KHIM

Legal

Privacy Policy

Version 1.2 · Updated 12 October 2026

In short

We collect only what an account and a game need to work. We do not sell your personal data.

1. What we collect

  • Account: username, password (stored as a hash - we never see the password itself), date of birth.
  • Email: optional, used only to reset a password. Never shown publicly.
  • Avatar: the colours, face and accessories you choose.
  • Activity: games you play, how long you play them, likes, friends.
  • Messages: private chat on the website is stored so that you and the people in it can read it later. Chat in a game is not stored, except as “Safety and moderation” below says.
  • What you make: games, models, and data the scripts in a game save.
  • Wallet: a record of transactions. We do not hold card numbers or payment details - the payment provider does.
  • Technical: server logs, IP address, connection times, used to run the service and stop abuse.

2. Why we need it

To create and protect your account, to run games and keep your progress, to stop cheating and abuse, to take payments, and to meet legal obligations.

3. Date of birth

Your date of birth tells us whether you are old enough and how much protection to apply. It is never shown on your public profile.

4. Who we share it with

  • Infrastructure providers who host the data for us.
  • Payment providers, when you top up.
  • Authorities, where the law requires it.

We do not sell personal data. The Android app can show an ad when you choose to watch one for Koin (Google AdMob). Those ads are fit for children and never chosen from what is known about you; Google receives your device's ad information and your account number, only to confirm the ad was watched.

5. What other players see

Your username, your avatar, the games you have published, your friends, and the game you are in if it is public. Nothing else.

6. Where the data is held

Our servers and providers are in Vietnam and elsewhere, so if you are outside Vietnam your data is transferred there to be processed. We use providers with reasonable safeguards.

7. How long we keep it

Account data is kept until you delete your account. Technical logs are kept for the short period needed to run the service and investigate faults. Transaction records may be kept longer where accounting rules require it.

8. Your rights

You can see, correct and delete your personal data, withdraw consent, and complain to a data protection authority. Depending on where you live, you may also be able to ask for a copy of your data or object to some processing.

You can delete your account yourself in Settings. That removes the account, avatar, wallet and the games you have published. It cannot be undone.

Safety and moderation

Chat in games, private chat on the website and text typed into a game pass through an automatic filter. When the filter hides part of a message, or a message looks like someone asking a child for their age, address, photos, secrecy or a meeting, that message is kept as it was typed, with the few lines said just before it and the ages the accounts in the conversation gave, so that a moderator can read it. This is kept for up to 30 days. A report you send about another player is kept with the last lines they said in the game.

Moderators see this only to enforce the Community rules. Where a child may be in danger we pass what we hold to the authorities.

9. Children

KHIM is not for children under 13, or under the higher age your country sets. If we learn that we hold data about a child below that age without a guardian's consent, we delete it.

A parent who wants to see or delete a child's data can write to the address at the bottom of this page.

10. Security

Passwords are hashed with bcrypt. The website uses HTTPS. Changing your password signs out every other device.

No system is perfectly secure. Use a password you do not use anywhere else.

Questions about this page: lilkhimvn@gmail.com