Last Updated: 31 Aug 2026
Triple Joy is a game studio operated by HIGGS TECHNOLOGY CO., LIMITED (the "Company", "we", "us" or "our"). Our Google Play developer name is Cobby Labs. This Privacy Policy applies to games operated by us under that developer name that link to this Policy, including Goods Master 3D, Balloon Triple Match, Dancing Cats, Dancing Cats 2, Pop Piano, Cat Hop, Cat Music Dash and Rolling Twins ("our Games"). These examples are not exhaustive: other games within this scope are also covered, unless a separate privacy policy is expressly provided for them.
This Privacy Policy ("Policy") is provided to help you understand our practices related to the collection, use, storage, and disclosure of information we collect from or about you when you interact with us, your rights regarding the information provided to us, and how we transfer and secure such information. Our Games, the website at https://cobbygame.com/, and the related customer support, game events and other services that link to this Policy are collectively referred to as "our Services". The terms "you" and "users" refer to individuals using those Services.
Please read this Policy carefully to understand our practices regarding your Personal Data (as defined below). This Policy provides information about our data practices; downloading or using our Services does not, by itself, constitute consent to all processing described here. Where consent is required, we request it separately before the relevant processing and provide a way to withdraw it. Our Terms of Service are available at https://cobbygame.com/eula.html. Those terms do not override your statutory data protection rights.
If we update this Policy, we will notify you by announcements in our Games to let you know about the changes we made and obtain your consent again. By accessing or using our Services after we have placed such a notice, you are deemed to have accepted the updated Policy. You can see when this policy was last updated by checking the "last updated" date displayed at the top of this policy. If we are required by applicable data protection laws to give you enhanced notice or seek your consent for any such changes, we will do so. Any revised Policy will supersede all previous privacy policies.
For your better experience in our Services, we may require you to provide us with certain Personal Data while using our Services.
We may collect your Personal Data in the following ways: 1) information you directly provide to us (such as your nickname, profile picture and phone number you provide to us when you register or login to your account); 2) information we obtain automatically during your use of our Services (such as Device Information and Usage Data); or 3) information we obtain from other sources.
We will collect and use your Personal Data only for the purposes described in this Policy. The following describes your Personal Data that we collect and how we use it.
We may collect some or all of the following information about you when you use our Services for legitimate interests.
| No. | Categories | Details | Purposes | Additional information | |
|---|---|---|---|---|---|
| 1 | Login Information | some of your Personal Data, such as e-mail address, verification code by email or SMS, and password | Enable you to sign up with your e-mail/mobile phone number | ||
| the information you authorized the Social Networks to share with us to sign up for our Services. Exactly what information we receive from the Social Networks may vary due to your privacy settings on such Social Network, but it would typically include your basic public profile information such as your nickname, username and profile picture. | Enable you to register via social network accounts, such as Apple ID, Facebook or Google Play ("Social Networks") and sign up for our Services | If you refuse to provide information of your Social Networks accounts, you may not have the option to register and log in by your Social Networks accounts. | |||
| date of birth | verify that you are eligible to access or use our Services | Applicable to certain regions | |||
| 2 | Account Information | profile picture, nickname, gender, date of birth and location. | Enable you to use our Services based on your own choices and have more popularity | Please do not post or add additional information to your profile that you would not want to be publicly available. | |
| 3 | Payment Information | purchase and transaction record in the Services: device information: Open ID, Internet Protocol (IP) address, OS version, type of device, internet connection; transaction details: time and date, cost, product purchased, currency, order ID; transaction records: including player ID, time of transaction, country, email, phone number, purchase history and payment card details | enable you to purchase virtual currency or virtual items in our Services, and perform our contract with you to facilitate your payment and provide you with details of your transactions. | All purchases and withdrawals are processed by payment processing companies. We do not process the payments for any payment nor do we have any access to your credit card information or billing information. | |
| 4 | Any Information You Submit to Our Support Team | the content of your enquiry, your device information, contact details or other contact information you leave with us | Enable you to contact us and seek assistance through our technical and/or customer service and we may help you resolve the problem, or record the problem and its solution. | If you choose not to provide such information, we may not be able to provide you with this service, but your use of other features of our Services will not be affected. | |
| 5 | Advertising Information | Android ADID and Apple IDFA information and device information with your profile | to track the success of our advertising if you click on advertisements in our Services | We may also use the information you provide to send you deliver advertisements, market surveys or research by email. If you don't want to receive such messages from us, you may opt-out of receiving such messages (see "Promotional Communications" below). Please note that when you opt out of receiving interest-based or targeted advertising, you will still see advertisements from us or on our online services, but that advertising will not be targeted using your Personal Data. If we know that you are a registered user under the legal age of majority in accordance with the applicable laws of some jurisdictions from which you access or use our Services, we will not target you with advertising or send you such messages. |
|
| age, gender, e-mail address, geographical location, device type, in-game information (such as your habits and preferences in our Games) and other information you choose to provide to us in any surveys or inquiries | In order to provide you with personalized advertisements, promotional activities and marketing communications if you | ||||
| 6 | Data We Automatically Collect | Internet Protocol (IP) address. | We collect and process this information to allow you to access or restrict your access to our Services. | Please note that some of the above-mentioned information alone cannot be used to identify a specific natural person, thus cannot be considered as Personal Data. Only when such non-Personal Data is used in combination with other information to identify a specific natural person, or when it is used in combination with Personal Data, will this information be regarded as Personal Data during such combination. In this case, we will anonymize and de-identify this type of information, unless with your consent or otherwise according to laws and regulations. The above-mentioned information is essential as to the provision of the Service. If you choose not to provide them, we may not be able to provide you with our Services. | |
| Device information. Such as UUID, IMEI, MAC address, IDFA, your device model, operating system and version, APK name, App version, device display resolution, device setting, CPU information, storage information, battery usage status, time zone settings and device location information (Internet Protocol (IP) address, GPS location and WLAN connection, Bluetooth and cell site information that provides location information). | We will collect information about the mobile device you are using to ensure service security, manage registrations and improve our Services. | ||||
| Usage Data. Including login account, IP address, provider information, internet connection environment, WIFI status information, and other Usage Data generated when you use our Services. | For the purposes of performing our Terms of Service, we will collect details of your use of our services and keep them as Usage Data when you use our services. | ||||
| 7 | Survey Information | Any feedback you provide when you contact customer service and any questionnaire you send back to us when you participate in a survey. | We may also collect other information about you that we reasonably need to improve our products or services | We may combine information from one service with information from others in order to provide you with better service. | |
| 8 | Other Situations in Which Your Information May Be Collected | To the extent permitted by law, we may obtain your Personal Data from other individuals, business entities, public sources or other third parties acting at your direction, our partners who work with us to provide our products and services and assist us in information security and fraud prevention, and from other lawful sources. We will explain it to you at the time of such collection and obtain your consent. We may also use other methods to collect other information about you, your device or your use of services, which will be explained to you at the time of collection prior to obtaining your consent. |
We may use your Personal Data to send you updates about our Services, including exclusive offers, promotions, or new services. We have a legitimate interest in processing your Personal Data for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly. We will always treat your Personal Data with the utmost respect and never sell it to other organizations for marketing purposes.
You have the right to opt-out of receiving promotional communications at any time by:
We may ask you to confirm or update your marketing preferences if you instruct us to provide further services in the future, or if there are changes in the law, applicable regulations, or structure of our business.
Under data protection law, we can only use your Personal Data if we have a proper reason for doing so, e.g.:
A legitimate interest is when we have a business or commercial reason to use your Personal Data, so long as this is not overridden by your own rights and interests.
We may use your Personal Data for:
We do not use your Personal Data for any automated decision making purposes.
Personal Data may be held at our offices and those of our third-party service providers or representatives and agents (see "How We Share, Transfer, and Disclose Your Data" below). Your data collected by us will be stored in accordance with the laws and regulations on the personal privacy data protection of the countries concerned. You acknowledge and agree that, to the extent not prohibited by local laws and regulations, your data will be processed on our servers which may not be located in your country of residence and can be accessed by our support, engineering and/or our affiliates around the world. Your information we collect may be stored and processed for the purposes set out in this Privacy Policy in Hong Kong, Singapore or any other country in which the Company, its subsidiaries, or third party agents operate. No matter where our servers are located, we will make great efforts to take the appropriate safeguards to guarantee your rights in conformity with this Policy and any applicable laws.
