個人資料，例如：

履行法律義務，例如與遊戲內付款相關的義務；

處理和驗證付款以及處理與購買交易相關的投訴；

玩家服務，即回答問題、留言、即時通訊支援服務、提供技術支援；

進行行銷活動，包括根據資料剖析結果進行的活動，即向玩家推薦其可能感興趣的其他Cloud Joy Games遊戲、提供個人化行銷內容；

進行及舉辦比賽；

改善所提供「服務」的品質，包括確保玩家充分享有安全無虞的遊戲環境：向玩家傳送更新、傳送安全性快訊和技術支援團隊的其他訊息、防止系統遭到攻擊；

開發及改善「服務」和玩家體驗；

針對法律請求進行決定、調查及辯護。

5. 我們收集哪些個人資料

我們收集的資料類型，取決於您與我們的互動方式、您使用的服務以及您做出的授權選擇。當您使用我們的服務時，我們會透過多種管道、多種方式取得您的資訊，包括您主動提供的資訊、系統自動採集資訊、第三方資料來源資訊，以及基於現有資料推算生成的衍生資訊。

我們取得的個人資料類別，由您使用App及服務的行為決定。以下列明我們收集的全部個人資料類別與具體內容，資料統計週期包含過去12個月內產生的資訊。

（一）您主動提供的資訊

我們會收集您主動提交給我們的個人資料，示例如下：

聯絡資訊：姓名、使用者名稱／暱稱、出生日期、性別、電子信箱、通訊地址、手機號碼；

內容與檔案：使用App時您上傳的頭像圖片；您發送給我們的郵件、各類溝通訊息，我們均會留存；

支付與交易資訊：您進行應用內購、開通服務訂閱時產生的交易明細，包括消費金額、支付方式，以及經由Google Play商店、Apple App Store等第三方支付管道生成的交易記錄；

客服溝通資訊：您聯繫客服時提交的全部資料，包括諮詢文字、圖片、其他附件資料，以及用於識別帳號的使用者ID、角色ID。

（二）系統自動收集資訊

您使用我們的服務期間，系統會自動採集部分資訊，示例如下：

裝置識別與裝置資訊：網際網路協定位址（IP位址）、裝置唯一識別標識（裝置序號、Android ID、廣告識別碼IDFA、Google廣告識別碼GAID、裝置供應商識別碼IDFV、開放廣告識別碼OAID、Android廣告識別碼AAID、MAC位址）、裝置品牌、裝置名稱、機型、系統類型、系統詳細設定與版本；裝置作業系統、瀏覽器及其他軟體的類型、版本、語言、設定配置。詳見下文「網際網路儲存技術／行動識別碼」章節；

日誌資訊：為識別使用者異常操作行為，採集網路相關資料：IP位址、電信業者資訊、網路接入類型與連線狀態、應用啟動記錄、路由器識別資訊（BSSID、SSID、MAC位址）；

應用資訊：用於檢測應用執行異常，採集安裝包名稱、應用名稱、版本號、應用簽章、程序名稱；

地理位置資訊：根據裝置與App權限設定，您使用App及線上服務時採集地理位置資料；

使用行為資料：自動記錄您在官網、App、聯動產品內的操作軌跡，包括跳轉來源網頁位址、瀏覽頁面、頁面停留時長、存取時間，以及您在產品內的全部操作行為；

感測器資料：依據裝置權限設定，讀取裝置運動感測器、位置感測器、環境感測器資料，用於安全核驗、反作弊檢測、服務優化。

（三）基於現有資料推算生成資訊

我們會透過自動化手段，基於已收集資料推導衍生資訊，包括使用者畫像類資料（年齡、性別）、偏好與特徵推斷（統稱「推算資訊」）。例如：透過IP位址推算您大致所在城市、省份、國家。

（四）從第三方管道取得資訊

我們也會從第三方機構取得上述任一類別資訊，第三方管道包括：

資料服務商：資料聚合平台，用於補充我們自有資料；

第三方合作平台：您透過我們的服務登入、綁定的第三方應用與社群平台。例如使用Facebook帳號登入我們的App時，Facebook會向我們共享您的姓名、綁定信箱、頭像、好友列表；若綁定Google帳戶，我們可取得該平台個人資料；

