Privacy Policy

👋 Who we are

GameBiller is a product of Biller Technologies, an Indian company. We provide cloud software that helps gaming centers, cyber cafes, LAN cafes, and play zones in India manage their PS5/PS4/PC stations, generate GST-compliant invoices, and run memberships, loyalty points, and subscriptions.

This policy covers our Android app (bundle com.gamebiller.app) and our web product at www.gamebiller.com. By using GameBiller, you agree to the practices described here.

In this policy, "we" means Biller Technologies, and "you" means the shop owner or staff member using GameBiller.

📦 What data we collect

a) Data you give us directly

• Name — your name for your account.
• Email address — to create and manage your account (email/password or Google Sign-In).
• Phone number — optional at signup; also used in the customer billing records you create.
• Address — optional; your shop address for invoices.
• Customer records you enter — names and phone numbers of your customers that you add for billing, memberships, and loyalty points.

You are responsible for getting consent from your own customers before entering their details into GameBiller.

b) Data we collect automatically

• User IDs — an internal account identifier we assign you.
• Purchase history — your own invoice and subscription records inside the app.
• App interactions — how you use features, to keep the app working and improve it.
• Crash logs & Diagnostics — technical details when something goes wrong.
• Firebase Installation ID / App instance ID — a device-level identifier used for app functionality and analytics.
• IP address — recorded in our API server logs for security and troubleshooting.

These map to the categories we declared in the Google Play Data Safety form:

🎯 How we use your data

We use your data only for the three purposes we declared on the Play Store:

• Account management — create your account, sign you in, and keep it secure.
• App functionality — run stations and timers, generate invoices, manage memberships, loyalty, snacks, and subscriptions, and send you transactional emails.
• Analytics — understand how the app is used and fix crashes so we can improve it.

🤝 How we share your data

We share only what is necessary for each service below to do its job. We do not share your data with anyone else.

Razorpay is PCI-DSS compliant and handles card data directly — GameBiller never sees your raw card details.

⏱ Data retention

To delete your account and data, please visit our account deletion page.

⚖ Your rights as an Indian user (DPDPA 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to fix data that is wrong or out of date.
• Erasure — ask us to delete your data, via our account deletion page.
• Grievance redressal — raise a complaint with our Grievance Officer (see below).
• Nominate — nominate another person to exercise these rights on your behalf in case of death or incapacity.

To exercise any of these rights, please reach out using the Contact us details below.

🔒 Security

• All data is encrypted in transit using HTTPS / TLS 1.2+.
• Passwords are hashed with bcrypt — we never store them in plain text.
• Sessions use JWT-based tokens.
• On the web, your session is stored in a HttpOnly, secure cookie; on Android, credentials are kept in encrypted SharedPreferences.
• Your data is stored in the Mumbai region (data residency in India).
• Payments go through Razorpay (PCI-DSS compliant) — we never see raw card details.

As per the IT Rules 2011, we follow reasonable security practices to protect your data. No system is perfectly secure, but we work hard to keep yours safe.

🧒 Children

GameBiller is a business tool for gaming center owners and their staff. It is not directed at, or intended for, anyone under 18 years of age. If we learn that we have collected personal data from a minor, we will delete it promptly.

🌐 International data transfers

Our primary infrastructure — hosting (Vercel) and database (Supabase) — is located in India (Mumbai region), so your core app data stays in India.

However, Firebase services (authentication, crash reporting, analytics) may transfer some diagnostic and authentication data to Google data centers outside India. Google processes this data under its own privacy commitments. We keep these transfers limited to what is needed for sign-in and diagnostics.

🍪 Cookies and tracking on the web app

• We use a single HttpOnly session cookie named token to keep you signed in. It expires when you close your browser.
• We do NOT use third-party advertising or tracking cookies.
• The Android app wraps the same web product inside a WebView (Capacitor), so the same cookie behaviour applies there.

📝 Changes to this policy

If we update this policy, we will change the "Last updated" date at the top of this page. For material changes, we will also notify active users through an in-app notice and by email.

🧑‍⚖️ Grievance Officer

As per the DPDPA 2023, we have appointed a Grievance Officer to address your concerns about how your data is handled:

• Name: Sivabalan
• Designation: Grievance Officer
• Email: contact@gamebiller.com
• Response time: within 15 days of receiving your request

✉ Contact us

Have a question about your privacy? Please reach out: