1365 Poker (“we”, “us”) is a ledger for home poker groups: it records games, works out who pays whom and shows payment details to the people who need them. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It applies to the 1365 Poker apps for iPhone and Android, the web app, and this website (together, the “Service”).
We wrote it to the standard of the EU General Data Protection Regulation (GDPR), and it also covers the California Consumer Privacy Act (CCPA/CPRA) and Taiwan’s Personal Data Protection Act (PDPA).
Short version
- We collect what we need to run your groups’ games and ledgers, and nothing for advertising.
- We don’t sell or rent your data, don’t use advertising IDs, and don’t track you across other apps or websites.
- Your payment details are encrypted and only shown to people in your groups who owe you money, unless you choose to show them to everyone in your groups.
- You can export your data or delete your account in the app at any time.
- We never hold, send or receive money.
1. Who is responsible for your data
The Service is run by the operator of 1365 Poker, the data controller for the personal data described here. You can reach us at support@1365poker.com for anything in this policy.
2. What we collect
Account details you give us
- Email address, and the display name and profile picture you choose.
- If you sign in with Google or Apple: the account identifier, email address and name they share with us. We never see your Google or Apple password. With Sign in with Apple you can hide your email; we then get a relay address.
- Your settings: language, light or dark theme, notification preferences and country.
What you and your groups record
- Groups you create or join, your role, nickname and member status.
- Events and sign-ups, games and tournaments: buy-ins, rebuys, chip reports, eliminations, extras such as venue fees, settlements, payment confirmations and ledger entries.
- A history of changes in each group (who changed what and when), so the records can always be checked.
Payment details
- The payment methods you add, such as a bank name and account number, account name, or phone number, with any label and note. These are encrypted before they’re stored (see section 7).
- A record of each time someone opens the full details of another person’s payment method: who looked, whose, in which group and when.
Safety
- Reports you send (the reason and any note), and the people you block.
Technical data
- When you use the Service, our hosting provider processes your IP address, browser or device type and the pages or requests involved, to deliver the Service and protect it against abuse (rate limiting, bot protection).
- Push notification tokens for your devices, if you turn on notifications.
- Crash and error reports, which include the device type, app version and what went wrong, but not the content of your groups.
What we don’t collect
- No advertising IDs, no ad tracking, no precise location, and no contacts or photos other than the picture you choose to upload.
- The website you’re reading sets no cookies and has no third-party trackers. The web app uses a cookie only to keep you signed in.
3. Why we use it, and our legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Create your account and sign you in | Account details, sign-in codes, session cookie | Contract |
| Run groups, events, games, settlements and the ledger | What you and your groups record | Contract |
| Show payment details to people who owe you | Payment details | Contract; your choice of who sees them |
| Send sign-in codes, reminders and notifications you’ve turned on | Email, push tokens, settings | Contract; consent for optional notifications |
| Keep the Service secure: stop spam, scraping and abuse; handle reports | Technical data, view records, reports, blocks | Legitimate interests |
| Find and fix bugs | Error reports | Legitimate interests |
| Answer you when you write to us | Your messages | Legitimate interests |
| Keep records the law requires, such as for paid plans | Purchase records | Legal obligation |
Under Taiwan’s PDPA, we collect and use this data to provide the Service under our contract with you, for the purposes above. Giving us an email address is required to create an account; without it we can’t provide the Service. Everything else, such as a profile picture or payment methods, is optional.
We don’t use your data for automated decisions that have legal or similarly significant effects on you.
4. Who can see your data
People in your groups see your name, picture and nickname, your sign-ups, the amounts in games you play in, settlements and the ledger. Amounts stay visible to the group even if you later leave, block someone or delete your account, because everyone’s records must add up.
Your payment details are shown in full only to people in a group with you who owe you money right now (in a settlement or on the ledger), until they’ve paid; everyone else in your groups sees them partly hidden. You can choose to show the full details to everyone in your groups instead. Nobody outside your groups ever sees them.
