Privacy Policy for IIT Quest

Effective Date: September 9, 2025

Last Updated: September 9, 2025

This Privacy Policy governs the collection, use, sharing, and protection of your personal data when you access or use IIT Quest and related mobile applications, software, websites, in-game forums/bulletins, player community, and other services and functions (collectively, “Services”) provided by Capitaltech Pte. Ltd. ("We," "Us," or "Our"), a company registered in Singapore with contact at contact@capitaltech.dev, or by third parties authorized by Us. IIT Quest is a game intended for users aged 13 and older.

By using the Services or accepting Our Terms of Use, you consent to this Privacy Policy, which complies with Singapore’s Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable laws. We may update this Privacy Policy at any time, with notice provided via in-game notices, or Our website or other reasonable means. Continued use after changes constitutes acceptance.

1. Data We Collect

We adhere to data minimization principles, collecting only the data necessary to provide, improve, and market the Services. We collect:

• Contact/Opt-In Information: Email address or username, if you voluntarily provide it (e.g., for newsletters or surveys).
• Social Media Information: Social media handles (e.g., Twitter/X, Discord usernames), if you voluntarily provide them through surveys, competitions, or in-game prompts, for marketing or community engagement purposes.
• Survey Information: Optional responses on age range, gender, nationality, game experience, or occupation, if you participate in surveys (anonymized where possible to protect your privacy).
• Device/System Information: Hardware details (e.g., device model, manufacturer, CPU), system version, display resolution, language, and storage space to ensure compatibility and troubleshoot issues.
• Network Information: IP address and network type (e.g., Wi-Fi, mobile data) for downloads, DLC delivery, or marketing purposes (e.g., analyzing regional usage trends). We do not collect precise location data.
• Game Information: Gameplay logs, crash reports, and progress data (e.g., playtime, choices) for debugging, improving the Services, and marketing (e.g., understanding player preferences), collected anonymously.
• Platform Data: Information provided by third-party platforms (e.g., anonymized analytics such as playtime or session length, or limited user information like platform account IDs, public profile display names, country, or language preferences, subject to user privacy settings), used for analytics, improvements, and marketing. The availability of platform data depends on your privacy settings with each platform.
• Payment Information: Transaction details (e.g., order number, amount) processed by third-party platforms (e.g., Steam, itch.io, GOG, Google Play Billing, Apple App Store), not stored by Us.
• Customer Service Information: Contact details and communication records if you reach out to Us (e.g., via email).
• Device Permissions: Access to storage (for saves) and notifications (for updates, DLC alerts, or marketing communications, if opted in), with your consent where required.

We do not collect sensitive identifiers (e.g., phone numbers, IMEI, IDFA, sensor data) unless strictly necessary for future features, and only with your consent. For users under 13, We strictly prohibit use of the Services without verified parental consent, in compliance with COPPA and other laws.

Data is collected automatically (e.g., via analytics tools or third-party platforms) or when you provide it (e.g., surveys, competitions, support requests).

2. How We Use Your Data

We use your data to:

• Provide and maintain the Services (e.g., ensure compatibility, deliver DLC).
• Process in-app purchases or DLC via third-party platforms.
• Improve the Services (e.g., analyze crash reports, usage trends, or platform data from third-party platforms anonymously).
• Send updates, newsletters, promotions, or survey invitations, or engage in community activities (e.g., via social media handles), if you opt in. You may provide consent through in-game prompts or survey forms, and withdraw consent at any time by following opt-out instructions (e.g., via email links or contacting us).
• Deliver targeted advertising or analyze usage, including platform data and social media information, for marketing purposes (e.g., regional trends, player preferences), where permitted.
• Respond to customer support inquiries.
• Comply with legal obligations or protect Our rights (e.g., fraud prevention).

Under PDPA, We notify you of data use purposes at collection and only use data for those purposes. Non-essential uses (e.g., newsletters, marketing, community engagement) require your explicit consent, which you may withdraw at any time.

3. Sharing Your Data

We share data minimally, only with:

• Third-Party Service Providers: Platforms (e.g., for distribution, DLC, analytics), analytics providers (e.g., for crash reports or marketing insights), ad networks (for mobile ads, if implemented), or payment processors, bound by privacy obligations.
• Business Transfers: In the event of a merger, acquisition, asset sale, or other corporate transaction, We reserve the right to transfer or sell your personal data as part of Our business assets to the acquiring entity, with appropriate safeguards to ensure continued protection of your data in accordance with applicable laws.
• Legal Requirements: Authorities, if required by law (e.g., court orders), or to protect Our rights, property, or safety, or that of Our users or others.

We do not sell your data outside of business transfers as described above. Third parties are contractually obligated to protect your data and use it only for specified purposes.

4. Data Security and Retention

We use reasonable measures to protect your data, but no system is fully secure. To the fullest extent permitted by law, We shall not be liable for any indirect, incidental, special, or consequential damages arising from unauthorized access to or use of your data, including but not limited to data breaches, except where required by applicable law. We will notify you of any data breaches as required by law (e.g., within 72 hours under PDPA if significant harm is likely) and aim to notify affected users promptly to mitigate potential harm. Please note that we are not responsible for guaranteeing security of the information collected by a third party, and please be sure to refer to the security measures taken by a third party in its privacy policy.

We retain your personal data only for the period necessary to provide the Services, fulfill the purposes outlined in this Privacy Policy (e.g., improving the Services, marketing, community engagement), or comply with legal obligations or defend Our rights. Retention periods vary depending on the data type and purpose. Where permitted by law, We may anonymize data for research or statistical purposes, ensuring it cannot identify you. Data no longer needed is securely deleted.

5. Your Rights

You have the right to:

• Access, correct, or delete your personal data (contact us at contact@capitaltech.dev).
• Opt out of non-essential data uses (e.g., newsletters, marketing, surveys, community engagement).
• Under GDPR/CCPA, request data portability or non-discrimination for exercising rights.

Under PDPA, We respond to access/correction requests within 30 days. For complaints, contact Singapore’s Personal Data Protection Commission (PDPC). If you are under the age of majority (e.g., 18), your parent or legal guardian may exercise these rights on your behalf.

6. International Data Transfers

Data may be processed in Singapore or other countries where Our providers operate (e.g., U.S., EU). We ensure appropriate safeguards, such as Standard Contractual Clauses or other mechanisms approved under GDPR and PDPA, for cross-border transfers.

7. Third-Party Links and Services

The Services may link to third-party platforms (e.g., Steam, itch.io, GOG, app stores) or include ads (mobile only). Ad networks may collect additional identifiers (e.g., advertising IDs), subject to their privacy policies, which We do not control.

8. Children’s Privacy

IIT Quest is intended for users aged 13 and older due to sci-fi, historical, and violent themes. We do not knowingly permit users below the minimum age for personal data collection in their country (e.g., 13 under COPPA, 16 under GDPR in some EU countries) to use the Services without verified parental consent. Parents are encouraged to use device parental controls.

9. Contact Us

For questions, data requests, or concerns, contact us at contact@capitaltech.dev . For PDPA complaints, you may also contact Singapore’s PDPC.