Privacy Policy

Version: 2.0 · Effective date: June 2026

Operator / data controller: CÔNG TY TNHH SHOPLINK (Shoplink Co., Ltd.), enterprise/tax code 4202056387, 11/5B Nguyễn Thiện Thuật, Nha Trang Ward, Khánh Hòa Province, Vietnam. Mr.Host / W2. Data requests: support@mrhost.asia.

Data we process

• Account: email, name/nickname, avatar, verification status, language/region.
• Game: Signals (QR/ShopLink), activation statuses, GBT balance and history, clan membership and season stats, scan events.
• Orders: order contents, drop customization, shipping address, payment status.
• Payment: GPay transactions, payment method, payout details (minimum necessary; full payment data is handled by providers).
• Technical: device, IP, logs, session identifiers, QR/ShopLink scan telemetry (without the user's precise location).
• Communications: GChat messages and support requests, interactions with AI agents.

Why (purposes and bases)

Contract performance (orders, shipping, game layer), legitimate interest (anti-fraud, security, analytics), consent (marketing, certain cookies), and legal compliance (accounting, tax, compliance).

Who we share with

Print and delivery providers, payment providers, infrastructure (hosting, analytics), AI providers for agent operation, and government bodies where required by law. We do not sell personal data.

Retention and deletion

Data is kept as long as needed for the above purposes and legal requirements. On account deletion (Remove Core), personal data is de-identified: email → a technical address like ghost_{id}@deleted, name → "Ghost", avatar → empty; the GBT game balance is annulled/archived (where round rules permit, an equivalent may be directed to a game reserve / prize pool) before deletion; the user is shown the consequences before deletion; de-identified ledger/order records are kept for accounting integrity and anti-fraud. Logging in again with the same email creates a new user.

User rights

Access, correction, deletion, restriction and objection, and withdrawal of consent. Requests go to the operator contact. Rights are exercised in line with Vietnamese personal-data law (Decree 13/2023/NĐ-CP).

HuntMap and privacy

HuntMap shows hearts and Signal activity, not people; a city/district level and blurred event coordinates are allowed, but a user's live location is never shown.

This document is part of the public platform rules. Where translations differ, the Vietnamese version prevails.