Privacy Policy

Casino Mogul: Idle Tycoon

Effective date: 1 October 2026 Version: 1.1

1. Who we are

The controller of your personal data is:

KAWI SOFTWARE AS Organisation number: 933 580 873 Fredrik Meltzers gate 13B, 5007 Bergen, Norway Email: support@kawisoftware.com

2. The short version

Casino Mogul is a single-player game. It works fully offline and needs no account.
Your game progress is saved on your device. When you are online, a copy is backed up to our cloud service (Google Firebase, EU region) under an anonymous ID, so you can restore it.
You can optionally sign in with Apple or Google to move your progress between devices.
We collect anonymous gameplay statistics and crash reports to balance the game and fix bugs.
Optional rewarded videos. You can choose to watch a short video ad for an in-game reward. There are no forced ads. Videos are served by Google AdMob or AppLovin MAX and their ad partners. In the EEA, UK and Switzerland we ask for your consent (through Google's consent form) before ads may be personalised, and on iOS the system asks before any tracking. The game contains no real-money gambling, and we never sell your data.
Optional in-app purchases. Apple or Google processes payment. RevenueCat verifies purchases, restores permanent passes and tracks confirmed purchases under your Firebase user ID. Delivering purchased Gold requires a linked account and an internet connection. After delivery, Gold is stored with your casino and can be used offline. We do not receive your card or bank details.
You can delete your cloud data and account at any time in Settings → Cloud save → Delete account.

3. What we collect and why

Data	Purpose	Legal basis (GDPR)
Game progress (casino levels, currencies, settings) stored on your device	Play the game	Contract
Cloud backup of that progress, linked to an anonymous Firebase user ID	Restore progress, sync between devices	Contract / legitimate interest
If you sign in with Apple or Google: the account identifier and, depending on your choice, your email address, held by Firebase Authentication	Let you access your save on another device	Contract
Leaderboard entry: a randomly generated mogul name, your reputation stars, level and best city	Show the global leaderboard	Legitimate interest
Gameplay events (e.g. tutorial steps, purchases of in-game items with in-game currency, city unlocks, session length), device model, OS version, app version, country (coarse), app-instance ID	Understand whether the game is too easy or too hard and improve it (Firebase Analytics)	Legitimate interest
Store transaction identifiers, purchased products, purchase status, Firebase user ID and delivery receipts (RevenueCat and our Firebase backend)	Verify and deliver purchases, prevent duplicate delivery and fraud, restore purchases across devices	Contract / legitimate interest
Crash reports and diagnostics	Find and fix crashes (Firebase Crashlytics)	Legitimate interest
Only when a rewarded video is loaded or shown: advertising identifier (IDFA on iOS if you allow tracking, Google advertising ID on Android), IP address, device and app information, ad interactions	Serve, measure and cap optional rewarded video ads, prevent ad fraud, and (only with your consent) personalise them (Google AdMob, AppLovin MAX and their ad partners)	Consent (personalised ads) / legitimate interest (non-personalised ads, fraud prevention)
Remote configuration fetches	Tune game balance without an update (Firebase Remote Config)	Legitimate interest

If you opt in to reminders, the app schedules a local notification on your device when your Cash Cage is full. This is handled entirely on your device; no push token is sent to us.

We do not collect your name, contacts, precise location or photos. We do not track you across other companies' apps or websites unless you allow it in the iOS tracking prompt or allow personalised ads. You can change your choice at any time: Settings → Ad privacy choices (or Personalised ads) in the game, and your device's privacy settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads).

4. Processors and ad partners

We use Google Firebase (Google Ireland Ltd / Google LLC) as a data processor for authentication, cloud storage (Firestore, EU multi-region), analytics, crash reporting and remote configuration. Google may process data outside the EEA under the EU Standard Contractual Clauses. Apple and Google process sign-in data according to their own privacy policies when you choose to sign in with them.

Rewarded videos are delivered through Google AdMob (Google Ireland Ltd / Google LLC) and, in later versions, AppLovin MAX (AppLovin Corporation, USA). Google, AppLovin and the ad networks they work with may collect, process and share personal data (such as the advertising identifier, IP address and device information) for advertising purposes, as described in their own privacy policies (How Google uses information from apps that use its services, applovin.com/privacy). In the EEA, UK and Switzerland, Google's consent form lists every ad partner and lets you accept, refuse or choose per purpose. Transfers outside the EEA rely on the EU Standard Contractual Clauses or equivalent safeguards.

We use RevenueCat, Inc. to verify and manage purchases and purchased Gold. RevenueCat processes purchase and technical data under its privacy policy. Payment credentials are handled by Apple or Google and are not sent to Kawi Software or RevenueCat. Purchase verification and fraud-prevention records may need to be retained where required by applicable law.

5. Retention

Cloud saves and leaderboard entries are kept until you delete your account, or deleted after 24 months without any sign-in.
Analytics data is retained for up to 14 months. Crash reports are retained for 90 days.

6. Your rights

You can access, correct, export or delete your data, object to processing, and complain to the Norwegian Data Protection Authority (Datatilsynet). Delete your cloud data in the app (Settings → Cloud save → Delete account) or email support@kawisoftware.com.

7. Children

The game is not directed at children under 13. We do not knowingly collect personal data from children under 13.

8. Changes

We will update this policy if the app changes how it handles data, and show the new effective date above.