TV board links: a host can create a read-only link that shows a live game’s player names, chip counts or tournament standings on a TV. Anyone with that link can watch without signing in, until the host turns it off.
Blocking hides the other person’s name and picture from you; their amounts still show as “Blocked user”.
There is no public directory of groups or people, and no way to search for them.
5. Service providers we share data with
We use these providers to run the Service. They process data only on our instructions, under contracts that protect it.
| Provider | What for | Data |
|---|---|---|
| Cloudflare | Hosting the API, web app and website; storage of profile pictures; bot protection | All Service data in transit, technical data, pictures |
| Neon | Database | Account, group, game, ledger and encrypted payment data |
| Our email delivery provider | Sending sign-in codes and email notifications | Email address, message content |
| Sentry | Error monitoring | Error reports, technical data |
| Google, Apple | Sign-in, if you choose them | Sign-in identifiers |
| Expo, Apple, Google | Delivering push notifications | Push tokens, notification text |
| Apple App Store, Google Play, RevenueCat, our web payment provider (when paid plans launch) | Processing purchases and subscriptions | Purchase records; payment cards are handled by them, never by us |
We may also disclose data if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the Service, in which case this policy continues to apply.
We don’t sell your personal information or share it for cross-context behavioral advertising, as those terms are defined in the CCPA, and we haven’t done so in the past 12 months.
6. Where your data is stored
Our database is in Singapore, and our hosting provider serves the Service from data centers around the world. When we transfer personal data from the European Economic Area, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism. Data from Taiwan is transferred abroad for the same purposes described in this policy.
7. How we protect it
- All connections use HTTPS.
- Payment details are encrypted (AES-GCM) before they reach the database, with a key kept separately from it.
- Every look at someone’s full payment details is recorded and limited per hour, to stop scraping.
- Every group’s data is kept apart: each request is checked against the groups you belong to.
- Sign-in codes expire after 10 minutes and are limited in how often they can be tried.
No system is perfectly secure. If a breach affects your personal data, we’ll tell you and the authorities as the law requires.
8. How long we keep it
- Your account and what you record are kept while your account exists.
- Sign-in codes are deleted when they expire. Technical logs and error reports are kept for a short time (generally no more than 90 days) unless we need them to investigate abuse.
- When you delete your account, we erase your name, picture, email, payment methods, sign-ins, devices and notification settings, and anonymize your profile. Your place in your groups’ games and ledgers stays as “Deleted user” with the amounts unchanged, so other members’ records still add up; nothing in them identifies you. Groups only you were in are deleted.
- Deleted data may remain in encrypted backups for a limited period (generally no more than 30 days) before it’s overwritten.
- Purchase records are kept as long as tax and accounting laws require.
9. Your rights and choices
Depending on where you live, you have the right to:
- Access and portability: get a copy of your data. In the app: Settings → Your data → Export my data.
- Correction: change your name, picture, payment methods and settings in the app, or ask us to correct anything else.
- Deletion: Settings → Your data → Delete account, or ask us.
- Objection and restriction: object to processing based on legitimate interests, or ask us to limit it.
- Withdraw consent: turn notifications off in the app or your device settings at any time.
- Complain: to your local data protection authority.
Under Taiwan’s PDPA you may ask to look up, read or get a copy of your data, add to or correct it, and ask us to stop collecting, processing or using it, or to delete it.
California residents have the right to know, delete and correct personal information, to opt out of its sale or sharing (we don’t sell or share it), to limit the use of sensitive personal information (we only use it to provide the Service), and not to be discriminated against for using these rights. You can use an authorized agent; we’ll verify requests by asking you to confirm from the email address on your account.
Email support@1365poker.com for anything you can’t do in the app. We’ll answer within 30 days (or sooner if the law requires).
10. Age limit
The Service is only for people 18 and older. We don’t knowingly collect data from anyone under 18; if we learn we have, we’ll delete the account.
11. Changes to this policy
When we change this policy, we’ll update the date at the top. If the changes are significant, we’ll let you know in the app or by email before they take effect.
12. Contact
Questions, requests or complaints: support@1365poker.com.