聯合品牌合作方：聯合推出聯名服務、開展聯合行銷的合作企業；

服務供應商：受我們委託採集、提供資料的第三方機構，例如透過IP定位地理位置的服務商；

公開資料來源：政府公開資料庫等公開資訊管道。

您可選擇拒絕提供個人資料，也可透過瀏覽器、系統設定關閉部分自動資料採集功能。但如果您拒絕提供、關閉某項服務必需的資訊採集權限，則對應功能可能無法使用或執行異常。

6. 個人資料的儲存時間長度

個人資料的儲存時間長度取決於我們取得資料的目的。最重要的是，我們會為了提供「服務」視需要持續儲存您的個人資料。

我們可能也會在維護與資料處理相關的正當利益期間，或在法律規定的時間點前儲存您的個人資料。

如有必要保護我們的權利，我們也可能會延長個人資料的儲存時間長度。

玩家隨時可刪除自己的遊戲帳號。在這類情況下，我們將刪除個人資料，但為了配合法律條款規定或是維護我們針對法律請求進行決定、調查及辯護的正當利益而必須儲存的個人資料則不在此限。

7. 帳號刪除與資料清除

遊戲內帳號刪除流程

如需刪除您的遊戲帳號，請依照以下步驟操作：

點擊遊戲畫面左上角頭像 → 設定 → 使用者中心 → 帳號刪除，按照指引提交刪除申請。

刪除流程說明

提交後將進入30天冷靜期，冷靜期內登入遊戲可撤銷刪除申請；

到期後我們將永久清除您全部遊戲存檔、角色資料、Facebook／Apple／Google登入綁定資訊、廣告歸因記錄、崩潰日誌等個人資料；

帳號刪除不會自動取消App Store／Google Play訂閱，您需自行前往對應帳戶管理頁面終止訂閱扣費；

使用Apple登入的帳號刪除時，系統將同步撤銷Apple ID授權令牌，不再採集您的Apple帳號資訊。

如需透過其他方式申請帳號刪除或資料清除，您也可發送電子郵件至support@mhfish.com提交申請。在法律允許範圍內，我們有權對不合理、重複申請收取服務費或直接駁回；若提供資料違反法律、損害他人隱私權益，或無法核驗申請人身分，我們亦可拒絕處理。

8. 個人資料的分享對象

我們只會在下列情況下揭露玩家的個人資料：

Cloud Joy Games的簽約合作夥伴

Cloud Joy Games會使用其合作夥伴的服務。合作夥伴只會為了提供「服務」而依據Cloud Joy Games的要求和指示處理玩家資料。我們的合作夥伴包括行銷代理商、協助我們進行行銷活動的其他實體、外部IT服務供應商（包括IT系統供應商）、協助我們處理通訊事宜的實體、為我們提供諮詢、顧問和稽核服務的實體、為我們提供法律、稅務或會計支援服務的實體、提供郵政或運送服務的實體、線上付款平台營運商，以及與我們在銷售領域合作的實體。

我們的服務包括第三方功能，如社群媒體工具、API或SDK，以及遊戲內廣告。這些合作夥伴可能會獲取您的個人資料。這些實體會根據自己的隱私政策和原則對獲取的個人資訊進行處理。建議您閱讀這些文件，詳細瞭解他們如何處理個人資料：

Appsflyer – https://www.appsflyer.com/legal/privacy-policy/

Google Firebase – https://firebase.google.com/support/privacy

Meta – https://developers.facebook.com/terms/dfc_platform_terms/

Unity – https://unity.com/legal/privacy-policy

Admob – https://policies.google.com/technologies/ads

Google Play Games – https://policies.google.com/privacy

Apple – https://www.apple.com/legal/privacy/

其他實體

如果發生合併、出售自家資產、融資，或是其他公司收購我們所有或部分業務的情形，我們可能會因此分享玩家相關資訊。假如玩家個人資料的擁有權或使用者有所異動，玩家將透過電子郵件並／或在「服務」中收到通知。

社群功能（例如論壇或聊天）是我們遊戲的重要元素。當玩家使用這些功能時，其他玩家和使用者或許能查看其個人資料和遊戲內活動資料，以及閱讀其貼文等。

玩家分享的資訊也會公開，這表示不只有我們可能會收集並使用玩家分享的資訊，在某些情況下，能夠在使用者不知情的情況下存取這類資訊的其他人士也可能會收集並使用這些資訊。要與其他玩家分享哪些資訊，完全由玩家自己決定。Cloud Joy Games不會與其他玩家分享任何玩家資料。

9. 將個人資料轉移至其他的國家／地區

我們會在世界各地提供「服務」，而為了讓玩家享有最佳體驗，我們可能會將玩家的個人資料轉移至不同的國家／地區。其他國家／地區的資料保護法可能與玩家所在國家／地區不同。

為了進一步保護個人資料，我們會視需要採取補充性質的額外措施（例如加密），確保個人資料轉移的過程安全無虞。

我們特此通知您，您隨時可以選擇以適當的文件形式接收我們所採取的安全防護措施的副本。為此，請透過以下電子信箱地址與我們聯絡：support@mhfish.com。

10. 您的權利

玩家擁有以下權利：

要求存取其個人資料；

要求更正其個人資料；

要求清除其個人資料；

要求限制處理其個人資料；

要求轉移其個人資料；

反對處理其個人資料。

即使您已同意讓我們處理您的個人資料，您也隨時有權撤銷這項同意聲明。不過，此撤銷決定不應影響我們在您撤銷前根據您的同意聲明處理個人資料的合法性。如果使用者撤銷同意聲明，禁止我們處理特定資料，則可能無法使用某些服務的完整功能或參與特定活動。

在某些情況下，如果玩家資料連結至玩家在其他網站（尤其是社群網路網站和行動平台營運商服務）上的帳號，則技術上來說我們可能無法完全刪除這些資料。

特定權利的行使可能會受限於法律條款或控制方的正當利益。

如果您認為自身權利受到侵犯，或是發生違反個人資料處理規則的情形，您有權向適當的監管機關提出申訴。所有與個人資料相關的玩家要求都應傳送至support@mhfish.com。

11. 歐盟地區使用者資料保護權利

若您的個人資料處理行為適用歐盟資料保護法規，您享有以下法定權利：

申請查閱、更正、刪除本人個人資料；

基於您的同意或雙方合約開展自動化資料處理時，您有權取得可匯出、可轉移格式的個人資料副本；

資料處理基於您的同意時，您可隨時撤回同意（僅對未來處理行為生效）；

在特定條件下，反對我們的資料處理、申請限制資料處理範圍；

法國居民可向我們提交身故後個人資料使用處置的專項指示。

如需提交權利申請、聯繫我們的資料保護專員，請使用本政策文末聯絡管道。若我們僅作為第三方資料處理方、資料控制方為其他企業，您需直接向該資料控制方發起申請。您有權向當地監管機構發起投訴，但建議先聯繫我們協商處理。

我們基於以下合法依據收集、處理個人資料：①取得您同意；②履行與您的服務合約；③履行法定義務；④我們或第三方合法權益（不與您的基礎權利衝突）。

未成年人資料處理：通用資料保護條例（GDPR）規定最低授權年齡為16歲；若歐盟成員國本地法律設定更低年齡標準，則遵循當地下限，但最低不得低於13歲。若無監護人可核驗的書面許可，我們不會主動處理低於法定年齡未成年人的個人資料。

12. 美國及加州使用者隱私權利

加州居民個人資訊處理適用《加州消費者隱私法》（CCPA）與《加州隱私權利法案》（CPRA），您享有以下法定權利：

（一）資訊知情權

可申請我們公示全部收集的您的個人資訊，以及資訊採集、使用、揭露、售賣的完整說明。本政策已載明絕大多數相關內容；您可發送電子郵件至support@mhfish.com提交查閱申請。

