On this page
1. Who we are2. What data we collect and why3. Who we share data with4. International transfers5. How long we keep it6. Your rights7. Children8. Security9. Cookies and local storage10. Automated processing11. Changes1. Who we are
Killer Pool 3D (the killerpool3d.com website and the iOS and Android apps) is operated by BENNIX LIMITED, which is the data controller of your data (company number 17292413, registered in England and Wales; registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom). Contact: contact@killerpool3d.com.
2. What data we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Username, password (stored only as an irreversible hash), email address | To create an account, sign in, verify email and reset passwords | Performance of a contract |
| Account ID and email from Google or Apple sign-in (including Apple’s private relay address) | To sign you in, and to revoke the Apple sign-in grant when you delete your account | Performance of a contract |
| Game data: match results, statistics, coin and gem balances, skins you own or equip, event progress | To run the game, rankings and rewards | Performance of a contract |
| Friend list, invites, players you block, and friend chat messages | To provide social features and keep people safe | Performance of a contract; legitimate interests (safety) |
| Reports and support messages | To review abuse and reply to you | Legitimate interests; performance of a contract |
| Technical and security logs: IP address, sessions, account events (sign-in, sign-up, purchases) | Account security, fraud and abuse prevention, rate limits | Legitimate interests |
| Purchase records (amount, date, item, order ID); card details are not collected | To credit gems, for refunds and accounting | Performance of a contract; legal obligation |
What we don’t collect: we do not collect your location, contacts, photos, camera or microphone. The apps contain no ads, advertising ID or third-party tracking.
3. Who we share data with
We do not sell your data. We share it only with these service providers (processors) to run the service, and with authorities when legally required:
- Hosting and infrastructure providers and our email delivery service.
- Stripe: processes web payments (we never see or store card details).
- Apple and Google: in-app purchases and (if you choose) sign-in.
- RevenueCat: processes purchase records to verify store purchases and credit gems safely.
- Authorities: when legally required.
Other players only see your username, avatar and public game statistics; they never see your email.
4. International transfers
Our providers (for example Stripe, Apple, Google, RevenueCat) may process data outside the UK or EEA. Where they do, appropriate safeguards apply, such as adequacy decisions or standard contractual clauses (UK IDTA / EU SCCs).
5. How long we keep it
| Data | Period |
|---|---|
| Account data | While your account is open |
| Unverified registrations | Deleted within 48 hours |
| Friend chat messages | Deleted after 30 days |
| Payment / accounting records | For as long as legal obligations require (detached from your user ID) |
| Security logs | A limited period needed to prevent abuse |
| When you delete your account | Profile, friendships, messages, balances and skins are deleted |
6. Your rights
Under applicable data protection law (UK GDPR/EU GDPR and local laws) you have the rights of access, rectification, erasure, restriction, objection, data portability and, where processing is based on consent, to withdraw consent.
- Erasure: Profile → Delete account (steps).
- Other requests: contact@killerpool3d.com. We verify your identity and reply within the legal time limit (normally one month).
- Complaints: in the UK you can complain to the Information Commissioner’s Office (ICO, ico.org.uk), or to the data protection authority in your country. If you contact us first we will try to resolve the issue.
7. Children
Killer Pool 3D is for players aged 18 and over and is not directed to children. We do not knowingly collect data from anyone under 18 and delete such accounts when we find them. If you see an account that belongs to a minor, tell us.
8. Security
Connections are encrypted with HTTPS, passwords are stored irreversibly hashed, sessions are verified on the server and requests are protected by rate limits. No system is completely risk-free; if there is a breach we make the notifications the law requires and inform affected people.
9. Cookies and local storage
On the web we use only a strictly necessary session cookie (your sign-in state) and local storage for language and settings preferences. There are no advertising, analytics or tracking cookies, so we do not show a cookie consent banner. In the apps the session token is kept in the device’s secure storage (Keychain/Keystore).
10. Automated processing
Usernames and chat messages pass through an automatic filter for inappropriate content. Decisions with consequences, such as closing an account, are made with human review; you can write to us to contest them.
11. Changes
We may update this policy; we announce important changes in the game or by email. The date above shows the latest update.