Effective: September 1, 2026
In short
This Privacy Policy applies to Poker Max on Meta Quest, our website at pokermaxvr.com, the account and support services connected to them, and any other Wheelhouse website or application that links to this policy. It explains what personal information we collect, how we use and share it, how long we keep it, and the choices and rights you have. We may update this policy from time to time and will notify you of material changes as described in Section 13.
In this policy, personal information means information that identifies you or can reasonably be connected with you, including “personal data” under applicable data protection laws.
Poker Max is for people age 18 or older. Players can purchase virtual chips for poker and slot games, credits for virtual items and cosmetics, and subscriptions that provide recurring rewards. Chips, credits, and items have no cash value. Poker Max does not offer cash wagering or cash-out.
This Privacy Policy is available at pokermaxvr.com/privacy. It is subject to our Terms of Service, to the extent permitted by applicable law.
Wheelhouse VR LLC is responsible for the personal information described in this Privacy Policy. Wheelhouse VR LLC is a Delaware limited liability company. Our mailing address is 251 Little Falls Drive, Wilmington, DE 19808, United States. Where EU/EEA or UK data protection law applies, Wheelhouse VR LLC is the controller of your personal information. In this Privacy Policy, “Wheelhouse,” “we,” “us,” and “our” refer to Wheelhouse VR LLC.
Our privacy contact is privacy@pokermaxvr.com. Use it for privacy questions and to exercise any of the rights described in Section 9. For gameplay and account support, contact support@pokermaxvr.com.
We receive information from you, from your use of the game and website, from Meta and payment providers, from other players' reports, from community channels you join, and from service providers performing the functions described in this policy.
| Category | Information and source | How we use it |
|---|---|---|
| Meta account information | Your Meta username, the age category Meta provides, and a Meta identifier specific to Poker Max. | To create and identify your Poker Max account and check age eligibility. |
| Profile information | Your username, a profile picture you upload, and your name, email address, and date of birth if you add them. | To provide your profile, communicate with you, and support account and age-related functions. |
| Friends and multiplayer activity | Friend connections and invitations, players you block or mute, the virtual table you occupy, and information needed to place you with other players. | To let friends find and join one another, honor your block and mute choices, and support multiplayer play. |
| Gameplay | A history of the hands you play, chip balances and results, and information used for leaderboards. | To provide game history, gameplay records, and rankings, and to detect unfair play as described in Section 5. |
| Purchases, billing, and entitlements | Purchase, refund, payment-status, and subscription records supplied by Meta or Stripe; limited billing and payment-method details supplied by Stripe; and records of purchased chips, credits, items, and subscription rewards. | To process and reconcile purchases, maintain entitlements, handle billing questions and disputes, and meet accounting obligations. |
| Player reports | Reports you submit about other players and reports other players submit about you, including the report reason, the saved five-minute record described in Section 3.3, and the outcome. | To review reported conduct, enforce our Terms of Service, respond to challenges, and detect misuse of the reporting system. |
| Support and privacy correspondence | Information you provide when contacting us, including account details and the content of your request. | To respond to questions, resolve issues, and handle privacy requests. |
| Authorized account connections | The third-party application and data permissions you approve when linking your Poker Max account. | To share the information you authorize with that application. |
Meta processes in-app purchases made through the Meta Horizon Store, and Stripe processes purchases made on our website. Wheelhouse does not receive full payment card numbers or card security codes. We receive limited billing, payment-method, and transaction information from the provider, such as billing contact details, card brand and last four digits, payment or customer identifiers, and purchase or subscription status. Meta and Stripe handle the information you enter at checkout under their own privacy notices.
Account information needed to identify your account and provide multiplayer play is necessary to use those services. Optional profile fields and third-party account connections are not required to create or use your account.
Other players can see your username and profile picture. Friends can see which virtual table you occupy and can join you, and players at the same table can see you there. Table location means your location inside the game, not your physical location. Public leaderboards show rankings and statistics associated with your profile, such as chips won and hands won over different periods. Leaderboards are provided through Meta's leaderboard service, so your entries are also held by Meta (Section 6).
Other players can record or livestream what happens at a table using their headset's capture features, including your voice and avatar, and share it outside Poker Max. If you disclose personal information to other players, they may remember, copy, or share it, and we do not control their independent use of it. Consider what you share during multiplayer interactions.
Poker Max includes voice chat. When your microphone is on, your voice audio is transmitted through servers operated by us or our multiplayer networking provider to the other players at your table. Muting your microphone stops new audio from being transmitted; it does not erase audio already held in the report record described below.
Voice chat is monitored. By turning on your microphone, you acknowledge and agree to the following:
We will never use voice audio to identify you or for authentication purposes. Automated analysis looks only for the conduct and age indicators described above.
You can decline by keeping your microphone muted. Poker Max remains playable without voice chat.
Poker Max relays your head, hand, and controller movement to the other players at your table so they can see your avatar move. We use this data only to animate your avatar in real time and to place you at the table. We do not retain it, except that head and controller positions form part of the five-minute report record described in Section 3.3. We do not use movement data for analytics or profiling.
Poker Max uses Meta Avatars. If you have enabled eye or facial tracking on a supported headset, Meta's avatar system may include abstracted gaze or expression data in the avatar animation stream it provides to the game. We relay that stream to the other players at your table so that your avatar animates correctly; we do not decode, analyze, or store it. Meta's privacy policy describes how Meta handles eye and facial tracking data.
We will never use movement data or the avatar animation stream to identify you or for authentication purposes.
Poker Max supports mixed reality. Your headset composites the passthrough camera view itself. Poker Max does not request access to the headset cameras or to spatial data about your room, and no camera or room data is transmitted to or stored by Wheelhouse VR LLC.
We use Mixpanel to understand how Poker Max is used and to improve the quality of the game. Usage information includes account and session activity and interactions with game features. We do not use this analytics data for advertising, and we do not use movement data for analytics (Section 3.4).
Technical information may include account or device identifiers, device and software characteristics, event times, and connection information such as IP-derived approximate location. We use connection information to apply geographic access restrictions, and we keep device identifiers associated with banned accounts to enforce bans and detect attempts to evade them (Section 5). If the game crashes or encounters an error, a crash report containing device and software details, the state of the game at the time, and your account identifier is sent to us and our crash-reporting provider so we can diagnose and fix the problem.
You can choose to link your Poker Max account to a third-party application through an authorization flow. Our authorization screen shows you which information the application is requesting, and you must approve access before anything is shared. Depending on the permissions you approve, the information shared may include your username, profile picture, email address, and leaderboard statistics.
The receiving application's own privacy notice explains how it uses the information it receives.
You can revoke an application's access, or withdraw consent to sharing that relies on your consent, through account controls where available or by contacting privacy@pokermaxvr.com. Revoking access stops future access; it does not automatically delete information the application has already received. Contact the application to exercise rights over the copies it holds.
We operate an official Poker Max community on Discord. Discord is an independent service, and Discord's privacy policy governs how it handles your account and messages. When you take part, we see your Discord username, the messages and content you post, and any information you choose to share with us there, and we use it to answer questions, run community events, and enforce our community rules. Participation is optional and is not required to play Poker Max.
We use personal information for the purposes below. Where EU/EEA or UK data protection law applies, the table also identifies the lawful basis for each purpose.
| Purpose | Lawful basis |
|---|---|
| To set up, administer, and manage your account | Performance of our contract with you |
| To provide the game and its features, including multiplayer play, hand history, leaderboards, friend features, avatar animation, and voice chat transmission | Performance of our contract with you |
| To process purchases, subscriptions, and entitlements | Performance of our contract with you |
| To respond to your support requests and other communications | Our legitimate interests in responding to the people who contact us |
| To send account, service, and privacy notices | Performance of our contract with you |
| To send optional newsletters and survey invitations | Your consent |
| To keep the game safe: monitor voice chat, review player reports, analyze gameplay for collusion, bots, and other unfair play, investigate abuse and fraud, enforce bans and detect ban evasion, and respond to challenges to moderation decisions | Our legitimate interests in protecting players, keeping play fair, and protecting our service |
| To run our community channels, such as Discord | Our legitimate interests in supporting and moderating the player community |
| To check that players meet our minimum age, including verification when an account is flagged | Our legitimate interests in keeping an adult service restricted to adults. The verification specialist obtains any consent that its method requires under applicable law. |
| To understand how Poker Max is used, diagnose crashes and errors, and improve it | Our legitimate interests in understanding and improving the game. Where law requires consent to store or read information on your device for analytics, we ask for it first. |
| To apply geographic access restrictions | Our legitimate interests in offering the game only where we may lawfully do so |
| To share information with a third-party application you link | Your consent |
| To use recordings of players in marketing materials | The consent of the players featured |
| To administer a tournament or promotion you enter and award in-game rewards | Performance of the event rules you accept when entering |
| To keep accounting and tax records and to document privacy requests | Compliance with our legal obligations |
| To establish, exercise, or defend legal claims and obtain professional advice | Our legitimate interests in protecting our legal rights and running our business |
| To evaluate or complete a business transaction described in Section 6 | Our legitimate interests in evaluating and completing the transaction and maintaining service continuity |
| To disclose information to authorities or others for the legal and safety reasons described in Section 6 | Compliance with a legal obligation where the disclosure is required by law. In other cases, our legitimate interests in preventing harm, protecting people and property, and cooperating with lawful investigations. |
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and interests. Details of our assessments are available on request. Where we rely on consent, you can withdraw it at any time as described in Section 9.
