1. Who is responsible for your information?
The controller for the operation of Glamour Bingo is:
Orphia Solutions B.V.
Zuikertuintjeweg Z/N, Zuikertuin Tower Unit 1B & 1C,
Willemstad, Curaçao
info@orphia.solutions
Contact this email for privacy enquiries and requests. This notice concerns the current social service, not earlier cash-play websites. This service is currently a private preview; public-launch arrangements and any additional suppliers must be assessed and reflected in this notice before they are introduced.
2. Information we process
For email/password accounts, we store your email and a salted password hash, not your plain-text password. We store hashed session and password-reset tokens and short-lived, hashed identifiers for sign-in rate limits. For hosting sign-in, we receive your hosting sign-in identifier and email address and may receive the display name made available by that sign-in provider. We record your chosen nickname, registration time, age confirmation, terms acceptance and marketing choice. An age declaration is not a claim that documentary age verification has been completed.
We keep your virtual coin movements, booked games, ticket serials, results, reward claims, collection progress, referral references and relevant account activity. We also process your chat messages, reports, support conversations and preferences. If purchasing is activated, order references, product details, amounts, payment status and information required for tax accounting may also be recorded. We do not ask you to send payment card details in chat or support.
The hosting and security infrastructure may process technical information such as IP address, request time, browser or device information, authentication events and errors to deliver and protect the service. Game preferences are stored in your browser as explained in our cookie policy. Illustrative administrative test records are not statements about actual players.
3. Purposes and legal bases
Where the GDPR applies, we rely on contract necessity to create and operate your account, deliver requested games, maintain your virtual wallet, calculate rewards and answer service requests. We rely on legitimate interests for proportionate fraud prevention, account security, moderation, troubleshooting and the investigation of disputes, balancing those interests against your rights.
Where an actual legal obligation applies, we process the information needed to meet it, for example applicable accounting requirements for a live purchase. Optional marketing relies on consent. Refusing or withdrawing marketing consent does not prevent ordinary gameplay. No marketing delivery service is currently connected in this preview.
We do not use this application to serve behavioural advertising or sell personal information. If optional analytics, advertising or new uses are introduced, we will update the information provided and obtain consent where required before activating them.
4. Who can see information?
Other players may see your nickname, chat messages, relevant game participation, winning announcements and leaderboard or community progress displayed by the game. Your email, private support conversations and complete wallet statement are not intended to be public. Do not put sensitive information into public chat.
Authorised staff access account information according to their role. Hosting, infrastructure, authentication and technical service providers process information needed to deliver their services. The current service uses OpenAI’s hosted Sites and ChatGPT sign-in infrastructure and Cloudflare-based application hosting and storage. Providers may also process information independently under their own applicable terms and notices.
We may disclose information when required by law or where reasonably necessary to protect rights and investigate misuse. A future payment provider will receive the information necessary for checkout under the notice presented when that service is activated. We will not imply that an unconnected provider already processes your purchases.
5. International processing
The operator is in Curaçao, and hosting and authentication providers may process information in other countries. Where the GDPR applies and a transfer requires a safeguard, an appropriate lawful transfer mechanism must be in place, such as applicable adequacy arrangements or standard contractual clauses with any necessary supplementary measures. Contact us for information about the arrangements applicable to your data. This notice does not assert that every destination has an adequacy decision.
6. How long information is kept
Account and progress records are kept while needed to provide your account and retain your gameplay history. Chat, support, security and transaction records are assessed against their purpose, unresolved complaints, fraud prevention needs and any applicable legal retention duty. Information is not retained merely because it might be useful indefinitely.
When an account is closed or deletion is requested, we assess which records can be deleted or anonymised and which must remain for a specific lawful purpose. We will explain any applicable exception when responding. Backup copies may remain until their normal replacement cycle and must not be used to restore a closed account to ordinary operation without a valid reason. This preview does not yet provide an automatic self-service deletion facility or a published category-by-category fixed retention schedule.
7. Your choices and rights
Where applicable, you may request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Marketing objections will be respected. These rights have conditions and exceptions; we will explain any refusal.
Send requests to info@orphia.solutions, preferably from your registered email, or open a private support case. We may ask for proportionate verification to protect your account. Where the GDPR applies, we normally respond within one month, with any lawful extension explained. You may complain to the supervisory authority competent for you, including the authority in your country of habitual residence, work or the alleged infringement where the GDPR provides that right.
Automatic game calculations and reward eligibility are part of providing the game. We do not intend to make solely automated decisions producing legal or similarly significant effects about you. You may ask support to review a disputed restriction or account result.
8. Security, children and updates
We use access controls and technical safeguards appropriate to the service, but no online system can be guaranteed completely secure. Keep your sign-in credentials safe and contact us if you suspect compromise. The service is for adults aged 18 and over. If we learn that an account belongs to a child, we will investigate and take appropriate steps to restrict it and address the associated information.
We will update this notice when the service or its processing changes and highlight material changes where required. See the cookie policy for browser storage and the terms for gameplay.