隐私政策
一、运营者信息
运营主体：BidFive 官方 个人信息保护负责人联系邮箱：privacy@bidfive.com 如您对本政策或您的个人信息有任何疑问、意见、建议或投诉，可通过上述邮箱联系我们，我们将在 15 个工作日内回复。
二、我们收集的个人信息
为向您提供服务，我们将收集以下个人信息： （一）注册与账户信息（必要） · 邮箱地址：用于账户登录、密码找回、验证通知 · 昵称：用于游戏中向其他玩家显示 · 密码：以单向哈希形式存储，我们及任何工作人员均无法获知您的明文密码 （二）游戏与使用信息（必要） · 对局记录、出牌记录、积分变化 · 房间创建与加入记录 （三）设备与日志信息（必要） · 登录时间、IP 地址（用于安全审计、防止账号被盗） · 设备型号、操作系统、浏览器/客户端版本 以上信息均为提供本服务所必需，拒绝提供将导致无法注册或使用相关功能。
三、信息的使用
我们仅在下列目的范围内使用您的个人信息： · 提供与维护本服务（账户管理、对局匹配、积分计算、房间运营） · 保障账号与服务安全（异常登录识别、反作弊、防止滥用） · 改进产品（在去标识化或匿名化处理的基础上进行统计与分析） · 履行法律法规规定的义务 如需将您的信息用于本政策未载明的其他用途，我们将再次征得您的明示同意。
四、信息共享、转让与公开披露
我们承诺：除以下情形外，不会向任何第三方共享、转让或公开披露您的个人信息。 （一）共享： · 经您事先明示同意； · 与我们的关联方或合作的服务商（如服务器托管、邮件发送）共享必要信息以提供服务，且要求其遵守不低于本政策的保密义务； · 应监管机构、司法机关或其他有权机关依法要求。 （二）转让：仅在涉及合并、分立、收购、资产转让等情形下，我们将告知您新的接收方并要求其继续承担本政策项下的义务。 （三）公开披露：原则上不公开披露。法律强制要求时除外。 （四）跨境传输：本服务的服务器位于中华人民共和国境内，您的个人信息默认不出境。如未来确有出境需要，我们将另行征得您的同意并依法履行安全评估等手续。
五、信息存储与保留期限
存储位置：服务器位于中华人民共和国境内。 保留期限： · 账户存续期间：我们将持续保存您的注册信息、游戏数据； · 账户注销后：除法律法规另有规定外，将在 30 天内对您的个人信息进行删除或匿名化处理； · 对涉及交易、安全、纠纷等需要保留的日志，依据相关法律法规可保留至 3 年。 超出上述期限后，我们将删除或匿名化处理相关数据。
六、信息安全保护措施
· 密码采用单向哈希算法（bcrypt 等）加密存储 · 传输过程使用 HTTPS / WSS 加密通道 · 服务器与数据库实施访问控制，最小权限原则 · 内部建立信息安全管理制度，对接触个人信息的工作人员进行培训 尽管我们采取了上述措施，但请您理解：互联网环境下不存在"完美的安全"。如不幸发生个人信息泄露事件，我们将依法及时通知您并向监管部门报告。
七、您的权利
依据《个人信息保护法》等法律规定，您对您的个人信息享有以下权利： · 查阅、复制：随时在「我的」页面查看您的账户信息与游戏数据； · 更正、补充：通过账户设置修改昵称、密码、邮箱； · 删除/注销账户：在客户端「我的」→「删除账户」中即可发起，需输入当前密码并确认后立即生效。注销后您的邮箱、昵称、头像、密码等个人信息将被永久清除，登录令牌立即失效；过往对局记录将以匿名身份保留以保证其他玩家的战绩完整。该流程不可恢复；如需重新使用本服务，需用其他邮箱重新注册； · 邮件备用渠道：如您无法登录或在客户端外申请注销，也可发邮件到 privacy@bidfive.com 由我们协助处理； · 撤回同意：可随时撤回您此前授予的任何同意，但不影响撤回前基于您的同意已开展的处理活动； · 投诉举报：如您认为我们的处理行为侵害了您的合法权益，可向网信部门、公安机关等监管部门投诉。 我们将免费响应您的上述请求；对明显无理或重复的请求，我们可能酌情收取合理成本费用。
八、Cookie 与本地存储
为提升使用体验，我们在客户端使用本地存储（uni.storage / localStorage）保存以下数据： · 登录令牌（JWT），用于免登录 · 语言偏好设置 · 客户端必要的临时缓存 您可以随时在客户端"退出登录"或清除应用数据来删除上述本地数据。清除后将需要重新登录。
九、未成年人特别保护
本服务面向 18 周岁以上的成年用户。 如您为未成年人，请在监护人陪同下阅读本政策并征得监护人同意后再使用本服务。 我们不会主动收集未成年人的个人信息。一旦发现： · 未成年人未经监护人同意擅自注册的，我们将根据监护人申请尽快删除账户与相关信息； · 涉及未成年人个人信息的处理活动，将严格按照《未成年人保护法》《个人信息保护法》中关于未成年人的特别规定执行。 监护人发现未成年人账户，请通过 privacy@bidfive.com 联系我们处理。
十、政策的更新与解释
我们可能根据法律法规变化或服务调整不定期修订本政策。修订后的政策将在客户端显著位置公布，并通过版本号变更（见页眉）标识。 · 一般性更新：在客户端公告 7 日后生效； · 涉及您重大权利的变更：将通过站内信、邮件或弹窗等方式显著告知，并征得您的再次同意； · 您不同意修订后的政策的，应停止使用本服务，否则视为接受。 本政策的最终解释权在法律允许的范围内归本运营者所有。如本政策与中华人民共和国法律法规存在冲突，以法律法规为准。
Privacy Policy
1. Operator Information
Operator: BidFive Official Data protection contact: privacy@bidfive.com For any question, comment, or complaint regarding this policy or your personal information, please email the address above. We aim to respond within 15 business days.