We use automated voice analysis, player reports, gameplay evidence, and records of prior violations to identify potential misconduct and protect the community. We also analyze hand histories, chip flows, and account activity to detect collusion, automated play, chip dumping, and other unfair play, and we keep device identifiers associated with banned accounts so that we can enforce bans and detect attempts to evade them. Automated tools may flag a session or account, including an account suspected of belonging to someone under 18, and may apply a temporary protective restriction, such as muting voice chat or pausing multiplayer access, while a person reviews the flag. Temporary restrictions are a safety measure necessary to operate the service; they are not a final decision. A person reviews every automated flag before we impose a final sanction, and you can ask for human review of any restriction at any time.
Submitting a report does not automatically result in action; a person reviews the report and the saved record before any sanction is applied. We do not tell the reported player who reported them, and we do not generally tell the reporter what action, if any, we took. We keep a record of the reports each player submits so that we can identify reports made in bad faith, and the retention periods in Section 8 apply to reports that do not lead to action.
We keep relevant evidence with a moderation action or ban so that we can enforce it and respond to questions or challenges. To challenge a moderation decision or request human review, contact support@pokermaxvr.com.
We use service providers for infrastructure, multiplayer networking, analytics, payments, moderation, and the other functions described below.
| Recipient | Information involved | Purpose |
|---|---|---|
| Meta | Platform account information, in-app purchase records, leaderboard entries, notifications we send you through Meta, and reports you submit through Meta's reporting tool (see below). Meta independently handles its own platform account and checkout data. | Game distribution, account integration, in-app purchases, leaderboards, notifications, and user reporting |
| Stripe | Payment information you enter at checkout on our website and related purchase information | Processing website purchases |
| Cloud infrastructure providers | Personal information stored in or transmitted through our systems | Hosting, storage, and operation of the game and related services |
| Normal VR LLC (Normcore) | Multiplayer data, including voice audio and movement data, relayed through the networking service | Multiplayer networking |
| Mixpanel | Usage and technical information described in Section 3.6 | Understanding usage and improving game quality |
| Moderation service providers | Voice audio, transcripts, report evidence, and moderation or age-related flags | Safety review and rule enforcement |
| Age-verification specialist | The identity document and selfie you supply directly to the specialist when a check is required; the specialist returns a verification result and reference to Wheelhouse | Age verification |
| Other players | The profile and multiplayer information described in Sections 3.2 to 3.4 | Social features and multiplayer play |
| Third-party applications you authorize | Only the information you approve through the account-linking flow described in Section 3.7 | Providing the integration you choose |
| Discord | Your Discord username and the content you post in our community server (Section 3.8) | Community support and events |
| Other service providers | The information needed for the specific service, for example email delivery, customer support tools, survey tools, crash reporting, and security and fraud prevention | Operating the services described in this policy, under contracts that limit their use of personal information to our instructions |
| Professional advisers, including lawyers, accountants, and consultants | Information relevant to the advice sought | Legal, accounting, and other professional advice |
Poker Max uses Meta's user reporting service. When you report another player through the Meta menu, your report and any recording attached to it are collected by Meta's reporting tool and delivered to us in encrypted form for review. Meta also independently collects information about your use of your headset and of Poker Max, such as app usage and purchase history, under Meta's own privacy policy.
Platforms and payment providers may process some information for their own purposes under their own notices.
Poker Max and our website may link to independent third-party websites, applications, and services, including applications you choose to connect to your account. Their own privacy policies govern how they handle information, and we are not responsible for their content or practices. Review their policies before sharing information with them.
Subject to applicable law, we may also disclose your personal information:
You may choose to receive newsletters or survey invitations. We use your email address and username to send them. Newsletter and survey-invitation emails include unsubscribe links, and you can also object to direct marketing or withdraw marketing consent by contacting privacy@pokermaxvr.com. Service messages necessary to operate your account or respond to your requests are separate from optional marketing.
Participation in surveys is optional. If you submit a response, we process the information you provide for the survey's stated purpose. Before using recordings featuring players in marketing materials, we obtain those players' permission.