We will keep your Personal Data while you have an account with us or while we are providing you services. Thereafter, we will keep your Personal Data for so long as is necessary to:
We will not retain your Personal Data for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of Personal Data:
If your account is canceled or terminated pursuant to the Terms of Service, we will delete or anonymize your Personal Data.
The security of your Personal Data is important to us and we implement security safeguards designed to protect your Personal Data and regularly monitor our systems for possible vulnerabilities and attack. We are constantly working to improve on these safeguards to keep your Personal Data secure.
However, we need to remind you that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
When sharing, transferring, and disclosing your Personal Data, we uphold the principles and requirements of minimization, necessity, and legality. Except as described below, we do not share, transfer or disclose your Personal Data externally:
WE DO NOT SELL ANY PERSONAL DATA TO THIRD PARTIES. We will share your Personal Data with only where necessary. Situations where this occurs are:
We only allow our service providers to handle your Personal Data if we are satisfied they take appropriate measures to protect your Personal Data. We also impose contractual obligations on service providers to ensure they can only use your Personal Data to provide services to us and you. Your Personal Data received by these third party service providers may be subject to their respective privacy policies or notices, and this Policy does not apply to any products, services, websites or content that are offered by third parties. We are not responsible for the third-party service provider's collection, use and/or processing of your Personal Data.
We will not transfer your data to any other parties, except in the following circumstances:
We may need to disclose data about you when required by law, subpoena, or other legal process or if we have a good faith belief that the disclosure is reasonably necessary to (1) investigate, prevent or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you; (3) investigate and defend ourselves against any third-party claims or allegations; (4) protect the security or integrity of our Services; or (5) exercise or protect the rights and safety of our Services, our users, personnel or others. We attempt to notify users about legal demands for their Personal Data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.
Additionally, we may share your data with:
For the purposes described in this Policy, and to the extent permitted by applicable local laws and regulations and with your authorized consent, we may transfer your Personal Data to our servers stipulated in Section V (How We Store and Protect Your Personal Date) of this Policy for storage or processing, we may also transfer your Personal Data to third-party service providers and business partners and your data may therefore also be transmitted to other countries or regions.
In the circumstance that we transfer Personal Data outside of your jurisdiction, whether it is transferred to our affiliates or third-party service providers, we will comply with relevant applicable laws. We will take appropriate security measures and safeguards to make sure that all such transfers meet the requirements of applicable local data protection laws.
Our Services are not intended for children under the age of thirteen (13) or the minimum age in the relevant territory if that age is older than thirteen (13) (the "Child" or "Children"), and we do not knowingly collect any personal information from such Children. Children should not use or attempt to use our Services, and if you are a Child, please do not attempt to use our Services or send any information about yourself to the Company.
In the event that we learn that we have inadvertently gathered personal information from a Child, we will take reasonable measures to delete such information from our records. Parents who believe that we might have gathered any information from or about a Child may submit a request to delete such information to our email address listed in Section XIII (How to Contact Us) below.
You have specific rights regarding your personal information, which are described in this Section. You or an authorized agent acting on your behalf may exercise your personal information rights by submitting a verifiable request or through our platform (see "How To Exercise Your Rights" below). If an authorized agent submits a request to know or delete your personal information, we require you to:
You have the following data protection rights:
According to the applicable laws of some jurisdictions, you may have other data subject's rights. Please refer to Jurisdiction Specific Supplemental Terms at the end of this Policy.
To easily access, view, update, correct, delete or port your Personal Data, or to update your subscription preferences, please sign into your account and visit "Account Settings" or contact our customer service. Where we rely on consent to collect and use information about you, you can withdraw your consent at any time. If you make a request to delete your Personal Data and that data is necessary for the Services you have purchased, the request will be honored only to the extent it is no longer necessary for any Services purchased or required for our legitimate business purposes or legal or contractual record keeping requirements.
Some jurisdictions' laws contain additional terms for users of the Service, which are set out in this section. If you are a user located in one of the jurisdictions below, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy above.
To exercise the access, data portability, correction, and deletion rights described above please submit a verifiable request to us by emailing us at higgsgamesgl@gmail.com.
Only you, or a person authorized by law to act on your behalf, may make a verifiable request related to your Personal Data. You may also make a verifiable request on behalf of your minor child.
You may only make a verifiable request for access or data portability twice within a twelve (12) month period. The verifiable request must:
We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.
