Last updated: 1 May 2026
1. Who we are
AuYuki Cube Experiences (trading as BaYu Games) designs and organises offline social experiences — including treasure hunts, strategy games, party games, and outdoor quests — in New South Wales, Australia.
This policy describes how we collect, use, store, and share personal information across our services, including our website, ticketing, communications, events, and any related platforms or applications. We are committed to handling personal information responsibly and in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).
2. What we collect and why
We collect personal information when it is reasonably necessary for our operations. The types of information we collect, and how we use it, depend on how you interact with our services.
Bookings and events. When you purchase a ticket or register for an event, we may collect information such as your name and contact details. We use this information to process your booking, manage your attendance, and communicate with you about our events and services.
Payment. Payment transactions are processed by third-party payment providers, including [Stripe](https://stripe.com/au/privacy) and [PayPal](https://www.paypal.com/au/legalhub/privacy-full). We do not receive or store your payment card or bank account details. These providers handle your payment data under their own privacy policies.
Communications. If you contact us, we may retain records of that correspondence to manage your enquiry and improve our services.
Technical data. When you use our website or online services, our systems may automatically collect technical information such as IP addresses, browser type, and access timestamps.
Event and game activity. When you participate in our events or games, our applications and platforms may collect information necessary to operate the experience and generate your results. This may include location and movement data (such as GPS coordinates and routes), game performance data (such as scores, checkpoint times, roles, actions, and outcomes), and identifiers from third-party platforms used to deliver the experience (such as your Telegram user ID). We use this information to operate and deliver the experience, analyse and improve our offerings, and develop new experiences.
We may also use the information we collect to analyse usage patterns, improve our offerings, develop new experiences, and ensure the safety and integrity of our services. If we wish to use your information for a purpose not covered by this policy, we will seek your consent beforehand.
3. How we share and store your information
We do not sell, rent, or trade your personal information.
We may share personal information with third-party service providers who assist us in operating our services, including payment processing, event management, and communications. These providers are only given access to the information reasonably necessary to perform their functions.
Access to personal information within our organisation is restricted to team members, employees, contractors, and agents who require it to carry out their responsibilities and who are subject to appropriate confidentiality obligations.
We may also disclose personal information where we believe it is reasonably necessary to:
– comply with applicable law, regulation, or legal process;
– enforce our terms of service or investigate potential violations;
– protect the rights, safety, or property of our business, our users, or the public; or
– respond to an emergency involving the safety of any person.
In the event that our business is involved in a merger, acquisition, restructure, or sale of assets, your personal information may be transferred as part of that transaction. We will take reasonable steps to ensure that your information continues to be handled in accordance with this policy.
Our systems are hosted in Australia and Southeast Asia. Our services may use content delivery networks (CDNs) that route traffic through servers in multiple countries to improve performance. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access or disclosure.
We retain personal information for as long as reasonably necessary for the purposes described in this policy, or as required by law.
4. Your rights
You may:
– request access to the personal information we hold about you;
– request correction of any inaccurate or outdated information; or
– request deletion of your personal information, subject to any legal obligations we may have to retain it.
To exercise any of these rights, please contact us using the details in Section 6 below, accompanied by reasonable proof of your identity. We aim to respond within 30 days.
5. Other things you should know
Cookies and analytics. Our website and online services may use cookies and similar technologies for functionality, performance, and analytics purposes.
Children. We do not knowingly collect personal information from individuals under 18 without parental or guardian consent.
Photos and videos. By attending our events, you acknowledge that photos or videos may be captured for promotional purposes. If you prefer not to be featured in promotional content, please let a member of our team know before the event. If you wish to request removal of your image after an event, please contact us within 30 days. Removal may not be practicable where content has already been published or distributed, or where you appear incidentally in group or wide-angle shots.
Third-party links. Our website and services may contain links to external websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content or privacy practices of any third-party sites or services. We encourage you to review their privacy policies independently.
Changes to this policy. We reserve the right to update this policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be published on our website with a revised date. We encourage you to review this page periodically.
6. Contact us
If you have any questions about this policy or wish to make a privacy-related request, please contact us via our website at bayugames.com.