Overview & data controller
This Privacy Policy explains what information the LudoXon mobile game (package com.winner.ludo) collects, why it collects it, and the choices you have. It applies to the Android app distributed through Google Play and to the supporting game service that runs your online matches.
The data controller is Mordernista Lab, Chattogram, Bangladesh. For any privacy question or request, contact us at playludoxon@gmail.com. We reply to deletion and access requests as quickly as our small team can — always within 30 days.
Information we collect
We collect the minimum needed to run accounts, fair online matches, and support. We do not collect your precise location, contact list, SMS content, or files outside the app.
| Category | Examples | Why |
|---|---|---|
| Account | Display name, username, email or phone number (via Firebase / Google Sign-In) | Create and secure your account; let friends find you |
| Profile | Avatar image, country code, player ID (LXN-XXXXXX) | Show your seat at the table; leaderboards and referrals |
| Gameplay | Coins, gems, level, match history, kills, trophies, settings | Run matches, settle entry fees and rewards, prevent cheating |
| Device & push | App-generated guest ID, push token (FCM), crash diagnostics | Guest sessions, match invites, stability fixes |
| Voice (live only) | Microphone audio during a match you join | Peer-to-peer voice chat — never recorded or stored (see below) |
| Support | Messages you send us, reports and blocked-user lists | Answer help requests; enforce fair-play rules |
Device permissions
Android shows you each permission before it is used. You can revoke any of them later in system Settings — the game keeps working except for the feature tied to that permission.
Microphone — voice chat only
The RECORD_AUDIO permission is used solely for live voice chat with the players at your table. Audio travels directly between players for the duration of the match.
We never record, store, transcribe, or analyse your voice. When you leave the match or mute yourself, no audio leaves your device. Muting is always one tap on your avatar.
- INTERNET — connect to matchmaking, live matches, leaderboards and events.
- MODIFY_AUDIO_SETTINGS — route voice chat to earpiece, speaker or Bluetooth correctly.
- POST_NOTIFICATIONS (Android 13+) — match invites, turn reminders and reward alerts. Optional.
How we use information
- Operate accounts: sign-in (including Google Sign-In), guest sessions, and profile sync across your devices.
- Run fair matches: seat assignment, turn timers, anti-cheat checks, and server-side settlement of entry fees and rewards.
- Social play: friend lists, private tables by room code, leaderboards, and referral events you choose to join.
- Communication: match and event notifications (you can mute them), plus replies to your support messages.
- Safety and integrity: detect bots, exploits and harassment, and enforce suspensions where our Terms require it.
- Improvement: aggregated, de-identified statistics (e.g. match completion rate) to fix bugs and balance the game.
Retention & deletion
- Active accounts: data is kept while your account exists so matches, friends and balances persist.
- Match records: anonymised competitively relevant history (ranks, kills) may be kept for leaderboards and anti-cheat after account deletion.
- Push tokens and diagnostics: removed or rotated when you sign out, reinstall, or revoke notification permission.
Delete your data any time
In the app: open Settings → Delete Account and confirm. This permanently removes your profile, wallet and friends. Alternatively email playludoxon@gmail.com from your registered address with the subject “Delete my account”.
Children's privacy
LudoXon is a general-audience board game and is not directed at children under 13. If you are under 13, please do not create an account. Players under 18 should use the game with a parent or guardian's permission, and only free tables are available to guest accounts. If you believe a child has provided us personal information, contact us and we will delete it promptly.
Security
- Passwords are stored as one-way bcrypt hashes — never in readable form.
- Sign-in sessions use short-lived tokens; admin access additionally requires email one-time codes.
- Traffic between the app and our servers travels over encrypted HTTPS / secure sockets.
- Match-critical decisions (dice, moves, settlements) are computed on our servers, not on devices.
No system is perfectly secure. Please keep your device and Google account protected, and never share verification codes with anyone — our team will never ask for them.
Your rights
Depending on where you live, you may have the right to:
- Access a copy of the personal information we hold about you.
- Correct an inaccurate display name, avatar or country.
- Delete your account and associated personal data (see above).
- Withdraw consent for notifications or voice chat by changing the permission or setting.
- Object to specific processing and request a portable export of your data.
To exercise any right, email playludoxon@gmail.com. We verify ownership of the account before acting, so requests are handled securely.
Changes & contact
If this policy changes in a material way, we will highlight the update in the app or on this page before it takes effect and revise the “Last updated” date above. Continued use of LudoXon after a change means you accept the revised policy.
Controller: Mordernista Lab, Chattogram, Bangladesh · Contact: playludoxon@gmail.com