Legal & Trust

Privacy Policy

This policy explains what ElBlot processes when you visit the website, create a private Baloot room, play a game, or contact us.

1. Scope and operator

This Privacy Policy applies to ElBlot websites and browser-based services, including elblot.com and play.elblot.com (together, the “Service”). ElBlot is responsible for deciding why and how personal data is processed through the Service.

This policy describes the current public website and private beta. Account, ranking, advertising, and prize features may require additional notices when they become active.

2. Data we process

Website and security information

Web servers may process standard request information such as IP address, date and time, requested page, referrer, browser, operating system, language, and security events. This information is used to deliver pages, protect the Service, investigate faults, and limit abuse.

Cookieless analytics

Our current lightweight analytics records pageviews, pages visited, language, referrer, approximate country when available, browser, and operating system. It does not create an email list and does not store raw IP addresses in the analytics database. A daily rotating anonymous identifier is used to estimate unique visits without following the same visitor across days.

Private rooms and gameplay

When you create or join a private room, the Service processes a room identifier, essential session credentials, game actions, cards visible to your seat, scores, referee events, and technical connection events needed to run the match. During the current beta, rooms may be temporary and can disappear after a server restart.

Contact information

If you use our contact form, we process the name, email address, subject, and message you submit so we can review and respond. We do not add contact-form addresses to a marketing list.

Future accounts and ranked features

If registration, permanent player profiles, progression, ranked rooms, or prize verification are introduced, we will explain the additional information required before collecting it.

3. How we use information

We process information only for reasonable service purposes, including to:

  • deliver the website and multiplayer game;
  • create, authenticate, and maintain private rooms;
  • record gameplay facts, calculate results, and support fair-play review;
  • understand aggregate website usage and improve content;
  • detect abuse, secure the Service, diagnose faults, and maintain availability;
  • respond to messages and support requests;
  • comply with applicable legal obligations and protect legal rights.

Depending on the context and applicable law, processing may be based on providing the Service you requested, consent, compliance with law, or legitimate interests such as security, fraud prevention, service improvement, and fair competition.

4. Cookies and analytics

Current position: no advertising cookies, no Google Analytics, and no email tracking are active on the website.

The private game uses one essential room-session cookie to keep the correct player connected to the correct private room. This cookie is required for room security and is not used for advertising.

The current website analytics is cookieless. Browser or server security controls may still process technical information needed to block attacks and keep the Service available.

5. Advertising and Google services

ElBlot may introduce advertising on eligible public pages or game modes. At the date of this policy, advertising cookies are not active. Before activating personalized advertising or non-essential advertising storage, we will provide any consent controls required for the user’s location and update this policy where necessary.

If Google AdSense is activated, Google and its advertising partners may use cookies, device identifiers, or similar technologies to deliver and measure ads. Users can review Google’s advertising controls at Google Ads Settings. Third-party vendors used at that time will be disclosed through the applicable privacy or consent interface.

6. Sharing and international transfers

We do not sell personal data. Information may be processed by hosting, infrastructure, security, analytics, or support providers only where reasonably needed to operate the Service. Providers are expected to protect the information and act within the agreed purpose.

We may disclose information when required by law, to protect users or the Service, to investigate fraud or abuse, or as part of a legitimate business restructuring. Service providers may process data in countries different from yours; where required, appropriate transfer protections will be used.

Private room links should be treated as confidential. Anyone who receives a valid invitation may be able to enter the associated room.

7. Retention and security

We keep information only for as long as reasonably necessary for the purpose described, including operational, security, dispute, and legal needs. Temporary beta rooms are generally held in server memory and may be lost on restart. Security logs may be retained for a limited operational period. Contact messages are retained while they are needed to answer and document the request.

We use reasonable technical and organizational measures to protect information. No internet service can guarantee absolute security, so users should not send confidential information through the contact form or share private room links publicly.

8. Your choices and rights

Subject to applicable law, you may ask to access, correct, update, or delete personal data associated with you; object to or restrict certain processing; withdraw consent where processing relies on consent; or request information about how your data is handled.

Some requests may require identity verification. Certain information may be retained where necessary for security, legal compliance, dispute resolution, or protection of other users.

Saudi Arabia’s Personal Data Protection Law and its implementing regulations provide rights and obligations relating to personal data. Official information is available from the Saudi Data & AI Authority.

9. Age requirement

The Service is intended for users aged 18 or older. We do not knowingly offer the game to children or request children’s personal data. If you believe a person under 18 has submitted personal information, contact us so we can review the situation.

10. Changes and contact

We may update this policy as the Service changes. The “Last updated” date will identify the current version. Material changes may also be highlighted on the website or through an appropriate notice.

For a privacy question or request, use the ElBlot contact form and choose Privacy request.