The customer data we hold,
and how we handle it.

Gameable Studios builds branded rewards pages and game campaigns for small businesses. When a business (the “merchant”) runs a rewards program with us, we store a small amount of customer data on the merchant's behalf. This page explains what we collect, why, and your rights over it.

When a customer joins a merchant's rewards program or plays a campaign game, we may store:

• Name — so staff can recognise the customer at the counter.
• Phone number — to identify the member and (with consent) send reward reminders.
• Birthday — only if the merchant offers a birthday reward, and only if the customer gives it.
• Consent records — a timestamped note of what the customer agreed to at signup.
• Activity — stamps collected, vouchers claimed, and redemptions, so the program works.

We do not collect payment card details. We do not buy or rent contact lists.

Customers opt in when they join. Marketing messages are only sent to customers who explicitly agree, and every message includes a way to unsubscribe. Customers can withdraw consent at any time by contacting the merchant or us.

The customer data collected through a merchant's rewards program belongs to that merchant. We act as the data processor and hold it on their behalf; the merchant is the data controller. We do not use one merchant's customer data for another, and we do not sell it to anyone.

Data is stored securely with access limited to the merchant's own dashboard and our operations. We keep it only for as long as the merchant runs a program with us, plus a short period for records, after which it can be deleted on request.

Under Singapore's Personal Data Protection Act, you can ask to access the personal data we hold about you, correct it, or have it deleted. To make a request, or if you have any question about your data, message us on WhatsApp or email jonathan@gameablestudios.com and we'll pass verified requests to the relevant merchant where needed.

We're a small studio, not a law firm. This page describes how we handle data in plain terms; merchants with specific compliance obligations should have their own counsel review the setup for their business.