OkeyDesk

Classic Turkish Okey — online against real opponents and bots

Privacy policy

Last updated: 5 September 2026

OkeyDesk needs no name, no e-mail address and no password: on first launch the app generates a random device identifier and you pick a freely invented player name. Because you play against other people at a table, your progress, chips and games run through our own server — it validates every move and confirms every winning hand. There is no advertising, no advertising ID and no tracking. Chips are purely in-game currency: they cannot be cashed out and cannot be transferred to other players.

1. Data controller

We have not appointed a data protection officer or an EU representative because we do not reach the relevant thresholds. Please address all requests to the contact above.

2. What data we process

What we explicitly do not collect

• No account in the usual sense: no name, no e-mail address, no phone number, no password, no social login
• No location data, no contacts, no photos, no microphone, no camera
• No advertising, no advertising ID, no analytics SDK, no cross-app tracking, no App Tracking prompt
• No chat and no messages between players — only the freely chosen player name is shown
• No transfer of chips between players and no payout in money — no such function exists
• No payment instrument data: card numbers never reach the app or our server (billing is handled entirely by Apple)

3. Permissions on your device

The app requests only the following permissions. Each of them can be revoked at any time in your device settings; the app remains usable afterwards, with reduced functionality.

• Internet — Connecting to our game server (matchmaking, moves, chip balance, leaderboards) and purchases through the App Store. The «alone against bots» mode also works without a connection.

4. Legal bases

We process personal data under the Swiss Federal Act on Data Protection (revFADP). Where the GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b) GDPR) — everything needed for the app to deliver the function you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — secure and stable operation, abuse prevention, troubleshooting.
• Consent (Art. 6(1)(a) GDPR) — this app requests no special system permissions, so no separate consent is required.
• Legal obligation (Art. 6(1)(c) GDPR) — in particular commercial and tax retention duties for payments.

Running the game server, validating every move and maintaining the chip balance are necessary to perform the contract of use (Art. 31(2)(a) Swiss FADP, Art. 6(1)(b) GDPR). Players at the same table see your freely chosen player name, your avatar image and your state in the current game — nothing more. Choose a player name that does not identify you.

5. Recipients and third parties

We do not sell data and do not disclose it for advertising purposes. Data is disclosed only to the following parties, and only where required for operation:

Authorities and courts receive data only where we are legally obliged to provide it.

Transfers abroad

Some of the recipients listed above process data outside Switzerland and the EEA, in particular in the United States. We base such transfers on the European Commission’s Standard Contractual Clauses with the Swiss adaptations recognised by the FDPIC and, where applicable, on the EU-US Data Privacy Framework. We will provide information on the safeguards in place on request.

6. Retention and deletion

Player name, chip balance, trophies, statistics and game history remain on our server until you delete the account in the app; they are then removed immediately and completely. Running games disappear when the table ends. Technical access logs (IP address, time, address) expire after 14 days. Only purchase receipts are retained for 10 years due to statutory accounting duties; after account deletion they are archived detached from your identifier. An account unused for a long period is deleted after prior notice in the app.

Step-by-step instructions are available at Delete data.

7. Children and young people

This app is not directed at children. We do not knowingly collect personal data from children under 16. If we learn that such data has been submitted without parental consent, we delete it without delay.

8. Data security

Wherever the app transmits data at all, connections are encrypted via HTTPS/TLS. On the server side we use access restrictions, tenant separation and regular backups. Nobody can, however, guarantee absolute security for data transmission over the internet.

9. Your rights

• Access to the personal data we process
• Rectification of inaccurate data
• Erasure or destruction of your data
• Restriction of and objection to processing
• Receiving or porting your data in a common format
• Withdrawal of consent with effect for the future

An informal message to info@babala.ch or a call to 076 222 45 99. We normally respond within 30 days. To verify your identity we may request suitable proof. You may also lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent authority).

10. Changes to this policy

We may adapt this policy when the app or the legal framework changes. The version published on this page, with the date shown above, is the applicable one. We announce material changes inside the app.