（二）資料刪除申請權

在法定情形下，您可申請我們刪除全部個人資訊（法定例外場景除外）。申請郵箱：support@mhfish.com。

（三）資訊更正權

可申請更正我們留存的不準確個人資訊，發送電子郵件至support@mhfish.com提交更正申請。

（四）退出資料售賣共享權

您可永久關閉我們後續對您個人資訊的售賣、共享行為，兩種方式：①調整裝置廣告追蹤設定（iOS：設定 → 隱私與安全性 → 追蹤；Android：設定 → Google → 廣告 → 重置廣告ID）；②發送電子郵件至support@mhfish.com，郵件標題註明「禁止售賣／共享我的個人資訊」。

（五）敏感資訊使用限制權

符合適用條件時，您可申請限制我們僅在CCPA／CPRA許可範圍內使用、揭露敏感個人資訊。

（六）基礎保障權利

我們採集資訊前／採集時必須向您公示隱私處理規則；您行使上述全部法定權利時，我們不得區別對待、歧視使用者。

（七）申訴權

若我們駁回您的隱私權利申請，您可發送申訴郵件至support@mhfish.com，標題註明「隱私權利申訴」。我們將在45日內確認收悉，並告知申訴處理結果。

加州補充法規相關說明

《加州陽光揭露法》（加州民法典1798.83條款）：若加州居民因個人、家庭生活向企業提供個人資訊，可申請查詢企業是否將您的資訊提供給第三方用於對方直銷推廣。我們不會向第三方開放資訊用於其直銷推廣；如需核驗合規情況，可發送電子郵件諮詢。法規規定每位加州使用者每年僅可提交一次申請。

美國其他州居民可依據本地州隱私法規行使對應權利，統一透過support@mhfish.com聯繫我們處理。

13. 英國地區補充條款

若您身處英國，個人資料處理額外適用以下規則：

適用法律：本隱私政策受《英國通用資料保護條例》（UK GDPR）與《2018年資料保護法》約束；

未成年人年齡限制：遵循英國資訊專員辦公室發布的《適齡設計規範》，不主動收集18歲以下英國使用者個人資料；

監管機構：您有權向英國資訊專員辦公室（ICO）發起投訴，官網：www.ico.org.uk。

14. 個人資料提供義務

依據個人資料保護法相關規定，本公司遵循誠實信用及目的範圍內最小必要原則收集您的個人資料：

基本服務之必要資料

為履行服務合約，您需提供得以識別帳號身分之最小資料（如行動電話或電子信箱），憑此即可使用本遊戲之基本遊玩功能。

付費及加值服務之補充資料

若您擬使用付費機制、紅利兌換等加值服務，基於金流安全與履約需求，您可能需另行提供身分驗證或付款工具相關資料。您得選擇不提供，惟將無法使用該等加值服務，本公司亦不會因此限制您使用遊戲之基本功能。

15. 透過間接方式收集使用者相關資料

如果玩家使用第三方平台建立或登入其帳號、選擇連結第三方工具（例如Facebook、Messenger或Google），或是透過任何第三方應用程式使用「服務」（尤其是遊玩我們的遊戲），我們可能會取得前述第三方應用程式的供應商提供的部分使用者資料。我們取得的資訊取決於使用者使用的「服務」、使用者所用的第三方應用程式、使用者的隱私設定，以及使用者的好友在第三方應用程式中的隱私設定（如適用）。我們可能會收集並儲存第三方應用程式供應商提供的下列部分或所有資訊：

