Privacy Policy

Who we are

FLIP is operated by Bidfins Limited, a company registered in England and Wales (company number 16640626). Bidfins Limited is the controller of the personal data described on this page.

For anything about your data, whether a copy of it, a correction or a deletion, email hello@flipmobilegames.com or use the support page on this site.

The short version

We collect what running fair contests and paying out prizes actually requires, and not much else. We do not sell your data, and we do not run advertising trackers.

The longer version below says what each piece is, why we hold it, and how long for.

What we collect

We hold the following about you:

• Your email address, and where you add one your mobile phone number. We use these to sign you in with a one-time code and to reach you about your account. The section on sign-in codes below explains more.
• Your first and last name and your country, given when you set up your account. Your real name is never shown to other players.
• Account identifiers: a unique account id, your display name, and where you use them the identifier your Apple or Google sign-in gives us. We never receive your Apple, Google, email or phone password.
• A device identifier, generated by the app on first launch. It is how a device is recognised across sessions, and how referral abuse is limited.
• Match records: every action you took in a contest, its timing, and the result. This is what lets us answer a dispute.
• Wallet and ledger records: coin purchases, entry fees, prizes and withdrawals, held as double-entry accounting entries.
• Your approximate region, inferred from the network address your connection arrives on. We use it to decide whether paid contests are available to you, and for nothing else.
• Identity verification data, where you withdraw money. See the section on that below.
• Technical logs, such as error reports and connection records, kept for a limited period so faults can be diagnosed.

Sign-in codes by SMS and email

You sign in to FLIP with a one-time code sent to your email address or your mobile number. We use the phone number and email address you give us for exactly that: sending the code you requested so you can log in, and confirming the channel is yours.

These messages are transactional. We do not send marketing by SMS or email, and we never sell or share your number or address for anyone else to market to you. Standard message and data rates may apply to SMS, depending on your mobile carrier and plan.

SMS codes are delivered on our behalf by our SMS provider, and email codes by our email provider. Each message carries only the code and the short text around it. To stop receiving sign-in codes on a channel, stop using code sign-in for it, or contact us and we will remove the number or address from your account where you are not relying on it to sign in.

Why we hold it, in law

Where we process your data to run the service you asked for, such as signing you in, matchmaking, settling contests and paying out, the basis is performance of a contract.

Where we process it to verify identity, to check your age, or to apply regional restrictions, the basis is compliance with a legal obligation.

Where we process it to detect cheating, fraud or account abuse, and to keep the service secure, the basis is our legitimate interests in running a platform that holds money on behalf of players.

Match records and why they are kept

Every contest records the actions both players took, in order, and the result. Together they are a complete account of what happened.

This is what allows a disputed result to be settled by re-running it rather than by taking someone’s word. It is also why we cannot delete an individual match record on request while the money it moved is still on the books.

Payments and identity

Cash coin purchases are handled by our payment processor. Card details are entered on their systems and never reach ours. We receive a reference, an amount, and whether the payment succeeded.

Play coin purchases inside the apps are handled by Apple or Google. We receive a receipt to verify and nothing more.

Before your first withdrawal we are required to verify who you are. That check collects identity documents and personal details, and it is carried out by a verification provider on our behalf. We keep the outcome of the check and the minimum needed to evidence it, and we do not keep copies of documents longer than the law requires.

Who else sees your data

We share data with the following categories of provider, and only for the purpose named. A current list of the specific providers we use is available on request at hello@flipmobilegames.com.

• Our SMS provider, to deliver one-time sign-in codes by SMS.
• Our email provider, to deliver one-time sign-in codes and essential account emails.
• Our payment processor, to take payments and send withdrawals.
• Apple and Google, to verify in-app purchase receipts, and to sign you in where you chose to.
• Our identity verification provider, to check who you are before a first payout.
• Our hosting and database providers, who store the data on our behalf and do not use it.
• Law enforcement or a regulator, where we are legally required to.

Where your data is handled

FLIP is operated from the United Kingdom, and your data is held under UK data protection law. Some of the providers above operate outside the UK, so your data may be transferred abroad to reach them.

Where it is, that transfer is covered by the safeguards UK law requires, such as an adequacy decision for the country in question or standard contractual clauses with the provider, so your data carries its protection with it.

Other players

Other players see your display name, your avatar, and your results against them. They do not see your real name, your email address, your phone number, your region, your balance or your friend list.

Your friend code is shared by you, deliberately, when you show someone your QR code or send them your code. Anyone holding it can send you a friend request.

How long we keep it

Ledger and payment records are kept for as long as accounting and anti-money-laundering law requires, currently six years from the end of the financial year they fall in.

Match records are kept while the contest can still be disputed, and are retained in aggregate afterwards for leaderboards and integrity checks.

Technical logs are kept for a short period and then deleted.

When you close your account, we delete or anonymise what we are not required to keep.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to processing we carry out under legitimate interests.

Some of these have limits. We cannot delete a ledger entry that a legal retention period still covers, and we cannot delete the record of a contest whose prize has not yet settled.

We do not make decisions about you by automated means that produce a legal effect. An account flagged by our integrity checks is reviewed by a person before anything is withheld.

You can complain to the Information Commissioner’s Office if you think we have handled your data wrongly. We would rather you told us first, and we will try to put it right.

Children

FLIP is not intended for anyone under 18, and paid contests are limited to verified adults. If we learn that an account belongs to a child, we close it and delete what we are able to.

Contact

FLIP is operated by Bidfins Limited (company number 16640626). Email us about anything on this page at hello@flipmobilegames.com, or use the support page on this site. We answer data requests within one month, and will tell you if a request will take longer than that.