How Google Play Policy applies to different Developers I have a quiz game that was rejected from the Play Store on claims that it violates the Gambling policy because it currently allows users to win money for playing quizzes. On appealing, I asked the Policy team "How is my app different from Loco or Zupee? Basically, why can I not offer cash prizes for quizzes while they are allowed to?" Their response "Any perceived compliance or non-compliance of other developers’ apps does not have any bearing on the compliance of your own apps." Could this mean that Google Play's policies are applied differently for different developers or apps?
&quot;Any perceived compliance or non-compliance of other developers’ apps does not have any bearing on the compliance of your own apps.&quot; Could this mean that Google Play's policies are applied differently for different developers or apps? No, it means that you can't break the rules even if others are breaking the rules or you think they are breaking the rules. I think it is worth noting that those apps are for the Indian market. I don't know which one you are in, but google will have different rules for different countries to comply with various regulatory requirements.
This is possibly but not necessarily fine. The data controller (the garage) is responsible for safeguarding your personal data. They must take appropriate safety measures, but this depends a lot on their own risk assessment. For example, to protect the data from being used by employees for their personal purposes, the controller might use organizational measures like a policy “you're not allowed to do that.” Many companies allow employees to use their personal devices for work purposes (BYOD). When the data controller allows this and takes appropriate safety measures, everything is perfectly fine. The company still has to make sure that the data is only processed for legal purses and deleted afterwards. Implementing a BYOD policy in a GDPR compliant manner is difficult but not impossible. A data breach has occurred when the security measures were insufficient and your data was deleted or disclosed without authorization. Your scenario would only be a breach if the company did not have a BYOD policy and the salesman used their personal phone, and arguably then only if that device is also breached. However, do not discount the alternatives: they do have a BYOD policy and the salesman is acting within their instructions the salesman was using a company-controlled device, not their personal phone If you have good reason to believe that your data was mishandled (and these alternatives do not apply), then the GDPR offers you the following remedies: You can of course complain to the data controller, especially if they have a dedicated data protection officer. You can lodge a complaint with a supervision authority, which is the ICO in the UK. They expect you to attempt to resolve your issue with the controller first. The ICO can then decide if they want to investigate the issue. You can sue them for compliance and for actual damages suffered (you have none, though). Note that all of these alternatives are more effort than they are likely worth. In particular, the garage can always correct the problem, e.g. by getting your contact info deleted from the personal device or by creating a retroactive BYOD policy.
By itself, a chess position is not personal data. Personal data is “any information relating to an … identifiable natural person”. Since the file in question includes the name of the opponent, it is clearly personal data about the opponent. If the files are used for “purely personal or household purposes”, the GDPR won't apply per Art 2(2)(c). If the files are shared more widely – especially if the files are published – then GDPR becomes relevant. The person/entity who is data controller has to consider GDPR compliance. Data controller is whoever determines the purposes and means of processing of personal data (the “why” and “how”). The first question would be under which legal basis this personal data about another person can be shared. The GDPR offers multiple legal basis, notably “legitimate interests” and “consent”. Consent is always an option, but must be freely given (entirely voluntary). Legitimate interests can serve as a legal basis after a balancing test between your interests and the data subject's rights and interests. This balancing test also depends on the reasonable expectations of the data subject, which in turn depends on the more general context. For example, in a chess community where such sharing is completely normal there would likely be a legitimate interest for you to share games as well, if the games occurred in the context of this community. But if you play a game with a friend who is not part of this community, the friend cannot reasonably expect that their name and associated personal data would be shared. The second question would be how you would satisfy further GDPR compliance obligation, in particular the Art 13/Art 14 right to information. When collecting personal data, it is necessary to provide certain information such as your identity, what processing is being carried out, and how the data subject can invoke their GDPR rights (a privacy notice or privacy policy). This might be difficult or awkward to do. Practical solutions to these problems: If you want to share a game but aren't sure that the opponent is OK with this, remove identifying aspects such as names. For example, you could crop a screenshot, or describe the game in textual notation without listing the opponent's name. Play the game via a chess website that publishes the game. This way, the website is the data controller, and you and the opponent are the data subjects. This avoids having to act as the data controller yourself. This might work for private interactions, but not e.g. if you run a chess club and require members to play via that website – you might still be in a data controller role then and have full compliance obligations.