If your account is lost, you can verify through SMS, email or contact customer service to reset your password. However, in this process, you need to provide some Personal Data to verify your identity. When retrieving your password, we may need you to provide frequent login location, frequent login device, frequent listening content, registration time and city information.
Making a verifiable request does not require you to create an account with us. We will only use Personal Data provided in a verifiable request to verify the requestor's identity or authority to make the request.
We endeavour to respond to any verifiable request within one (1) month of its receipt. If we require more time, we will inform you of the reason and extension period required in writing. We will send you confirmation of receipt of any verifiable request within ten (10) business days of its receipt.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by the method you submitted your request.
If we cannot comply with a verifiable request, we will explain our reasons to you in writing, if applicable. For data portability requests, we will select a format to provide your Personal Data that is readily usable and should allow you to transmit the information from one entity to another without hindrance.
Typically, you will not have to pay a fee to access your Personal Data or to exercise any of your privacy rights. However, except in relation to consent withdrawal, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing the request. We may also refuse to comply with your request in such circumstances.
We may decline to comply with your request under the following circumstances, and in accordance with applicable laws and regulations:
Cookies are small text files to ensure that our software's normal operation and your convenient access to it. Cookies usually contain identifiers, site names, and some numbers and characters. We may use Cookies and other similar technologies such as Pixel Tags and Web Beacons. We generally treat information collected by Cookies and similar technologies as non-Personal Data as they do not contain any of your personally identifiable information. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered Personal Data by the laws of the countries concerned, we will also follow the laws of the countries concerned.
We and our partners may use cookies and similar technologies (e.g., pixels and ad tags) to collect data (e.g., device IDs) to recognize you and your device(s) on, off and across different services and devices where you have engaged with our Services. You can manage or delete Cookies according to your preferences.
Because consumers are often unaware that their do not track beacons are active, Do Not Track signals frequently do not reflect the actual preferences of our users. We do not respond to Do Not Track signals. In the meantime, you may opt out of certain types of tracking, including certain analytics and tailored advertising by changing your cookie settings.
You may receive links to third-party websites or content and services provided by third parties other than us during your use of our Services, and some third parties' products or services can be accessed in the form of SDKs and others in order to provide you with some functions and features, such as to provide you with third party logins, notifications and user analysis (collectively, the "Third-Party Services").
You can choose whether to visit or accept such Third-Party Services at your sole discretion, and we encourage you to read and review the privacy statements of each Third-Party Service that you may choose to use.
For the purpose of establishing the Personal Data protection in a better and more efficient way, we, as the Data Controller, designate a Data Protection Officer (in short, "DPO") who is responsible for the oversight and implementation of the Personal Data protection strategy and ensures our processing of Personal Data is in compliance with necessary legal requirements stipulated in the applicable laws. If you have any comments, questions or concerns with respect to our Privacy Policy or Personal Data protection practices, please contact us at triplejoy2021@gmail.com (All requests must be labeled "Privacy Policy request" on the email subject line for us to better assist you).
We will review your privacy or Personal Data requests and respond to you as soon as possible after verifying your user identity. If your request itself involves any complicated or significant issue, we may ask you for more information.
If you would like this Policy in another format (for example: audio, large print, braille) please contact us (see "How to Contact Us" above).
Some jurisdictions' laws contain additional terms for users of the Service, which are set out in this section. If you are a user located in one of the jurisdictions below, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy above. In case of any conflict between the following supplemental terms and the provisions of general terms above, those following terms will take precedence over the general terms of this policy.
If you are using our Services in Indonesia, the following terms apply:
1. Age, Parental and Guardian Consent. By using the Services, you represent that you are at least 21 years of age or married or not under guardianship. If you are below 21 years old and you are not married, or under guardianship:
If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing the Services.
2. Your Choices. You may withdraw your consent to our disclosure of personal data to third parties. Upon your request, we will cease to display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulfill your requests and you may not be able to use some features and functionality of the Services.
You may request us to (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some features and functionality of the Services. To exercise any of your rights, contact us at the information listed in the "Contact Us" section.
3. Notification. In the event of any breach of personal data, we will notify you and provide you with information regarding such breach of personal data.
4. Data Retention. We retain your information for as long as it is necessary to provide you with the service. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for five (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defence of legal claims.
After you have terminated your use of our Services and the five (5) years retention period has lapsed, we store your information in an aggregated and anonymised format. Non-personally identifiable information may be retained indefinitely for analytics.