姓名；

個人資料圖片、可能與公開使用者資訊（個人資料圖片）相關聯的玩家ID（Facebook ID）；

玩家的好友名單和其他公開資料；

各個在第三方應用程式中提供的電子信箱地址；

玩家所在位置，以及使用者用於存取「服務」的裝置所在位置；

性別；

年齡；

與透過第三方應用程式進行的其他活動相關的資訊；

第三方應用程式中提供的其他公開資料。

我們也可能會收集與玩家的購買交易相關的資料。如果玩家進行付款作業，我們的付款合作夥伴會收集處理玩家費用所需的帳單和付款資訊。這些資料可能包含玩家的郵寄地址、電子信箱地址和財務資料。付款合作夥伴不會與我們分享玩家的信用卡號碼等財務資訊，但可能會分享與玩家的購買交易相關的非財務資料，例如姓名和購買的項目。

如果玩家遊玩與第三方應用程式或其平台（例如Facebook、Apple或Google）相連結的Cloud Joy Games遊戲，則玩家進行的所有購買交易將由個別第三方應用程式處理，並適用於個別第三方的服務條款和隱私政策。Cloud Joy Games不會取得與前述購買交易相關的玩家財務資料，但可能會取得與購買交易相關的玩家非財務資訊，例如玩家的姓名和購買的項目。我們取得的資訊類型取決於玩家遊玩的遊戲和第三方應用程式。

16. 資料剖析

當玩家使用我們的「服務」時，我們會透過伺服器紀錄收集其與網站和其他玩家的互動相關資料。為了根據使用者的偏好或需求顯示個人化廣告、確保「服務」的安全，以及基於各項目的（例如改善我們的遊戲）分析及監控使用者的「服務」使用情形，我們可能會自動剖析收集到的所有使用者相關資料並進行分類（使用者提供的資訊可能會連結至其玩家ID、IP位址或裝置ID）。我們也可能會進行行銷活動，向使用者提供個人化優惠和福利。在為這類活動進行準備時，我們會分析使用者的資料和行為，並根據分析結果進行各項活動，例如決定優惠內容和／或是否要向使用者提供特定（特別）優惠。這類個人資料處理行為是以服務合約（履行合約）和我們的正當利益為法律依據。

如果資料處理行為（資料剖析）是以我們的正當利益為依據，則使用者隨時有權基於自身的特定情形反對這類資料處理行為。在這種情況下，除非Cloud Joy Games針對資料處理行為提供凌駕於使用者利益、權利和自由之上、並且具說服力的正當理由，或是我們必須處理資料才能建立、進行法律請求，或是針對法律請求進行辯護，否則Cloud Joy Games無權處理（剖析）使用者資料。

如果我們剖析使用者資料是為了進行直接行銷，則使用者隨時有權無條件反對這類資料處理行為。在這種情況下，無論我們的利益、權利和自由為何，我們都將不再基於這類目的處理使用者的個人資料。

17. 遊戲中的推播通知

我們可能會透過遊戲向玩家傳送推播通知，藉此提供遊戲更新和新紀錄的相關資訊，以及傳送可能對玩家至關重要的其他「服務」相關通知。玩家隨時可在裝置上停用相關設定，選擇停止接收這類通知。

18. 使用者資料安全性

為了確保玩家享有安全的遊戲娛樂體驗，我們持續開發和採用管理與技術方面以及實體的安全防護措施，避免使用者資料遺失，以及遭他人在未經授權的情況下存取、濫用和修改。

不過請注意，這些措施皆無法保證使用者向我們提供的資料絕對安全無虞。沒有任何伺服器、通訊網路或網際網路資料傳輸技術在安全性方面為零風險。使用者可自行決定是否要向我們提供資料。如果決定提供，則使用者必須承擔分享資料的風險。

19. 年齡限制

本「服務」之使用對象，限於已達18歲或您居住地適用法律所規定之法定成年年齡（以下簡稱「成年年齡」），並擁有從事法律行為的充分能力之自然人。未達成年年齡者，不得使用本「服務」。

本公司嚴格禁止在知情之情況下，向未達成年年齡者收集、蒐集或試圖取得任何個人資料；亦不會在知情之情況下，將未達成年年齡者列為廣告投放目標、向其顯示鎖定式廣告。

未達成年年齡者，請勿以任何方式向本公司傳送或提供任何個人資料，包括但不限於姓名、住址、電話號碼、電子信箱地址等可識別箇人身分之資訊。

若本公司發現無意間收集到未達成年年齡者之個人資料，將立即啟動處置程序，並在合理可行範圍內儘速刪除該等資料。如您有合理理由懷疑本公司持有未達成年年齡者提供之個人資料，或與未達成年年齡者相關之個人資料，請立即透過本服務公佈之聯絡方式與我們聯繫。

