Privacy Policy

Who we are

This Privacy Policy explains how Nexx Digital Sdn. Bhd. (company no. 944121-A), trading as Nexx Studio — “we”, “us”, “our” — collects and uses personal information. We are an independent mobile-game developer and publisher based in Subang Jaya, Selangor, Malaysia, and we are the data controller responsible for your information.

It applies to our mobile games (on the App Store, Google Play and Amazon Appstore), our website at nexxstudio.com, and any support or marketing communications we send. Some older titles have been delisted but may remain installed on devices; this policy covers those too.

Nexx Digital Sdn. Bhd. is the data controller. If you are in the EEA or UK and we are required to appoint a representative under Article 27 of the GDPR, that representative can be reached through the privacy contact in section 15.

What information we collect

We've designed our games so you can play without handing over your name, email or an account. The information we do process falls into a few categories:

Where an identifier (such as an advertising ID or device ID) can be linked to you or your device, we treat it as personal data under the GDPR even when it doesn't include your name.

How and why we use your information

Under the GDPR and UK GDPR we must have a lawful basis for everything we do with your data. Here is how that maps to what we actually do:

• ATo run and improve the games — delivering gameplay, fixing crashes, and understanding which features work. Basis: our legitimate interest in operating and improving our products.
• BTo process purchases — confirming in-app purchases and honouring refunds or restores. Basis: performance of a contract with you.
• CTo show ads in free games — including, where required by law, personalised ads. Basis: your consent, which you can withdraw at any time.
• DTo answer you and send updates — replying to support, and sending our newsletter if you asked for it. Basis: consent or legitimate interest.
• ETo stay legal and secure — preventing fraud and abuse and meeting our tax, accounting and legal duties. Basis: legitimate interest and legal obligation.

We do not use your information to make decisions about you with legal or similarly significant effects through purely automated means.

Ads & advertising identifiers

Our catalogue is a mix: some games are paid with no ads, and some are free and supported by advertising. In our ad-supported titles we work with third-party advertising networks (including, but not limited to, mobile ad-mediation and ad-serving providers) to display ads and measure how they perform. The specific networks we use may change over time as our products and partnerships evolve.

To do this, these partners may access your device's advertising identifier and limited technical information, and act as independent controllers of the data they collect under their own privacy policies. Being transparent: we don't control, and can't fully see, everything an ad network collects — so we direct you to the notice each network provides within the relevant app, and give you direct ways to limit tracking on your device.

Analytics

We use analytics to understand how people play and where games can be better — for example which level is too hard, or where the app crashes. On our website and in our games we rely on third-party analytics providers, including the analytics tools built into our development and advertising platforms.

Analytics data is generally aggregated or tied to a random identifier rather than your name, and we configure it to limit what's collected. We change analytics providers from time to time, and have retired older tools that are no longer in active use.

Purchases & payments

When you buy a paid game or make an in-app purchase, the transaction is handled entirely by the platform's app store (for example, the Apple App Store or Google Play). Your payment details go to the store, not to us — we never receive or store your card number.

We receive a confirmation that a purchase succeeded and which product it was, which we use to unlock content, support refunds and restores, and keep accurate financial records as the law requires.

Who we share information with

We do not sell your personal information, and we don't share it for cross-context behavioural advertising in the sense defined by California law beyond what's described here. We share data only with the categories of partners that help us run Nexx, including, but not limited to:

• ○App stores & platforms — for distribution, payments and crash reporting.
• ○Advertising networks — in ad-supported games only.
• ○Analytics & infrastructure providers — who process data on our behalf under contract.
• ○Professional & legal — advisers, or authorities where we're legally required, or a successor entity in the event of a merger or acquisition.

International data transfers

We're based in Malaysia, and several of our partners are based in the United States and elsewhere, so your information may be transferred to and processed in countries outside your own — including outside the European Economic Area and the UK.

When we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or transfers to countries recognised as providing adequate protection. You can ask us for more detail using the contact in section 15.

How long we keep your information

We keep personal data only for as long as we need it for the purposes in this policy. Analytics data is generally retained in aggregated or de-identified form; support emails are kept while we handle your request and for a reasonable period afterwards; and purchase and tax records are kept for the period required by Malaysian law (typically up to seven years).

When we no longer need information, we delete it or anonymise it so it can no longer be linked to you.

Your privacy rights

Depending on where you live, you have rights over your personal data. We honour these requests free of charge and will respond within the time the law allows. To exercise any of them, email privacy@nexxstudio.com.

If you're in the EU, EEA or UK (GDPR)

If you're in California (CCPA/CPRA)

You have the right to know what personal information we collect and how it's used, to request deletion or correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information. You also have the right not to receive discriminatory treatment for exercising these rights.

If you're in Malaysia (PDPA)

Under the Personal Data Protection Act 2010 you may request access to and correction of your personal data, withdraw consent to its processing, and limit processing for direct marketing. We process personal data in line with the PDPA's principles.

Children's privacy

Our games are made for a general audience. While our puzzle and arcade titles are family-friendly in tone, they are not directed to children under 13 (or the equivalent minimum age in your country), and we don't knowingly collect personal information from children.

In ad-supported games we configure our ad partners to treat traffic appropriately and avoid personalised advertising where a user may be a child. If you believe a child has provided us with personal information, contact us at privacy@nexxstudio.com and we'll delete it promptly.

Cookies & this website

On nexxstudio.com we use a small number of cookies: essential ones that make the site work, and analytics cookies (set by a third-party analytics provider) that help us understand how visitors use it. Non-essential cookies are only set after you accept them in our cookie banner.

You can change your mind at any time — clearing your choice below will bring the cookie banner back so you can accept or decline again. You can also block or delete cookies in your browser settings.

How we protect your information

We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access — including encryption in transit, access controls, and choosing reputable providers who maintain their own security standards.

No method of transmission or storage is ever completely secure, so while we work hard to protect your information, we can't guarantee absolute security.

Changes to this policy

We may update this policy from time to time — for example when we add a game, change an ad partner, or in response to new legal requirements. When we do, we'll revise the “effective” date at the top, and for significant changes we'll give a more prominent notice in our games or on this site.

Contact us

Questions about this policy, or want to exercise your rights? We're a small team and we read everything.