Our website uses essential cookies for login and session management, and our payment provider sets cookies for fraud prevention and checkout security when you make a purchase. We do not use advertising, retargeting, or cross-site tracking cookies. You can manage cookies through your browser settings; blocking essential cookies may prevent login, checkout, or other account functions from working.
We do not track visitors across unrelated websites for advertising. Because we do not sell personal information or share it for advertising, a browser Do Not Track or Global Privacy Control signal does not change how we operate; there is nothing for such a signal to opt you out of.
Where applicable law requires consent for analytics technologies used in Poker Max, we obtain that consent before using them. You can withdraw consent through the available privacy controls or by contacting privacy@pokermaxvr.com.
We do not sell your personal information or share it for cross-context behavioral or targeted advertising. We do not use personal information for targeted advertising, and we contractually restrict our service providers from using it for their own advertising or for training general AI models.
If you enter a tournament or promotion, we process the information needed to administer your entry, record results, and award in-game rewards. Tournament and promotion rewards are virtual chips, credits, or items with no cash value. The event's rules explain any event-specific requirements.
We may offer in-game items or virtual chips for activities such as linking an email address, completing an avatar, adding friends, winning a tournament, or making an eligible purchase. Each offer identifies its eligibility requirements and reward. Linking an email address does not by itself constitute consent to marketing. Participation is optional, ordinary gameplay remains available without participating, and unsubscribing or withdrawing consent does not forfeit rewards you have already earned. Where applicable law requires a specific notice before you join an offer that provides a benefit in exchange for personal information, we provide it with the offer.
We decide how long to keep each category of personal information by considering its purpose, how long it remains useful for that purpose, and any legal requirement. Some records must be kept to establish, exercise, or defend a legal claim or to comply with applicable law, including accounting rules.
| Data category | Retention period or criterion |
|---|---|
| Account, profile, and platform identifiers | For the life of your account, subject to deletion requests and the exceptions below. We may delete accounts that have been inactive for three years after giving notice in-game or to a linked email address. |
| Purchases and entitlements | For the life of your account, to maintain purchased goods and subscriptions. After deletion, only the records needed for billing, tax, accounting, or legal purposes. |
| Hand history and leaderboard records | For the life of your account, to provide history and rankings. Account deletion removes your personal information from these records, consistent with other players' rights in shared hands. |
| Identifiable gameplay and session analytics | Up to two years from the event, after which our analytics provider deletes it. Analytics profiles are deleted when your account is deleted. Longer-term statistics are kept only after anonymization. |
| Diagnostic and crash records | For as long as needed to diagnose and fix the issue, then deleted, except evidence needed for a continuing investigation. |
| Five-minute report record | Continuously overwritten unless saved with a player report. |
| Audio, transcripts, and results of automated moderation analysis | For as long as needed to perform the analysis and assess any flag, then deleted unless saved as case or ban evidence. |
| Moderation and report evidence not supporting a continuing ban | Until the case is closed and any appeal period has ended, then deleted unless a specific legal or safety need justifies longer retention. |
| Reports you submit | A record of the reports you have submitted and their outcomes, for the life of your account, so that we can identify misuse of the reporting system. The saved record attached to a report follows the moderation-evidence rows in this table. |
| Ban records and supporting evidence, including audio and transcript excerpts and device identifiers | For the duration of the ban, to enforce it and respond to challenges. A permanent ban may involve indefinite retention of relevant evidence, subject to applicable law and the deletion rights in Section 9. |
| Other movement data | Not retained (Section 3.4). |
| Mixed-reality camera and room data | Not collected (Section 3.5). |
| Support correspondence | For as long as needed to resolve your request and any related follow-up or dispute, then deleted, except records needed for a continuing dispute or legal obligation. |
| Privacy-request records | A minimal record of the request and our response, kept for as long as needed to demonstrate compliance with applicable law. |
| Age-verification records | We keep the verification result and reference for the life of your account, subject to deletion rights. The specialist keeps the identity document and selfie you provide only as long as needed to complete verification and any appeal; we contractually require prompt deletion afterward, and the specialist's own notice describes its retention. We do not receive the document or selfie. |
| Marketing preferences and unsubscribe records | Subscription details while subscribed; a minimal suppression record for as long as needed to honor an opt-out. |
| Tournament and promotion records | For event administration, reward delivery, and related disputes, then deleted unless retention is required by law. |
| Community channel content | Held by Discord under its own retention practices. We keep copies only as long as needed to handle a specific question, event, or enforcement action. |
| Backups | Up to 90 days. Data deleted from active systems may remain in restricted backups until they expire; it is not returned to ordinary use, and deletions are reapplied if a backup is restored. |
After a deletion request, we keep only information needed for a lawful purpose, such as required accounting records, a legal hold, or proportionate enforcement of a continuing ban.
