Privacy Policy

Applies to Deflect Ball Online on Android (com.ballgumgames.deflectballonline) and in the browser · Effective 29 September 2026

Deflect Ball Online is an online multiplayer game published by Ballgum Games. To let you keep a character, play against other people and hold on to what you unlock, the game keeps an account for you on our servers. This page explains what that account contains, why, who else may see it, roughly how long we keep it, and how to close it.

The game comes in two versions that share this policy: the Android app distributed through Google Play, and a browser version played on the CrazyGames platform. Where they differ, the sections below say so.

We do not sell your personal data. The game is free to play and funded partly by advertising: ads are shown by third-party advertising partners, who receive some technical data of their own. This website uses Google Analytics for visitor statistics only. Section 11 covers both.

1. Who is responsible for your data

Ballgum Games is the data controller for the information described here. Privacy questions and requests go to support@ballgumgames.com.

2. What we collect, and why

You do not fill in a registration form. The first time you open the game an account is created for you automatically: in the Android app through Google Play Games or as a guest account tied to that installation, and in the browser version through your CrazyGames account or as a guest account tied to that browser. The categories below describe the data we handle; the exact fields may change as the game develops.

What	Details	Why we need it
Account and progress	An account number, a player name, your level and experience, your in-game currencies, the items you own and what you have equipped, your ranked rating, tier and season results, and related account history such as a name change or an ad-free period.	This is the game itself: without it, nothing you unlock survives closing the app, and other players have no name to see.
Sign-in identifiers	Your Google Play Games player identifier, obtained through Google Play Games Services when you sign in on Android. If you choose to tap Link Google account in Settings, we also store your Google account identifier and the email address associated with it.	To recognise the same player on the next launch and on a new device. Linking is optional and exists so you can recover your account if you lose your phone.
CrazyGames sign-in (browser version)	If you are signed in to CrazyGames, your CrazyGames user identifier and username, which CrazyGames passes to the game in a signed token. Your player name in the browser version is your CrazyGames username.	To recognise the same player on the next visit and on another device, and to show your name to other players.
Device and connection data	Technical data such as your IP address, a device identifier provided by the operating system to this app, operating system version, device type, device model and system language. In the browser version there is no device identifier; we receive browser and platform information instead.	Security and abuse prevention (detecting shared or automated accounts, ban evasion, fraud and attacks on our servers), connecting you to a suitable game server, and diagnosing problems on specific devices.
Gameplay records	Match and progression records such as eliminations, deaths, wins, rounds played, rewards credited to your account, and changes to your in-game currency.	To run the game, calculate rewards, show statistics, and investigate cheating or a dispute over a missing reward.
Purchase records	If you buy something in the Android app, or receive a free item through Google Play such as a pre-registration reward: the Google Play purchase identifiers (the purchase token, and the order number where Google provides one), which product it was, what it paid out, and when. No card or payment details — those stay with Google.	To confirm with Google that the purchase is genuine, to deliver what it paid for exactly once and to the right account, and to handle refunds, chargebacks and reports of a purchase that did not arrive.
Rewarded ad records	When you choose to watch a rewarded ad: which offer it was, when it was completed, the reward credited, and the identifier of the confirmation the advertising partner sent us.	To pay each reward exactly once, to enforce the daily limits, and to detect rewards claimed without an ad being watched.
Messages you send us	If you use the in-game feedback form: the category, the text you wrote, your player name, and basic technical context such as game version, platform, device model and IP address.	To reproduce what you reported and to stop the form being used for spam or abuse.
In-match chat	If you use the chat in a match: what you write, your player name and account number, when you wrote it and which game server the match ran on. An automatic filter masks blocked words before other players see a message; our record keeps the message as you typed it, marked as filtered.	To deliver your messages to the other players in the match, and to review reports and enforce the rules against offensive messages, harassment and cheating.
Player reports	If you report a player: who you reported, the reason you picked, and the recent chat of that match, which the game server attaches to the report. If another player reports you, the same record exists about you, including your recent messages.	To review reports and act on them, and to notice reports that are themselves abusive.
Server logs	Ordinary technical logs kept by our web and game servers, such as request time, IP address, endpoint and error diagnostics.	Keeping the service running, and investigating errors and attacks.

