Privacy Policy

Last updated: July 20, 2026 · Applies to the Poki mobile app and its related services

Introduction

This Privacy Policy explains how Poki Games("we", "us", or "our") collects, uses, and protects information when you use Poki (the "Game"), a multiplayer Ludo game for mobile devices. By using the Game, you agree to the practices described in this policy.

If you have questions about this policy or how your information is handled, contact us at jamphel@nomindbhutan.com.

Information We Collect

Account information. You can play as a guest (anonymous account) with no personal information required, or sign in with Google or an email/password. If you sign in with an email or Google account, we collect your email address, and for Google sign-in we may also collect your name and profile picture to pre-fill your in-game display name and avatar. Every account also gets a permanent, auto-generated Player ID used to identify you to other players and to look you up for friend requests.

Profile information. Your display name, chosen or uploaded avatar, and optionally your gender, all of which you can change at any time from your profile.

Gameplay data. Match history, wins, losses, draws, captures, pawns finished, win streaks, and other statistics generated as you play, plus your friends list and any pending friend requests or private match invites.

Voice chat. If you choose to use voice chat during a match, your microphone audio is transmitted in real time to the other players in that match through our voice infrastructure provider. We do not record or store voice chat audio; it exists only for the duration of the live conversation. You can mute yourself or leave voice chat at any time.

Photos. If you upload a custom avatar, we access your camera or photo library (with your permission) and store the selected image.

In-game currency and payment information.Your Chip balance, which portion of it is a non-withdrawable sign-in or bonus credit, and the full history of changes to it (e.g. match winnings, purchases, signup bonus, bonus grants). If you request to withdraw Chips, we also collect the details needed to process that request: the Chip amount, your bank name, and your account number. See "In-Game Currency and Payments" below for more detail.

Device and technical information. Basic technical information such as device type, operating system, app version, and IP address, collected as part of normal app and server operation for security, debugging, and abuse prevention.

How We Use Your Information

  • To create and maintain your account and let you sign in across sessions.
  • To operate core gameplay: matchmaking, live match state, scoring, and statistics.
  • To provide social features: friends, friend requests, and private match invites.
  • To enable real-time voice chat between players in the same match.
  • To process purchases and withdrawals of in-game Chips, including manually verifying withdrawal requests.
  • To detect, investigate, and prevent fraud, cheating, and abuse.
  • To provide customer support and respond to your requests.
  • To maintain the security, stability, and performance of the Game.

In-Game Currency and Payments

Poki uses a virtual in-game currency called Chips. New accounts receive a 500-Chip sign-in bonus, and we may occasionally grant extra bonus Chips (giveaways, promotions). Bonus Chips of any kind are non-withdrawable - they can be played, but never cashed out.

Our real-money payment gateway is still being integrated. Until it's live, buying Chips in the Game credits them immediately without collecting real payment. Chips you buy this way, and Chips you win in matches, are withdrawable - the same as they will be once the gateway goes live and purchases become real, verified transactions.

Chips can be withdrawn back to a bank account you provide, subject to review by a human before any money is sent - we do not use an automated payment processor for withdrawals, so no card or bank login details are ever entered into the Game itself. If you choose to contact us via WhatsApp about a withdrawal, that conversation happens on WhatsApp, a service operated by Meta, and is subject to WhatsApp's own privacy policy and terms - we only receive the information you choose to send us there (such as your phone number and player name).

Chips are a virtual item for use within the Game. You should make sure that using or withdrawing Chips for real money is appropriate and permitted for you under the laws that apply to you before doing so.

Third-Party Services

We rely on the following third-party services to operate the Game. Each processes data on our behalf:

  • Supabase — our database, authentication, and file storage provider. Account, profile, gameplay, and payment-request data described above is stored with Supabase.
  • LiveKit — real-time voice chat infrastructure used to transmit microphone audio between players during a match.
  • Google Sign-In — an optional way to create or access your account, if you choose it instead of email or guest play.

We do not sell your personal information, and we do not use third-party advertising or analytics networks.

Data Sharing and Disclosure

Other players can see your display name, avatar, Player ID, and gameplay statistics — this information is inherently part of a multiplayer game. Players in the same match as you can hear your voice if you enable voice chat. We do not share your email address, payment details, or bank information with other players or with any third party, except with the service providers above as needed to operate the Game, or where required by law.

Data Retention

We keep your account and gameplay data for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we're required to keep certain records (for example, a history of financial transactions) for legal, accounting, or fraud-prevention purposes. See Delete Your Account for the specifics.

Data Security

We use industry-standard measures — including encrypted connections, access controls, and row-level database security — to protect your information. No method of storage or transmission is completely secure, and we can't guarantee absolute security, but we work to protect your information appropriately for its sensitivity.

Your Rights and Choices

  • You can view and edit your display name, avatar, and gender at any time from your profile.
  • You can request a copy of the personal information we hold about you.
  • You can request that we delete specific personal data (see Delete Your Data) or your entire account (see Delete Your Account).
  • You can stop using voice chat, camera, or photo library access at any time.

To exercise any of these rights, contact us at jamphel@nomindbhutan.com.

Children's Privacy

The Game is not directed at children, and we do not knowingly collect personal information from children under the age of 13 (or the minimum age required by your local law). If you believe a child has provided us with personal information, please contact us so we can delete it.

Guest Play

You can play the Game as a guest without providing any personal information. A guest account still has a Player ID and its own Chip balance and statistics, but no email address or sign-in credentials are collected unless you later choose to link a Google or email account.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continuing to use the Game after a change means you accept the updated policy.

Contact Us

If you have any questions about this Privacy Policy or how your information is handled, contact us at jamphel@nomindbhutan.com.