Privacy Policy
Last Updated: 12/02/2026
This Privacy Policy explains how Bandit Island (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our games and related services (the “Services”).
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national legislation.
If you have any questions about this Privacy Policy or how we process personal data, please contact us at:
Email: contact@bandit-island.com
BANDIT ISLAND
Bandit Island
Österlånggatan 43
111 31 Stockholm
Sweden
Corporate registration number: 559481-0524
Bandit Island is the data controller for personal data collected through our games and Services.
WHAT WE PROMISE
We are committed to protecting your privacy. We strive to:
Keep your data secure
Allow you to access or delete your data
Give you control over marketing communications
Process your data lawfully and transparently
WHAT IS PERSONAL DATA?
Personal data is any information relating to an identified or identifiable natural person.
This may include information that identifies you directly or indirectly, such as:
name
email address
IP address
device identifiers
in-game username or nickname
In this Privacy Policy we refer to personal data simply as “data.”
LEGAL BASIS FOR PROCESSING
We only process your personal data when we have a legal basis to do so. These include:
Contractual necessity
To provide and operate our games and services (for example when you create an account or purchase in-game items).
Legal obligation
To comply with legal requirements such as accounting, fraud prevention, or regulatory obligations.
Consent
Where you have explicitly agreed to certain processing activities (for example location tracking or marketing communications).
Legitimate interests
Where processing is necessary for our legitimate business interests and does not override your rights or freedoms. This may include:
improving our games
analyzing gameplay trends
preventing fraud or cheating
maintaining service security
managing and operating our business
You may contact us if you want more information about our legitimate interest assessments.
WHEN DO WE COLLECT YOUR DATA?
We collect data in the following situations:
When you accept our Terms of Service or Privacy Policy
When you create a game account or player ID
When you play our games
When you contact our support services
When you respond to customer surveys
When you participate in beta tests or playtests
When you log in using third-party platform accounts (such as game platforms)
WHAT DATA DO WE COLLECT?
Data You Provide to Us
You may provide us with:
Email address
Username
In-game nickname
Messages or other in-game communications
We may also receive information when:
You contact support
You complete surveys or feedback forms
You participate in playtests or beta programs
You apply for a job with us and send us your resume or related information
Data Collected Automatically
When you use our games or services, we may collect:
Profile and usage data
player profile information
IP address
cookies or similar identifiers
gameplay behavior and usage statistics
Device information
device type
operating system
hardware specifications
software version
Platform information
platform type (PC, Android, iOS, etc.)
preferred language
Advertising identifiers
IDFA (iOS)
Google Play Advertising ID
other platform identifiers
Gameplay activity
games played
playtime
progression and achievements
multiplayer sessions
Technical data
crash reports
error logs
diagnostic information
Location Data
Where required by applicable law, we will request your consent before collecting precise location data. You may withdraw this consent at any time.
Information from Third Parties
We may receive information from third-party platforms or partners to:
provide game platform functionality
prevent fraud or abuse
support advertising and marketing analytics
determine regional information required for taxation
WHY DO WE PROCESS YOUR DATA?
We process personal data to:
operate and provide our games
improve and develop our games
respond to your support requests
verify your identity and prevent unauthorized access
provide updates and patches
analyze gameplay trends
measure marketing performance
provide marketing communications where permitted
detect and fix bugs or technical issues
process transactions
administer beta tests or playtests
enforce our Terms of Service and policies
prevent cheating, fraud, or illegal activity
comply with legal obligations
We do not use your personal data for purposes incompatible with those listed above.
THIRD-PARTY SERVICE PROVIDERS
We may share data with trusted third-party service providers that help operate our Services. These may include:
cloud hosting providers
analytics providers
payment processors
advertising partners
customer support platforms
infrastructure providers
These providers process data only on our behalf and according to our instructions.
INTERNATIONAL DATA TRANSFERS
Some service providers may process data outside the European Economic Area (EEA).
When this occurs, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses approved by the European Commission
equivalent legal protections for international transfers
CHILDREN
Our Services are not directed at children under 16 years of age, and we do not knowingly collect personal data from children.
Parents or guardians who believe their child has provided personal data may contact us at:
If we discover that personal data has been collected from a child, we will delete it unless we are legally required to retain it.
SECURITY MEASURES
We use physical, technical, and organizational safeguards to protect personal data.
These measures include:
encrypted data transfers using Transport Layer Security (TLS)
restricted access to authorized personnel
security monitoring and fraud prevention systems
Please note that you should also be careful when sharing information with other players in chat or public forums.
We will never ask for your password.
IF YOU CHOOSE NOT TO SHARE DATA
Some personal data is necessary to provide our games and services.
If you choose not to provide required data, we may be unable to:
create your account
provide certain game features
process purchases
provide multiplayer functionality
Optional data collection will always be clearly indicated.
DATA RETENTION
We retain personal data for as long as necessary to provide our services.
Inactive accounts may be deleted after three (3) years, unless the account contains purchases or other items that should reasonably be preserved.
We may retain anonymized data for research or statistical purposes.
Personal data may also be retained where required by law.
RIGHT TO BE FORGOTTEN
You may request that we delete your personal data.
We will delete your data unless:
it is required to provide our services
we are legally required to retain it
it is necessary for legal claims or compliance purposes
YOUR RIGHTS
Under applicable data protection law you may have the right to:
access your personal data
correct inaccurate information
request deletion of your data
restrict processing
object to certain types of processing
receive a portable copy of your data
To exercise these rights, contact:
HOW TO REQUEST YOUR DATA OR DELETE IT
To request access to your data or request deletion, simply contact us by email.
We may request additional information to verify your identity before fulfilling your request.
We will not delete data if we cannot verify that you are the rightful owner.
POLICY CHANGES
We may update this Privacy Policy from time to time.
If significant changes are made, we will notify users through:
our website
email notifications
in-game notifications where appropriate
CONTACT AND COMPLAINTS
If you have questions or concerns about this Privacy Policy, contact:
Email: contact@bandit-island.com
If you wish to make a complaint about how your data is handled, you may contact the Swedish data protection authority:
Integritetsskyddsmyndigheten (IMY)https://www.imy.se/privatperson/utfora-arenden/lamna-ett-klagomal/
You may also contact any supervisory authority within the European Economic Area:https://edpb.europa.eu/about-edpb/board/members_en