What we do not collect

We do not ask for or collect your precise location, contacts, photos, files, microphone or camera.
We do not read your device’s advertising identifier ourselves. The advertising partners in the Android app may read it — see section 11.
We do not collect payment or card details. Where the game offers in-app purchases, they are made through Google Play: you pay Google, and your card number, billing address and payment method never reach us. What reaches us is the record of the purchase described in the table above.
The game has no voice chat, so there is no voice content for us to store. Text chat is covered in the table above.
The players you block are remembered only on your device. That list is never sent to us.

Connections the game makes for you

Region measurement. On launch the game briefly connects to cloud endpoints in several regions to measure which is fastest for you. No account data is sent; the provider sees only that a connection was made from your IP address.
Google Play Games Services. Sign-in happens through Google's own SDK and is governed by Google's Privacy Policy.
CrazyGames. The browser version runs inside the CrazyGames website and uses its software for sign-in, saving settings and showing ads. CrazyGames handles what it collects on its own site under the CrazyGames Privacy Policy.
Advertising. When an ad is loaded or shown, the game connects to our advertising partners — see section 11.

3. Legal bases for using your data

If you are in the EEA, the UK, or another region with similar law, we generally rely on:

Performance of a contract — your account, progress, matchmaking and rewards. Without this data there is no game to provide.
Legitimate interests — security, anti-cheat, ban enforcement, moderating chat and player reports, fraud and abuse prevention, keeping our servers running, improving the game, funding a free game through advertising, and establishing or defending legal claims.
Consent — where we ask for it, for example linking your Google account and the email address that comes with it. You can withdraw consent at any time.
Legal obligation — where we have to keep or disclose something by law.

4. Who we share data with

We do not sell your personal data and we do not share it with data brokers or for third-party advertising. It may be disclosed to:

Other players — your player name, level and the cosmetic items you have equipped are visible in matches, together with in-game activity such as match results and the chat messages you send in a match. When ranked play is on, your player name, tier and rating may also appear on a leaderboard that every player can see.
Service providers — the hosting, database, infrastructure, email and similar providers we use to run the game. They act on our instructions.
Google — Google Play Games Services handles sign-in, Google Play distributes the app, and Google Play processes purchases. When something is bought or granted through Google Play we send the purchase identifier back to Google to confirm that it is genuine and to record it as delivered. Google Analytics also measures visits to this website — see section 11.
CrazyGames — in the browser version, CrazyGames provides sign-in and the site the game is played on, and receives from the game the signals its platform needs, such as when a match starts and ends.
Advertising partners — the networks that show ads in the game, described in section 11.
Authorities and legal claims — where we consider in good faith that we are required to, or where it is necessary to establish, exercise or defend a legal claim, or to protect our rights, our players, or the security of the service.
A successor — if the game or the company is sold, merged or reorganised, account data may transfer with it.

5. Where your data is stored

Your account and progress are stored with cloud providers, and game servers may be started on demand in several regions around the world so that you play close to home. Those game servers hold only what a live match needs and report the result back. This means your data may be processed outside your own country, including in countries whose data protection law differs from yours; where required, we rely on appropriate safeguards under applicable law.

6. How long we keep it

We keep data for as long as we need it for the purposes above, and longer where a law, a dispute, or an ongoing abuse-prevention need requires it. In practice:

Account and progress — while the account is open; after closure, see section 7.
Sign-in, registration and device records — while the account is open, and afterwards for security and abuse prevention.
Feedback messages — while they remain useful to us as a record of what was reported.
Chat messages — for a limited period, and longer where they are part of a report, a ban or a dispute.
Player reports — while they remain useful for moderation, ban enforcement and disputes.
Purchase records — kept after an account closes, for as long as accounting, tax and refund-handling obligations require.
Server logs — for a limited period in the ordinary course of running the servers.

7. Closing and deleting your account

You can close your account from inside the game (Settings → Delete my account), or by making a request from our web page — no installed app required:

Account deletion page

A deletion request closes the account straight away, so it can no longer be played, and the account is deleted 14 days later. If you open the game and sign in during those days, we ask whether you want to keep it, and restoring it puts everything back. Once the 14 days have passed the deletion cannot be undone: the sign-in token stops working, your player name is released, and any linked Google Play Games or Google account is detached, so it is free to start a fresh account with. Your progress, items and currency are no longer accessible to you, to other players or through the game, and we do not reopen or restore deleted accounts.

