Social Eco Bonelight Abyss Privacy Policy
Effective date: 15 October 2026
This policy explains what data the game Bonelight Abyss (the "Game") collects, why, and what you can do about it. The Game is published by SOCIAL ECO (M) SDN. BHD. ("Social Eco Games", "we", "us"), Kuala Lumpur, Malaysia.
1. Data we collect
| Data | What it is | Why we use it | How long we keep it |
|---|---|---|---|
| Account identifier | A one-way hash of your guest key; if you sign in with Google, your Google account user ID (a number). We do not store your Google email or profile picture. | To identify your account and restore your progress on a new phone | Until your account is deleted |
| Game data | Character name, class, level, items, currencies, stage records, in-game mail | To run the Game and save your progress | Until your account is deleted |
| Battle records | The controls you used in a battle and its result (no personal information) | To check results and prevent cheating | Deleted after checking; records flagged as abnormal are kept for 90 days |
| Purchase records | Order number, item, amount, time and the Google Play purchase token | To deliver purchases, handle refunds and keep accounts | As long as the law requires (generally 7 years in Malaysia) |
| Deletion requests | The player ID and contact details you send us | To verify and process your request | 30 days after the request is completed |
| Anti-cheat records | Account ID, reason and time of any restriction | To prevent cheating and handle appeals | Until your account is deleted |
We do not collect your real name, phone number, contacts, location, photos or the list of apps on your device. The Game contains no third-party advertising or analytics tools.
When your device connects to our servers, our hosting provider Cloudflare sees your IP address in order to deliver data and block attacks. Our own systems do not store your IP address.
2. Who we share data with
- We do not sell your data or share it with advertisers.
- Service providers that process data for us: Cloudflare (servers and storage) and Google (Google sign-in and Google Play payments). They handle data under their own privacy policies.
- Government authorities, only when the law requires it.
3. Security
All connections between the Game and our servers are encrypted (HTTPS / TLS). Data is stored encrypted at rest by our hosting provider. Login tokens expire automatically.
4. Delete your account and data
You can ask us to delete your account and all associated data at any time:
- In the Game: Settings → Account → Delete account. Your account is deleted after 7 days; logging in during those 7 days cancels the request.
- Without the Game: email privacy@secogames.com with the subject "Delete my account" and your player ID (shown in Settings). We will verify the request and delete the account within 7 days.
Deletion removes your account, all characters and progress, and your sign-in methods. Purchase records (order number, amount and date only) are kept for as long as tax law requires.
5. Children
The Game is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us data, contact us and we will delete it.
6. Your rights
Under Malaysia's Personal Data Protection Act 2010 you may ask to access or correct your personal data, or withdraw consent. Contact us at the address below.
7. Changes
If we change this policy we will update this page and its effective date. Important changes will also be announced in the Game.
8. Contact
SOCIAL ECO (M) SDN. BHD., Kuala Lumpur, Malaysia
Privacy: privacy@secogames.com · Support: support@secogames.com