1.Who we are

This Privacy Policy explains how Henglian (“we”, “us”) collects and uses personal data when you use Relic Rush — Deep Dig (the “Service”). We are the data controller. You can reach us via Instagram @relic_rush_thailand.

2.Data we collect

• Account data: your email address, display name, and a securely hashed password.
• Gameplay data: your game progress, in-game balances, settings, and related activity.
• Purchase data: when you buy something, our payment provider, Opn (Omise), processes the payment. We receive the transaction status and reference but do not store your full card number.
• Prize fulfilment data: if you redeem a real-item reward, we collect the recipient name, phone number, and Thailand shipping address so we can deliver it.
• Technical data: IP address, device/browser information, and server logs, used for security and to operate the Service.

3.How we use your data

• to create and run your account and save your progress;
• to process purchases and manage subscriptions;
• to verify eligibility and fulfil and ship rewards;
• to prevent fraud, cheating, and abuse, and to keep the Service secure;
• to provide support and respond to you; and
• to comply with our legal obligations.

4.Legal bases

We rely on the following PDPA bases, depending on the purpose: performance of our contract with you (running your account, processing purchases, fulfilling rewards); your consent (where required); our legitimate interests (security, fraud prevention, improving the Service); and compliance with legal obligations.

5.Who we share with

We share personal data only as needed to run the Service: with our payment provider, Opn (Omise), to process payments; with delivery/courier partners to ship rewards; with hosting and infrastructure providers; and with authorities where required by law. We do not sell your personal data. Where a provider processes data outside Thailand, we take steps to keep your data protected.

6.How long we keep it

We keep personal data for as long as your account is active and as needed to provide the Service, and afterwards only as required to meet legal, accounting, or fraud-prevention obligations. You can ask us to delete your account; some data may be retained where the law requires.

7.Your rights (PDPA)

Subject to the PDPA and its exceptions, you may have the right to: access a copy of your data; correct inaccurate data; request deletion; restrict or object to certain processing; request data portability; and withdraw consent where processing relies on it. To exercise any of these, contact us using the details in section 12.

8.Cookies & sessions

We use a small number of cookies/local storage to keep you signed in and to operate the Service. We do not use third-party advertising trackers.

9.Security

We take reasonable measures to protect personal data, including hashing passwords and using encrypted (HTTPS) connections. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10.Children

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from a child under 16 without the consent and supervision of a parent or legal guardian. If you believe a child has provided us data without such consent, contact us and we will take appropriate steps.

11.Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new “Last updated” date.

12.Contact & complaints

For privacy questions or to exercise your rights, contact Henglian via Instagram @relic_rush_thailand. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.