Home  ·  Legal  ·  Privacy Policy

Privacy Policy

Last updated: 15 April 2026

This Privacy Policy explains how Orometa LLC FZ ("we", "us", "our") collects, uses, and protects your personal information when you use Mahjong Dubai — including the game at play.mahjongdubai.com, the community platform at community.mahjongdubai.com, and the marketing website at www.mahjongdubai.com.

1. Who we are

2. What we collect

2.1 Information you give us

• Account data — when you sign in (e.g. via Google), we receive your email address, name, and profile picture from the login provider.
• Profile content — any display name, avatar, bio, city, or preferences you set.
• Contact form messages — if you send us feedback or a support request, we keep your name, email, message, and the surface you sent it from.
• Payment details — if you subscribe to a paid plan, Stripe processes your card on our behalf. We store the Stripe customer ID and subscription status, but we never see or store your card number.

2.2 Information we collect automatically

• Gameplay data — hands you play, rounds, scores, wins, losses, and achievements. This is how we show your stats, leaderboards, and badges.
• Technical data — IP address, browser and device type, operating system, approximate location (country, city), session timestamps, and referral source.
• Usage analytics — which pages and features you use, via PostHog.
• Error reports — if something crashes, Sentry captures the error, stack trace, and the context needed to diagnose it.

3. How we use your information

• To run the game and community platform and keep your stats and subscription working.
• To improve the product — fixing bugs, measuring features, making matchmaking fairer.
• To reply to you when you contact us.
• To send transactional emails (receipts, account notifications, password resets).
• To prevent abuse, cheating, and fraud.
• To comply with legal obligations (tax, accounting, court orders).

4. Legal basis

Where applicable, we rely on the following legal bases under the UAE Personal Data Protection Law and similar regimes:

• Contract — to provide the service you signed up for.
• Legitimate interest — for product analytics, security, and service improvement, in a way that respects your rights.
• Consent — for optional analytics cookies (where required by law) and for any marketing communication.
• Legal obligation — for accounting, tax, and anti-fraud requirements.

5. Who we share data with

We share personal data only with the sub-processors we need to run the service. We do not sell your data.

• Stripe, Inc. (USA) — payment processing. stripe.com/privacy
• PostHog (USA) — product analytics. posthog.com/privacy
• Sentry (Functional Software, Inc.) — error tracking. Data is hosted on Sentry's EU infrastructure. sentry.io/privacy
• Resend (USA) — transactional email delivery. resend.com/legal/privacy-policy
• Google LLC (USA) — sign-in with Google (only if you choose to use it).

We may also disclose information where required by law or by a binding request from a government authority with jurisdiction over us.

6. International transfers

Some of our sub-processors are based outside the UAE, primarily in the United States and the European Union. Where we transfer personal data internationally, we rely on the recipient's own safeguards, including standard contractual clauses and data processing agreements.

7. Cookies and similar technologies

We use a small number of cookies and browser storage items:

• Essential — to keep you signed in, remember your preferences, and secure the session. These cannot be disabled.
• Analytics — PostHog uses a first-party cookie (or local storage) to count unique visitors and usage.
• Error tracking — Sentry briefly attaches a session identifier to error reports for debugging.

We do not use third-party advertising cookies. We do not run ads on the game.

8. How long we keep your data

• Account data and gameplay history — for as long as your account is active. If you delete your account, we remove it within 30 days, except where we are legally required to keep records (e.g. financial records for 5 years under UAE law).
• Contact form messages — up to 3 years after your last interaction, so we can respond to follow-up questions or disputes.
• Technical logs — typically 30 to 90 days.
• Backups — encrypted backups are rotated and purged on a rolling basis.

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and associated data.
• Object to or restrict certain kinds of processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email play@mahjongdubai.com. We will respond within 30 days.

10. Children

Our service is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you become aware that a child under 13 has created an account, please email us and we will delete it promptly.

Users between 13 and the age of majority in their jurisdiction should use the service with the involvement of a parent or legal guardian.

11. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), hashed session tokens, least-privilege access to production systems, and regular software updates. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and, where required, the relevant authorities.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date at the top and, for material changes, notify you in-product or by email. Your continued use of the service after a change means you accept the updated policy.

13. Contact us

If you have any questions about this policy or how we handle your data, contact us at play@mahjongdubai.com or by post at the address above.