2. Information We Collect
To provide the Service, we collect: (a) Account information (required) · Email address — used for login, password recovery, notifications · Nickname — displayed to other players in-game · Password — stored as a one-way hash; neither we nor any staff can see your plaintext (b) Gameplay information (required) · Match history, plays, score changes · Room creation and join records (c) Device & log information (required) · Login time, IP address (for security audit and abuse prevention) · Device model, OS, client/browser version All of the above are necessary to operate the Service; refusal will prevent registration or use of related features.
3. How We Use Information
We use your information solely for: · Providing and maintaining the Service (accounts, matchmaking, scoring, room operations) · Securing accounts (anomalous-login detection, anti-cheat, abuse prevention) · Improving the product (de-identified or anonymized statistics) · Complying with legal obligations For any other use not stated here, we will obtain your express consent first.
4. Sharing, Transfer & Disclosure
We do not share, transfer, or publicly disclose your personal information except in these cases. (a) Sharing: · With your prior express consent; · With our affiliates or service providers (e.g. server hosting, email delivery) for the limited purpose of operating the Service, and under confidentiality terms no weaker than this policy; · At the lawful request of regulators, courts, or other authorities. (b) Transfer: only in the case of merger, acquisition, or asset sale, in which case we will notify you and require the new operator to honour this policy. (c) Disclosure: not disclosed publicly, except where legally required. (d) Cross-border transfer: servers are located in the People's Republic of China; your data does not leave the country by default. Should cross-border transfer become necessary, we will obtain your separate consent and complete the legally required security assessments.
5. Storage & Retention
Storage location: servers located in the People's Republic of China. Retention: · While the account is active: we retain your registration and gameplay data; · After account deletion: personal information will be deleted or anonymized within 30 days, unless required to be kept by law; · Logs related to transactions, security, or disputes may be retained up to 3 years where required by law. After the applicable period, data will be deleted or anonymized.
6. Security Measures
· Passwords stored as one-way hashes (bcrypt or equivalent) · HTTPS / WSS for transport encryption · Access control on servers and databases under least-privilege principles · Internal security policies and staff training for personnel handling personal information Despite the above, no Internet system is perfectly secure. In the unfortunate event of a breach, we will notify you and the regulator as required by law.
7. Your Rights
Under applicable law, you have the right to: · Access and copy: review your account and gameplay data via the Profile page; · Correct or supplement: update your nickname, password, and email in the client; · Delete / close account: initiate deletion in-app at Profile → Delete Account. Re-enter your current password to confirm; the action takes effect immediately. Your email, nickname, avatar, and password are permanently erased; all issued login tokens are invalidated. Past match records are retained in anonymized form to preserve the integrity of other players' history. The action is irreversible; to use the service again, you'll need to register a fresh account with a different email; · Email fallback: if you cannot log in or wish to request closure outside the client, email privacy@bidfive.com and we'll assist; · Withdraw consent: withdraw any consent at any time, without affecting prior lawful processing; · Complaint: if you believe our processing infringes your rights, you may file a complaint with the relevant cybersecurity or public-security authority. We respond to such requests free of charge; for clearly unfounded or repetitive requests we may charge a reasonable fee.
8. Cookies & Local Storage
For convenience, the client uses local storage (uni.storage / localStorage) to keep: · Your login token (JWT), to skip re-login · Your language preference · Necessary temporary client cache You can clear this data at any time by logging out or clearing app data, after which you will need to log in again.
9. Special Protection for Minors
The Service is intended for users 18 years or older. If you are under 18, please read this policy together with your guardian and obtain their consent before using the Service. We do not knowingly collect personal information from minors. If discovered: · We will delete the account and information promptly upon a guardian's request when a minor has registered without authorization; · Processing involving minors will be subject to the special protections under applicable law. Guardians who discover a minor's account should contact us at privacy@bidfive.com.
10. Updates & Interpretation
We may update this policy as laws or services change. The updated policy will be posted prominently in the client and identified by version number (see header). · Routine updates take effect 7 days after publication; · Updates affecting your significant rights will be highlighted via in-app message, email, or modal, and your renewed consent will be sought; · If you do not accept the updated policy, please stop using the Service; continued use is deemed acceptance. To the extent permitted by law, the Operator reserves the right to interpret this policy. Where this policy conflicts with the law, the law prevails.