It's possibe to cover auto-starting apps and cookies under the definition. I'm not convinced and could argue against that but I don't think it matters. The tiny extract you linked isn't a law. It is a definition. It does not say &quot;these things are illegal&quot;. For that, we have to zoom out a little. Section 43 includes the offense in question (emphasis mine): If any person without permission of the owner or any other person who is incharge of a computer, computer system or computer network... introduces or causes to be introduced any computer contaminant or computer virus... So back to the question. Could Steam be considered a virus? Maybe. Is it illegal? No. On the other hand, if I were to gain access to your computer and download Steam, yes that could be an example of breaking that law.
&quot;...claiming that the license can be revoked at any time.&quot; Of course a game company can revoke their license at any time. The company grants you a license to use the product, and a license is not an obligation on their part to provide the product, or a right to use it on your part. There's nothing illegal about a license or TOS that has clauses which stipulate when the license or TOS can be revoked changed or revoked.
Jurisdictions vary but, in general, gambling involves wagering something of value in a game of chance to win something of value. “Something of value” is usually interpreted broadly but it must usually be something that can, at least in theory, be sold for money. So, skins in a popular online game qualify if there is a secondary market for their trade. However, a mother’s love isn’t. “Game of chance” versus game of skill is a continuum. So, for example, Snakes and Ladders is a game of pure chance - it can be played equally well by an automaton as a human. Go is a game of pure skill - it requires a human brain or an extremely sophisticated algorithm to play well. Sport is considered a game of skill so competing for prize money is not gambling even if there is an entry fee. However, wagering on the outcome of sports is gambling even though it requires considerable skill to do well. Arcade and carnival games avoid gambling laws by: primarily being games of skill (e.g. a shooting gallery); by giving everyone a prize, the vast majority of which cost less than the price of entry. This is the “loot box” solution and really nudged the line; by being exempt, either explicitly or by a long period of tolerance by the authorities.
Yes The relevant legal concepts are copyright, contract law and the Computer Fraud and Abuse Act. You are liable to be sued by the people affected for damages and/or be prosecuted by the government for the felony under either or both laws. Let's start here: "I bought a game". No, you didn't; you bought a licence to use the software in accordance with the terms of service (licence) that you freely agreed to. All modern ToS will not allow you to reverse engineer the software. If you breach those terms of service then you have broken a contract - that is what allows them to sue you. They will no doubt argue that the prevalence of cheat routines developed by people like you reduce the number of people willing to play the game - say 100,000 users x $10/month * 12 months = $12,000,000. They will also ask the court to impose punitive damages to discourage this sort of thing. Which brings us to the copyright violation. You are allowed to copy their software provided you comply with the ToS. But you didn't. Therefore you are in breach of the Copyright Act and subject to additional civil and criminal sanctions. Finally, your "cheats" access their servers in a way that the ToS doesn't authorize. This puts you in breach of the CFFA - breaking this carries serious jail time penalties. Not to mention that in the US, a criminal conviction will preclude you from many jobs, including, naturally, any with access to company computer systems. Putting aside the illegalities, cheats are unethical and ruin the game experience for hundreds of thousands of people who don't use cheats. You are a criminal - stop being one!
Possibly The game company has almost certainly excluded liability under the contract you entered. There may be some consumer protection that you have that they cannot exclude - I don’t know enough about German law to meaningfully comment. Notwithstanding, if you were to initiate legal action against the, as yet, unknown wrongdoer, you could subpoena the relevant records from the game company with a court order. No matter what privacy or other protections the other person has, the game company must obey the order or be in contempt. Without such an order the game company is right that they can’t disclose details of other users. As a practical matter, it will cost several hundred € to initiate legal action and several thousand to pursue it to the end. And you might lose. A better response is to treat the lost €80 as a relatively cheap life lesson - many people lose a lot more learning to recognise scams.