Privacy Policy: Mega Huat Fishing

Effective Date: June 22, 2026 · Last Updated: June 22, 2026 · Owner: Jin Long Studios

1. Introduction

Welcome to Mega Huat Fishing (the “App”, the “Game”). Jin Long Studios (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data when you use our mobile application or web game.

By creating an account or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

2. Information We Collect

2.1 Account information (you provide this on sign-up)

Full Name: used as your display name in-game and on leaderboards
Email Address: used for account login, password resets, and (only if you opt in) marketing
Mobile Number: used to verify a unique account per device and prevent fraud
Password: stored in encrypted form by Firebase Authentication; we never see your plaintext password
Consent timestamps: we record the date and time you accepted our Privacy & Terms and (optionally) opted in to marketing, so we can prove your consent if you ever request it

2.2 Game data (created as you play)

Virtual coin balance, daily login streak, mission progress
High scores, session statistics, total wins, total fish caught
Account creation date and last login timestamp
Room preference (Newbie / Joy / Honor) and weapon usage

2.3 Local device storage

We use your device’s local storage (browser localStorage for the web version, app sandbox storage for the mobile version) to remember non-sensitive gameplay state across sessions. Specifically:

Daily login streak counter
Tutorial completion flags (so we don’t show tutorials twice)
Welcome gift claim status
Per-session win-rate counters shown on the HUD

These items stay on your device only and are not transmitted to our servers. Clearing your browser data or uninstalling the app will erase them.

2.4 Device and usage information (collected automatically)

Device model, operating system version, screen size
App version, install date, crash reports
Approximate region (country-level, derived from IP). We do not store precise location.
Anonymous gameplay analytics events (room entries, boss kills, bonus wheel spins)

3. How We Use Your Data

To authenticate your account and allow you to log in across devices
To save your game progress and virtual balance to the cloud
To detect and prevent cheating, fraud, and abusive behavior
To verify users are aged 18 or older (simulated gambling compliance)
To analyze how players use the game so we can fix bugs and improve gameplay
To send you product updates, promotions, and new-feature announcements, only if you specifically opted in via the marketing consent checkbox during sign-up

4. What You Agreed To

During account creation, we ask for two separate consents on a dedicated confirmation screen:

Privacy & Terms consent (required): you confirm you have read and accept this Privacy Policy and our Terms of Service. Without this consent we cannot create your account.
Marketing consent (optional): you confirm you are 18+ and agree to receive product news and promotional offers from us. You can refuse this and still create an account. You can also withdraw it any time by emailing us (see Section 9).

The date and time of each consent is stored with your account so we can prove the legal basis for any communication or data we hold about you.

5. Third-Party Services We Use

We use the following third-party services to operate the game. By using the App, you also agree to their respective privacy policies.

5.1 Google Firebase: backend, authentication, and analytics

Firebase Authentication manages your account credentials securely
Cloud Firestore stores your game profile, coin balance, and progress
Firebase Analytics records anonymous gameplay events (room entries, level completions, sign-ups)
Firebase is operated by Google LLC. Data is stored on Google servers in regions chosen for performance and compliance.
Reference: Google’s Privacy Policy

5.2 Microsoft Clarity: UX session recordings

Clarity records anonymous interaction data (taps, scrolls, swipes, page-load timing) so we can spot usability issues.
Sensitive form fields are masked by default: passwords, email addresses, mobile numbers, and full names are never recorded. They appear as blank boxes in our recordings.
Clarity uses cookies and similar device identifiers to stitch sessions together.
Reference: Microsoft’s Privacy Policy

5.3 Google Play Services / Apple App Store

When you install the App from the Google Play Store or App Store, the respective store collects install/uninstall events according to its own privacy policy.
We receive only aggregated install statistics; no individual user data.

6. Cookies and Tracking Technologies

Our web game and marketing site use cookies and similar technologies:

Strictly necessary: session cookies that keep you logged in. The App cannot function without these.
Analytics: Firebase Analytics + Microsoft Clarity cookies (described in Section 5). These help us improve the product.
Local storage: as described in Section 2.3, we store gameplay state locally on your device.

You can disable cookies in your browser settings, but the App may not work properly without them.

7. Virtual Currency Disclaimer

Mega Huat Fishing is a social casino game for entertainment purposes only. The virtual coins used in this app have no real-world monetary value. They cannot be purchased for, sold for, or redeemed for real money, goods, or services. Practice or success in this game does not imply future success at real-money gambling.

8. Data Retention & Deletion

We keep your account data for as long as your account remains active. If your account is inactive for 36 consecutive months, we will email you a notice and may delete the account and all associated data 30 days after that notice.

You can request immediate deletion of your account and all data at any time (see Section 9). Backup copies are purged within 90 days of your deletion request.

9. Your Rights

Depending on where you live, you have the following rights over your personal data (in Malaysia under the PDPA, in the EU under the GDPR, and similar rights in many other jurisdictions):

Access: ask for a copy of the data we hold about you
Correction: ask us to fix incorrect or incomplete data
Deletion: ask us to permanently delete your account and data (“right to be forgotten”)
Restriction: ask us to stop processing your data while a dispute is being resolved
Portability: ask us to send you your data in a machine-readable format
Withdraw consent: revoke your marketing-opt-in at any time. This stops promotional emails but does not delete your account.
Complain to a regulator: if you believe we’ve mishandled your data, you may contact your local data-protection authority

To exercise any of these rights, email hello@aureasmedia.com from the email address associated with your account. We will respond within 30 days.

10. Security

We use industry-standard encryption to protect your data during transmission (TLS/HTTPS) and at rest within Firebase. Passwords are hashed by Firebase Authentication; we never see or store them in plaintext.

While we take security seriously, no system is 100% secure. If you ever believe your account has been compromised, contact us immediately.

11. Age Requirement (Simulated Gambling)

Mega Huat Fishing is a Social Casino Game. It is strictly intended for individuals aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If we learn that an account belongs to a minor, we will close it and delete the data.

If you are a parent or guardian and believe your child has registered, please contact hello@aureasmedia.com and we will remove the account.

12. International Data Transfers

Our backend (Firebase) is operated by Google and may store your data in any Google Cloud region globally. When data leaves your country of residence, it is protected by Google’s standard contractual clauses and equivalent safeguards.

13. Changes to This Policy

We may update this Privacy Policy as the App evolves. We will revise the “Last Updated” date at the top of this page and, for material changes, notify you in-app or by email before they take effect. Continued use of the App after a change means you accept the revised policy.

14. Contact Us

Questions about this Privacy Policy? Want to exercise any of the rights in Section 9? Contact Jin Long Studios at: hello@aureasmedia.com.