Privacy Policy

1. Scope

This policy applies to the public Mulkora website, game accounts, private-beta services, game worlds, player communications, support, security, and related notifications. A third-party store, checkout, or provider may give you its own privacy notice for information it handles independently.

2. Information we collect

Depending on how you use Mulkora, we may collect:

• account and contact information, such as email address, display name, authentication records, and settings;
• guest or registered player identifiers, server selection, player profile, villages, alliances, and progress;
• gameplay state and activity, including queues, resources, movements, battles, reports, rewards, and rule events;
• chat messages, mentions, reports, blocks, moderation decisions, and related investigation information;
• payment transaction and entitlement records, such as product, amount, currency, status, and provider reference, but not full payment-card details;
• device, browser, operating system, app build, IP address, necessary cookie, local-storage, and session information;
• push-notification tokens, delivery results, and notification preferences; and
• support messages, attachments, correspondence, and information you choose to provide.

This public company website does not use analytics, advertising trackers, or nonessential cookies at launch. It may receive ordinary web-server security logs, including IP address, requested path, time, and user agent.

3. How we use information

We use information where needed to:

• create and operate accounts and game worlds, authenticate users, and save player progress;
• process purchases, maintain entitlements, reconcile transactions, and respond to billing questions;
• deliver service, account, security, and push notifications according to your preferences;
• prevent, detect, and investigate fraud, cheating, bots, abuse, account compromise, and security incidents;
• provide support, handle player reports, moderate communications, and enforce rules;
• measure reliability, diagnose errors, monitor performance, balance systems, and improve the product; and
• keep business records and comply with legal, tax, accounting, regulatory, and lawful-request obligations.

Our legal grounds depend on the context and applicable law and may include performing our agreement with you, our legitimate interests in operating and protecting the service, legal obligations, and consent where required.

4. Sharing and service providers

We do not sell personal information. We may share limited information with necessary providers that support hosting and infrastructure, email delivery, push notifications, payment processing, security, error monitoring, performance measurement, and product analytics. Providers may use information only under their agreements and applicable law. We may also disclose information to professional advisers, authorities, or counterparties when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or complete a corporate transaction with appropriate safeguards.

5. International processing

OAH Technology FZE is established in the United Arab Emirates, and our providers or users may be located in other countries. Information may therefore be processed outside your country. Where required, we use contractual, organizational, or other lawful safeguards for international transfers, while recognizing that privacy laws vary by location.

6. Security

We use reasonable technical and organizational controls appropriate to the information and risks, including access restrictions, protected credentials, encryption in transit, monitoring, backups, and incident response practices. No internet service can guarantee absolute security. You should use a unique password, protect your devices, and tell us promptly about suspected account misuse.

7. Retention and deletion

We retain information only for as long as reasonably needed for the purposes described above. Retention varies by category: active account and gameplay data may remain while the account or world operates; security, moderation, transaction, tax, and legal records may be kept longer to protect users, resolve disputes, prevent repeat abuse, or meet legal duties. Backups rotate on a schedule and may take additional time to expire. When information is no longer needed, we delete, anonymize, or securely isolate it.

8. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing relies on it. You may also update available account settings and notification preferences. To make a privacy request, email [email protected]. We may need to verify your identity and may retain information where law or overriding security, fraud-prevention, transaction, or legal needs require it. You may have a right to complain to an applicable data-protection authority.

9. Children

Mulkora is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A higher minimum age may apply locally. If you believe a child provided information contrary to these rules, contact us so we can investigate and take appropriate action.

10. Policy changes

We may update this policy as the service, law, or our practices change. We will post the revised policy and update the effective date. If a change is material, we will provide additional notice when reasonably required.

11. Privacy contact

Contact OAH Technology FZE at [email protected] or at Business Centre, Sharjah Publishing City Free Zone, Sharjah, Sharjah 00000, United Arab Emirates. Please use “Privacy Request” in the subject line when exercising a privacy right.