Jhooomo operates the PlayLah! game. If you play on a server run by someone else — the
software is self-hostable — then that operator controls your data, not us, and you should ask
them for their policy. This document covers servers we operate at
jhooomo.com and its subdomains.
| Data | Why |
|---|---|
| Email address or mobile number | To identify your account and let you sign in. |
| Password | Stored only as a bcrypt hash. We never store or see your actual password. |
| Display name | Shown to other players at the table. |
| Country code (e.g. +91) | Required. Some features are restricted by country for legal reasons. |
| Points, match history, tournament entries | The game itself — your balance and results. |
| Data | Why |
|---|---|
| A device identifier generated by the app | To detect and block misuse — multiple accounts abusing tournaments, for example. |
| IP address | Same purpose, plus rate limiting to resist automated attacks. |
| Browser/OS user agent, platform, app version | To diagnose faults and know which builds are in use. |
| Approximate or precise location | Optional. See below. |
The app asks for location to help detect misuse, such as one person running several accounts. This is always behind your device's own permission prompt, which you can decline. If you decline:
You can revoke location access at any time in your device settings, and it takes effect immediately.
Messages sent in a game room are stored so players can see the conversation on rejoining, and so an administrator can resolve a dispute. Chat is automatically deleted after 7 days. Players can extend a specific room to a maximum of 30 days; after that it is always deleted. Do not put anything sensitive in chat.
| Data | Retention |
|---|---|
| Account details and gameplay history | While your account exists. |
| Chat messages | 7 days by default; 30 days maximum if extended. |
| Device and location records | While needed for misuse investigation; deleted with your account. |
| Sign-in sessions | Expire after 7 days. You can revoke all other sessions from your profile at any time. |
You can ask us to show you the data we hold about you, correct it, or delete your account and everything attached to it. Write to privacy@jhooomo.com and we will respond within 30 days. Deletion is permanent — points and match history cannot be recovered afterwards.
If you are in India, the Digital Personal Data Protection Act 2023 gives you rights over your personal data, including access, correction, erasure and grievance redressal. The address above is the contact for those requests. Depending on where you live, other laws such as the GDPR may give you comparable or additional rights.
Passwords are hashed with bcrypt and never stored in readable form. Sign-in sessions are short-lived and can be revoked. Traffic is encrypted with HTTPS. Repeated failed sign-ins lock an account temporarily to resist password guessing. No system is perfectly secure, and we don't claim otherwise — but if we discover a breach affecting your data, we will tell you.
Jhooomo is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will remove it.
If we change this policy in a way that materially affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.