By continuing, you consent to the cross-border transfer of your information to any country where we have databases or affiliates.
You have the right to access your personal information, how we use it, and who we disclose it to. You have the right to correct any of your personal information that is inaccurate.
Our designated data protection officer for the purposes of compliance with the Personal Data Protection Act 2012 can be contacted as set out in Section VIII (Contact).
If you are using our Services in Vietnam, the following terms apply:
1. By clicking "accept", you acknowledge that you have read, understood, and agree to the Privacy Policy.
2. Age, Parental and Guardian Consent. If you are below 18 years old or under guardianship:
3. Data Retention. During your use of the service and within 6 months after ceasing to use the service, we store your information in an aggregated and anonymised format. Non-personally identifiable information may be retained indefinitely for analytics.
If you are using our Services in Thailand, the following terms apply:
1. By clicking "accept", you acknowledge that you have read, understood, and agree to the Privacy Policy. If you do not agree with the Privacy Policy, you must not use the Service.
2. By using the Services, you represent that you are at least 20 years of age or married or not under guardianship. If you are under the age of 20, you undertake that you have obtained your parent or legal guardian's consent to register an account on and use the Service.
3. To the extent provided for by the Thai Personal Data Protection Act (PDPA), you may:
Where you wish to make such requests, please contact us as set out in Section XIII.
If you are using our Services in Egypt, the following terms apply:
If you are using our Services in South Africa, the following additional terms apply. In the event of any conflict between the following additional terms and the provisions of the main body of this Policy, the following terms shall prevail.
You declare that you are over the age of 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged the Privacy Policy and Terms of Service and agree to the use by your child of the Services and registration for an account.
If you are in the European Economic Area (EEA) or the United Kingdom (UK), our privacy policy is further governed by the General Data Protection Regulation (GDPR), and, where applicable, Directive 2002/58/EC and other relevant regulations.
The terms and their interpretations shall be in accordance with the provisions of the GDPR.
If you believe your rights have been violated under the GDPR, you have the right to lodge a complaint with a supervisory authority. In the European Union, you may contact the supervisory authority in the country where you reside or work.
The following additional terms drawing on the provisions of GDPR applies to you in addition to the Privacy Policy set out above in the general terms.
Data Subject Rights
In addition to the information set out in the in the Privacy Policy above, you have the right to:
Legal basis for processing your personal data
Our legal basis and purposes for collecting and using the information described in Section II for the of our Privacy Policy above is:
If you have questions, need further information about the legal bases for processing your personal information, or want to withdraw your consent, please see section X "Contact and Complaint" in the Privacy Policy above.
Cross-border data transfer
As a global company, we may transfer your personal data to our affiliates, third party service providers and partners that operate around the world, which are located in countries other than the country in which you are resident (e.g. Singapore). These countries may have data protection laws that are different to the laws of your country.
Where we transfer your personal information to countries and territories outside of the European Economic Area and the UK, which have been formally recognised as providing an adequate level of protection for personal information, we rely on the relevant "adequacy decisions" from the European Commission, where applicable.
Where the transfer is not subject to an adequacy decision, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Policy. The safeguards we use are the European Commission's Standard Contractual Clauses as issued on 4 June 2021, including the UK Addendum, and/or the UK International Data Transfer Agreement permitted under Article 46 of the UK GDPR. This is how transfers of personal information between us and other companies will be safeguarded. All companies are required to protect personal information that they process from Europe in accordance with European Union data protection law. Transferred personal information includes basic information such as your name or contact information such as your email address.
Children's Notice
Our Services are not marketed to, or intended for, children. Children for the purposes of our Services are (a) under the age of 13 years old or, if older (b) between 13 and 18 years old but under the age at which they can give valid digital consent to processing of their personal information under applicable data privacy laws. We strive to follow the different minimum age guidelines set by the laws of individual regions when determining the age that children can access certain features of our Services.
Children are not permitted to use these Services, and we do not knowingly collect any personal information from children. Though our Services are not intended for children as the primary audience, we may collect age information before allowing a user to proceed for certain Services. If we learn that we have inadvertently gathered personal information about a child that is not subject to an exemption under applicable privacy law, we will take measures to promptly remove that information from our records.
Data Protection Supervisory Authority
To lodge a complaint with your national or regional data protection supervisory authority, please contact the competent authority.