Privacy Policy

Operator: BidFive Official Data protection contact: [email protected] For any question, comment, or complaint regarding this policy or your personal information, please email the address above. We aim to respond within 15 business days.

To provide the Service, we collect: (a) Account information (required) · Email address — used for login, password recovery, notifications · Nickname — displayed to other players in-game · Password — stored as a one-way hash; neither we nor any staff can see your plaintext (b) Gameplay information (required) · Match history, plays, score changes · Room creation and join records (c) Device & log information (required) · Login time, IP address (for security audit and abuse prevention) · Device model, OS, client/browser version All of the above are necessary to operate the Service; refusal will prevent registration or use of related features.

We use your information solely for: · Providing and maintaining the Service (accounts, matchmaking, scoring, room operations) · Securing accounts (anomalous-login detection, anti-cheat, abuse prevention) · Improving the product (de-identified or anonymized statistics) · Complying with legal obligations For any other use not stated here, we will obtain your express consent first.

We do not share, transfer, or publicly disclose your personal information except in these cases. (a) Sharing: · With your prior express consent; · With our affiliates or service providers (e.g. server hosting, email delivery) for the limited purpose of operating the Service, and under confidentiality terms no weaker than this policy; · At the lawful request of regulators, courts, or other authorities. (b) Transfer: only in the case of merger, acquisition, or asset sale, in which case we will notify you and require the new operator to honour this policy. (c) Disclosure: not disclosed publicly, except where legally required. (d) Cross-border transfer: servers are located in the People's Republic of China; your data does not leave the country by default. Should cross-border transfer become necessary, we will obtain your separate consent and complete the legally required security assessments.

Storage location: servers located in the People's Republic of China. Retention: · While the account is active: we retain your registration and gameplay data; · After account deletion: personal information will be deleted or anonymized within 30 days, unless required to be kept by law; · Logs related to transactions, security, or disputes may be retained up to 3 years where required by law. After the applicable period, data will be deleted or anonymized.

· Passwords stored as one-way hashes (bcrypt or equivalent) · HTTPS / WSS for transport encryption · Access control on servers and databases under least-privilege principles · Internal security policies and staff training for personnel handling personal information Despite the above, no Internet system is perfectly secure. In the unfortunate event of a breach, we will notify you and the regulator as required by law.

Under applicable law, you have the right to: · Access and copy: review your account and gameplay data via the Profile page; · Correct or supplement: update your nickname, password, and email in the client; · Delete / close account: initiate deletion in-app at Profile → Delete Account. Re-enter your current password to confirm; the action takes effect immediately. Your email, nickname, avatar, and password are permanently erased; all issued login tokens are invalidated. Past match records are retained in anonymized form to preserve the integrity of other players' history. The action is irreversible; to use the service again, you'll need to register a fresh account with a different email; · Email fallback: if you cannot log in or wish to request closure outside the client, email [email protected] and we'll assist; · Withdraw consent: withdraw any consent at any time, without affecting prior lawful processing; · Complaint: if you believe our processing infringes your rights, you may file a complaint with the relevant cybersecurity or public-security authority. We respond to such requests free of charge; for clearly unfounded or repetitive requests we may charge a reasonable fee.

For convenience, the client uses local storage (uni.storage / localStorage) to keep: · Your login token (JWT), to skip re-login · Your language preference · Necessary temporary client cache You can clear this data at any time by logging out or clearing app data, after which you will need to log in again.

The Service is intended for users 18 years or older. If you are under 18, please read this policy together with your guardian and obtain their consent before using the Service. We do not knowingly collect personal information from minors. If discovered: · We will delete the account and information promptly upon a guardian's request when a minor has registered without authorization; · Processing involving minors will be subject to the special protections under applicable law. Guardians who discover a minor's account should contact us at [email protected].

We may update this policy as laws or services change. The updated policy will be posted prominently in the client and identified by version number (see header). · Routine updates take effect 7 days after publication; · Updates affecting your significant rights will be highlighted via in-app message, email, or modal, and your renewed consent will be sought; · If you do not accept the updated policy, please stop using the Service; continued use is deemed acceptance. To the extent permitted by law, the Operator reserves the right to interpret this policy. Where this policy conflicts with the law, the law prevails.