20. 網際網路儲存技術／行動識別碼

我們會基於以下目的，在遊戲中使用行動識別碼等網際網路儲存技術：

讓玩家能夠使用遊戲及其功能；

確保遊戲安全；

改善遊戲品質；

進行分析活動以改善遊戲；

進行行銷活動；

向玩家傳送推播通知；

讓玩家能夠與彼此交流互動；

處理交易。

使用線上儲存技術是行動遊戲供應商的常見做法。我們使用的技術不會對裝置造成任何負面影響，因此您不必擔心裝置的安全。此外，我們只會透過所使用的技術從您那裡獲取提供服務所需的基本資料，而不會獲取任何其他不必要的資訊。

Cookie及同類技術說明

Cookie：網站發送至瀏覽器、儲存在您裝置中的小型文字檔。當瀏覽器再次存取同一網域伺服器時，伺服器可讀取Cookie內容。Cookie內包含一串字元，可唯一識別裝置，同時儲存其他資訊，使伺服器長期識別同一瀏覽器。

網頁信標：嵌入網頁或郵件的電子圖片（單像素透明GIF圖）。瀏覽器開啟包含信標的頁面／郵件時，會自動連接圖片所屬伺服器，伺服器可記錄裝置資訊、讀寫自有Cookie。

軟體工具：整合於App內、用於實現特定功能的內建程式。

行動端分析／廣告識別碼：iOS、Android系統生成的裝置專屬標識，App可呼叫使用，作用等同於網站Cookie。我們的App內建程式，支援我們及第三方資料分析、廣告合作方讀取該類裝置標識。

相關權限控制方式

Cookie管控：絕大多數瀏覽器預設允許Cookie，您可在瀏覽器設定中刪除、拒絕Cookie；關閉後網站部分功能會失效；刪除Cookie將同步清除儲存的偏好、廣告設定，需重新配置。

行動端廣告識別碼管控：Android、iOS系統均支援重置廣告識別碼、限制跨應用追蹤。

郵件網頁信標管控：主流郵件用戶端可關閉圖片自動載入，即可屏蔽郵件內嵌信標。

如要進一步了解我們在遊戲中使用的技術，隨時歡迎與我們聯絡。

21. 簡訊

訂閱我們的簡訊，即表示您同意接收我們的行銷內容、產品和服務資訊以及問卷調查。

在您同意接收簡訊的情況下，我們將基於我們的合法利益處理您的個人資料，以便在簡訊中發送行銷內容給您。您的資料也將用於分析和統計目的。此類資料處理行為的法律依據是我們的合法利益，即分析和收集統計資料，以便為簡訊接收人提供有針對性的內容和服務。此外，為了保護我們的權利，您的資料將被處理以便針對我們的請求進行確立、主張或辯護，在這種情況下，處理行為的法律依據是我們的合法利益。

訂閱過程基於雙重驗證原則（雙向選擇加入），需要您在訂閱表單中提供您的電子郵件地址，然後驗證電子郵件將會發送到訂閱表單中所提供的地址，點擊驗證電子郵件中的連結即可確認您同意訂閱。

您可以隨時取消訂閱簡訊。作為簡訊組成部分發送的每條訊息都包含一個連結，可供您取消訂閱。

您的資訊將在簡訊持續期間儲存，或直到您取消訂閱為止，時間以先到者為準。

22. 更新

我們可能會在網站和相關遊戲中發布新版《隱私政策》，藉此更新本《隱私政策》的內容。如有做出任何實質修改，我們將在修改內容生效前在「服務」中通知玩家。如果使用者在修改內容生效後繼續使用「服務」，則將適用新版《隱私政策》。

上次更新日期：2026年07月10日