Every Poker Max player may request deletion of their personal information, regardless of where they live. Email privacy@pokermaxvr.com. Email is the current request channel; there is no separate in-game or website tool.
We permanently delete personal information eligible for deletion, subject to the retention exceptions in Section 8, and explain any records we keep. Deleting your account also removes the personal information needed to maintain it. Before completing account deletion, we explain its effects on game history, purchases, and subscriptions.
You may withdraw your consent at any time. Withdrawal does not undo processing that was lawful before the withdrawal, and we will explain any separate legal reason that requires us to keep particular information.
Depending on applicable law and the circumstances, you may also have rights to access, correct, receive a portable copy of, or restrict processing of your personal information, and to object to processing. These rights do not limit the worldwide deletion request described above.
Describe your request and provide enough account information for us to locate your records. Do not send passwords or identity documents unless we specifically request information necessary for verification. We use proportionate verification and ask for additional information only when necessary.
We may decline or limit a request where the law allows, for example if we cannot verify the identity or authority of the requester, if fulfilling the request would adversely affect another person's rights, or if another legal exception applies. We may decline manifestly unfounded or excessive requests, or charge a reasonable fee for them, only where applicable law permits. These qualifications do not restrict who may submit a deletion request.
We respond within the period required by applicable law. Under EU/EEA or UK law this is normally one month, extendable by up to two further months for complex or numerous requests, in which case we tell you within the first month. Where a US state law sets a different deadline, that deadline applies. Our usual target is 30 days. If an exception prevents us from fulfilling a request, we explain why and describe any available review or complaint procedure.
Where EU/EEA or UK data protection law applies, you may object to processing based on legitimate interests and complain to a supervisory authority, including the authority where you live or work or where an alleged infringement occurred. UK users may contact the Information Commissioner's Office. Swiss users may contact the Federal Data Protection and Information Commissioner.
Where our processing is subject to a US state privacy law, you may exercise the rights that law provides, subject to its conditions and exceptions. These may include:
We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or profile you for decisions with legal or similarly significant effects. We will not discriminate against you for exercising privacy rights.
Send requests to privacy@pokermaxvr.com. Where permitted, an authorized agent may use the same channel and must provide evidence of authority to act for you; we may require your direct confirmation. If we deny a request and you have a right to appeal, email privacy@pokermaxvr.com, identify the request, and explain why you disagree. We will respond with the information the applicable law requires, including how to contact your state attorney general if you remain dissatisfied.
We store account information in the United States. Real-time multiplayer data, including voice audio and movement data, is processed on regional servers operated by our networking provider, selected for low latency, and is not retained after the session except as described in Section 3.3. Our service providers may process information in the United States or other countries.
If you are in the EU/EEA, the UK, or Switzerland, your personal information is transferred to the United States. We rely on the European Commission's Standard Contractual Clauses, with the UK International Data Transfer Addendum where UK law applies and the equivalent Swiss requirements where Swiss law applies, to protect those transfers, and we require our service providers to do the same. You can request a copy of the relevant clauses by emailing privacy@pokermaxvr.com.
We maintain appropriate technical and organizational measures designed to protect your personal information against loss, theft, and unauthorized access, use, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the relevant authorities as required by applicable law.
Poker Max is for adults age 18 or older. People under 18 are not permitted to use the game. We use the age category made available by Meta and may investigate player reports or moderation flags suggesting that an account belongs to someone under 18.
Identity verification is not required routinely. If an account is flagged for age review, we may require verification before the account can be used again. An independent age-verification specialist may ask you to provide an identity document and, where needed, a selfie directly to it. Wheelhouse receives the verification result and a reference number, not the document or selfie. Before a check begins, the verification process identifies the specialist, explains the information and method involved, and obtains any consent required by applicable law. Section 8 describes retention.
If you believe someone under 18 has provided personal information through Poker Max, contact privacy@pokermaxvr.com. We will assess the report and take appropriate action, including disabling an ineligible account and deleting its information where required, subject to any lawful, necessary retention.
The current policy is always available at pokermaxvr.com/privacy. We will provide notice of material changes through an appropriate channel, such as an in-game notice or email, and obtain consent where applicable law requires it.
Nothing in this policy limits any right or remedy you have under applicable law that cannot lawfully be limited.