Revision dated September 9, 2026
1. General terms and consent
1.1. This Policy explains how data is collected, used, stored, and protected in the Banda game on Banda.mobi, in the Telegram Mini App, and when interacting with the bot. The database operator is Banda.mobi. The game is for persons aged 18 or older. Consent to processing is given by a separate action before account creation; the system records the date, time, method, and version of that consent.
2. Data we process
2.1. We may process an internal ID, nickname, character gender, level, role, activity dates, login, irreversible password hash, sessions, Telegram ID and settings; gameplay, resources, purchases, requests, and messages; IP address, user agent, device type, operating system, browser, cookies, and security logs. The Operator does not store a full card number, expiry date, or CVC/CVV.
3. Sources, purposes, and legal grounds
3.1. Data comes from the user, their device, Telegram, payment providers, and the game itself. It is used for registration and login, game mechanics, communications, payments, support, fraud prevention, moderation, statistics, and legal compliance. The grounds are consent, performance of the agreement, legal obligations, and legitimate interests in service security.
4. Data visible to other people
4.1. Other players may see the nickname, character image, level, status, gang, game statistics, achievements, and content published by the user. Passwords, IP addresses, technical logs, payment identifiers, and internal notes are not public; only authorized personnel may access them within their duties.
5. Cookies and device storage
5.1. Essential cookies and local storage are used for login, session security, theme, graphics, and other settings. Disabling them may prevent login or parts of the game from working. Third-party advertising cookies are not set without a separate legal basis.
6. Recipients and international transfers
6.1. Data is disclosed only to hosting and backup providers, Telegram, payment services, and public authorities when necessary to operate the game, process a payment, or comply with law. For international transfers, the Operator uses contractual and technical safeguards and sends only the minimum necessary data.
7. Retention periods
7.1. Account data is kept while the account is active and for the period needed to protect rights and comply with law. Login and security logs, complaints, sanctions, payment, and accounting records are kept for their applicable periods. When a period ends, data is deleted or anonymized; backup copies expire through scheduled rotation.
8. Your rights and requests
8.1. Where provided by law, a user may request access, correction, deletion, or restricted processing, withdraw consent, or object to processing. Requests are accepted through Support or at hi@banda.mobi; identity verification may be required to protect the account. Withdrawal does not make earlier processing unlawful.
9. Automated processing and security
9.1. The system automatically calculates game outcomes, rate-limits requests, prevents duplicate operations, and may temporarily restrict communications based on defined signals. Permanent account closure is not imposed solely by automation, and a person can review an appeal. Controls include HTTPS, password hashing, secure cookies, access separation, audit logs, and backups.
10. Policy changes and contacts
10.1. The current version is published at Banda.mobi/privacy. The Operator announces material changes in the game and asks for renewed consent when required by law. Personal-data questions are accepted through Support and at hi@banda.mobi. If translations differ, the Russian version governs unless mandatory law requires otherwise.