Privacy Policy
Effective Date: March 24, 2026 | Last Updated: March 24, 2026
Space Keno ("we," "us," "our," or the "Operator") operates the free-to-play keno game available at spacekeno.com and through Facebook Instant Games (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Service.
This policy is designed to comply with applicable privacy laws in the jurisdictions where we operate, including the California Consumer Privacy Act (CCPA) and California Online Privacy Protection Act (CalOPPA) in the United States, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 in the United Kingdom, the Privacy Act 1988 and Australian Privacy Principles (APPs) in Australia, and the Privacy Act 2020 in New Zealand.
1. Information We Collect
1.1 Information You Provide
- Facebook Profile Information: When you play via Facebook Instant Games, we receive your Facebook Instant Games player ID (a game-scoped ID, not your real Facebook account ID) as provided by the Facebook Instant Games SDK. We do not receive your real name, display name, profile photo, or any other Facebook account information.
- Chat Messages: Messages you send through our in-game chat feature.
- Support Communications: If you contact us at support@spacekeno.com, we collect your email address and the content of your correspondence.
1.2 Information Collected Automatically
- Game Activity Data: Wagers placed (virtual currency only), number picks, game outcomes, win/loss records, scores, and other gameplay statistics.
- Device and Browser Information: Browser type and version, operating system, screen resolution, device type, and language preference.
- Usage Data: Pages visited, session duration, referring URLs, and interaction patterns within the game.
- Cookies and Local Storage: We use browser cookies and localStorage to maintain session state, remember preferences, and track basic analytics. See Section 7 for details.
- IP Address: Your IP address is collected in server logs for security and analytics purposes.
1.3 Information We Do NOT Collect
- Real names, physical addresses, or phone numbers (unless you voluntarily provide them via support email)
- Payment card numbers, bank account details, or any financial information
- Government-issued identification
- Precise geolocation data
- Information from minors under 13 (see Section 10)
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Data Used | Legal Basis (UK GDPR) |
|---|---|---|
| Operate and deliver the game | Facebook Instant Games player ID, game activity, session data | Legitimate interest / Contract performance |
| Display your identity to other players | Facebook display name, profile photo | Legitimate interest |
| Enable in-game chat | Display name, chat messages | Legitimate interest |
| Maintain leaderboards and statistics | Game activity, display name | Legitimate interest |
| Improve and optimize the Service | Usage data, device info, analytics | Legitimate interest |
| Ensure security and prevent abuse | IP address, device info, usage patterns | Legitimate interest |
| Respond to support requests | Email, correspondence content | Legitimate interest / Contract performance |
| Comply with legal obligations | As required | Legal obligation |
3. How We Share Your Information
We do not sell your personal information. We may share information in the following limited circumstances:
- With Other Players: Your display name, profile photo, chat messages, and gameplay statistics (e.g., leaderboard rankings) are visible to other players as part of normal game functionality.
- Facebook Platform: Certain game activity may be shared back with Facebook as required by the Facebook Instant Games platform. Facebook's use of that data is governed by Facebook's Privacy Policy.
- Service Providers: We may share data with hosting providers and infrastructure services that help us operate the Service, subject to confidentiality obligations.
- Legal Requirements: We may disclose information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4. Data Retention
We retain your personal information only as long as reasonably necessary for the purposes described in this policy:
- Account and game data: Retained for as long as your account is active. If you do not access the Service for 24 consecutive months, we may delete or anonymize your data.
- Chat messages: Retained for up to 12 months, then automatically purged.
- Server logs (including IP addresses): Retained for up to 90 days.
- Support correspondence: Retained for up to 24 months after resolution.
You may request earlier deletion of your data by contacting us (see Section 12).
5. Data Security
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:
- HTTPS/TLS encryption for all data in transit
- Secure server infrastructure with access controls
- Regular security reviews
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. International Data Transfers
Our servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you acknowledge this transfer.
For users in the UK: Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR, including standard contractual clauses or other approved transfer mechanisms.
For users in Canada: Your information may be processed in a foreign jurisdiction and may be accessible to law enforcement and governmental authorities in accordance with the laws of that jurisdiction.
For users in Australia and New Zealand: We take reasonable steps to ensure overseas recipients handle your personal information in accordance with the Australian Privacy Principles and New Zealand's Privacy Act 2020, respectively.
7. Cookies and Local Storage
7.1 What We Use
- Session Cookies: Essential for game functionality, maintaining your session state.
- localStorage: Used to store game preferences, cached game state, and session tokens locally on your device.
- Analytics Cookies: Used to collect anonymized usage statistics to help us improve the Service.
7.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling cookies or clearing localStorage may prevent the game from functioning correctly.
7.3 Do Not Track
We do not currently respond to "Do Not Track" browser signals, as there is no industry-standard protocol for compliance. However, you can manage tracking through the cookie controls described above.
8. Your Privacy Rights
Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:
8.1 All Users
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
8.2 California Residents (CCPA / CalOPPA)
If you are a California resident, you have the following additional rights under the CCPA:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt Out of Sale: We do not sell personal information. No opt-out is required, but you may still submit a request for confirmation.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
California residents may make a verifiable consumer request by emailing support@spacekeno.com. We will respond within 45 days, as required by law.
CalOPPA Disclosures: This policy is accessible from our homepage. We disclose how we respond to Do Not Track signals in Section 7.3. We do not allow third parties to collect personally identifiable information about your online activities over time and across different websites.
8.3 Canadian Residents (PIPEDA)
If you are a Canadian resident, you have the right to:
- Access your personal information held by us and be informed of its use and disclosure.
- Challenge the accuracy and completeness of your information and have it amended as appropriate.
- Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
- File a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not handled your information appropriately.
8.4 UK Residents (UK GDPR)
If you are a UK resident, you have the following rights under UK GDPR and the Data Protection Act 2018:
- Right of Access: Obtain confirmation of whether your data is being processed, and a copy of it.
- Right to Rectification: Have inaccurate personal data corrected.
- Right to Erasure: Request deletion of your data in certain circumstances ("right to be forgotten").
- Right to Restrict Processing: Request restriction of processing in certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
8.5 Australian Residents (Privacy Act 1988 / APPs)
If you are an Australian resident, you have the right to:
- Access your personal information held by us (APP 12).
- Request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information (APP 13).
- Complain about a breach of the Australian Privacy Principles. We will respond to complaints within 30 days.
- If unsatisfied with our response, lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8.6 New Zealand Residents (Privacy Act 2020)
If you are a New Zealand resident, you have the right to:
- Access your personal information held by us (Information Privacy Principle 6).
- Request correction of your personal information (Information Privacy Principle 7).
- Lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.
9. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party platforms (e.g., Facebook). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with any personal information.
10. Children's Privacy
The Service is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@spacekeno.com so we can take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Provide notice through the Service (e.g., an in-game notification).
- Where required by law, obtain your consent before applying material changes.
Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to make a complaint, please contact us:
Space Keno
Email: support@spacekeno.com
Website: spacekeno.com
We will acknowledge receipt of your request within 5 business days and respond substantively within the timeframes required by applicable law (generally within 30 to 45 days).