What we keep afterwards, and why. In a multiplayer game, a deletion that erased every trace would be the simplest way to evade a ban. So for a period after closure we retain a limited internal record connected with the closed account — including identifiers such as the IP address and device identifier, and the records we need to keep our accounts, statistics and anti-abuse systems consistent — in restricted internal storage. It is used for security, anti-cheat, fraud prevention and legal claims, and not for advertising, profiling or contacting you. Where it does not defeat that purpose, we reduce or obscure what we hold. Bug reports you sent us are also kept, because they describe a problem in the game rather than a person, and so are chat messages and player reports connected with the account, for the periods described in section 6. You can ask us to remove the residual record at support@ballgumgames.com, and we will do so unless we still need it to enforce a ban, prevent abuse, comply with the law, or defend a legal claim.

8. Your rights

Depending on where you live, you may have the right to:

ask what data we hold about you and get a copy of it;
have inaccurate data corrected;
ask us to delete your data (see section 7);
object to, or ask us to restrict, processing based on legitimate interests;
withdraw a consent you gave — for example by asking us to unlink your Google account;
lodge a complaint with your local data protection authority.

Write to support@ballgumgames.com from the email address linked to your account, or tell us your exact player name, and we will respond within the period applicable law allows. We may ask for information that reasonably proves the account is yours before we act — we would rather ask than hand a stranger your account — and, to the extent the law permits, we may decline or charge for requests that are excessive, repetitive or manifestly unfounded.

9. Children

Deflect Ball Online is not directed to children. You must be at least 13 years old to hold an account (or older, where your country sets a higher age for consenting to online services on your own). We do not knowingly collect data from children below that age. If you believe a child has created an account, contact support@ballgumgames.com and we will take appropriate steps to close it.

10. Security

Traffic between the game and our servers uses encrypted HTTPS connections, access to the database and to the admin tools is restricted to the people who operate the game, and the game is server-authoritative, so a client cannot grant itself currency, items or match results. We take the measures we consider appropriate, but no online service can be guaranteed secure and we cannot promise that unauthorised access will never occur.

11. Advertising and analytics

Deflect Ball Online is free to play and shows advertising: optional rewarded videos you choose to watch in exchange for an in-game reward, and ads between rounds and matches. The game uses no third-party analytics or attribution SDK, and we build no advertising profile of you ourselves.

Who shows the ads

Android app — ads are served through Unity LevelPlay, a mediation service that selects an ad from networks including Unity Ads and Google AdMob. See the Unity privacy policy and how Google uses data from apps that use its services.
Browser version — ads are served by CrazyGames and its advertising partners under the CrazyGames Privacy Policy.

These partners collect data of their own to deliver and measure ads and to prevent ad fraud: typically the device’s advertising identifier, IP address, device, browser and app information, and whether an ad was shown, completed or tapped. They may use it to show ads based on your interests, and they handle it as independent controllers under their own policies. For a rewarded ad in the Android app we also give the partner your account number, so that it can confirm to our server that the ad was watched and the reward can be paid; we do not give advertising partners your name, email address or chat messages.

Where the law requires consent for personalised advertising, including in the EEA and the UK, the partners apply their own consent and privacy controls, and we may add a consent prompt of our own in the game. You can also reset or delete your advertising identifier, or opt out of ads personalisation, in your Android settings at any time. An ad-free period, bought with gems or granted by us, stops the game from requesting ads on your account for its duration.

This website

These public pages — and only these pages, not the game and not our staff tools — use Google Analytics 4 so we can see how many people visit and which pages they read. It sets cookies in your browser (names beginning _ga) holding a randomly generated identifier, and sends Google your IP address, the page you are on, the page that referred you, and basic browser and device information. We use it only in aggregate: we do not try to identify you from it, we do not connect it to your game account, and we do not use it for advertising.

Google acts as our processor for this and describes its own handling in Google’s Privacy Policy. You can opt out for every site by installing Google’s opt-out browser add-on, or by blocking or clearing cookies in your browser — these pages are written to work fully without JavaScript or cookies, so nothing here breaks if you do.

The game is not directed to children, and we do not ask our partners to target advertising at them. We do not sell your personal data.

12. Changes to this policy

We may update this policy as the game develops. The effective date at the top says which version is current, and where a change materially affects you we will give notice in the game or on this site where reasonably practicable. Continuing to play after a change means you accept the updated policy.

13. Contact

Ballgum Games
support@ballgumgames.com