Privacy Policy.
What information we collect, why, and what you can do about it.
Last updated: 6 October 2026
What we collect
- When you sign up: first name, last name, email address, UK phone number and a password. Your password is turned into a scrambled code (a hash) before it is saved, so it isn't stored as you typed it. We also record the date you joined, your last sign-in and a count of failed sign-in attempts (five wrong tries lock the account for 15 minutes).
- If you sign up with Google: your name, verified email address and Google account ID from Google, checked by our server with Google. We ask you for your phone number separately.
- When you contact us: your name, email, topic and message.
Where it's kept
Your account (the sign-up details above) is stored on our server as a protected file that can't be opened from the web; we don't use a database. It stays there until you delete your account from My coin basket or ask us to delete it. Signing in sets a strictly necessary session cookie (awb_sid) and a one-time cookie (awb_login, deleted within two minutes) that passes your account details to your browser — see the Cookie Policy.
Your coin balance, plan and daily bonus are kept in your own browser's session storage for the current tab only. They reset to the starting balance when you close the tab; they are never sent to our server, so we can't see or restore them.
Messages you send through the contact or Player Care forms are emailed from our server to our support inbox, and a copy is kept in a protected log on our server so we can reply and check that the message arrived. We delete it once your request is dealt with.
We never ask for or store card or bank details.
Why we use it
- To run your account and coin basket
- To check you are 18+ and in the UK
- To reply when you contact us
Other services
- Google Sign-In, if you choose to use it. Google's own privacy policy applies.
- Our game studio, whose games load inside our pages and may use their own cookies.
- Google Fonts, which supplies the fonts used on the page.
Your rights
Under UK data protection law you can ask to see, correct or delete your information, or object to how it's used. You can delete your account yourself at any time from My coin basket, which removes it from our server. Send your request through the contact form or email . You can also complain to the Information Commissioner's Office (ico.org.uk).
The data controller for this website is , .
Changes
We'll update this page if anything changes. The date at the top shows the latest version.
