Battlegrounds Mobile India (BGMI) has captured the attention of millions of gamers across India. With its immense popularity, questions about data privacy and storage have become central to public discussion, especially given the game’s history of bans and regulatory scrutiny. Understanding where BGMI stores user data, how it is managed, and the implications for privacy is crucial for players and parents alike. This article explores in detail where BGMI data is stored, how it is processed, and the controversies surrounding its data practices.
Official Data Storage Policy
According to BGMI’s official privacy policy, personal information and gameplay data of users are stored and processed on secure servers located in India and Singapore. Krafton, the developer behind BGMI, emphasizes that these servers are protected by multiple layers of security and that access to personal data is strictly limited to authorized employees, agents, or contracted third parties, all bound by confidentiality agreements.
The privacy policy further clarifies that, while the primary storage locations are India and Singapore, there may be circumstances where data is transferred to other countries or regions. Such transfers are typically for operational reasons or to comply with legal requirements. Krafton assures users that any international data transfer would be secured and that the same level of protection as in India would be maintained.
Shifting Server Locations: India, Singapore, Malaysia
BGMI’s server locations have not remained static. Originally, the primary data centers were based in India and Singapore. However, following regulatory actions and government bans, reports surfaced that Krafton was shifting some BGMI servers from India-Singapore to India-Malaysia. This move was reportedly in response to the Indian government’s concerns over data privacy and the game’s removal from app stores in July 2022.
The migration of servers has led to changes in how player data is managed. Some players noticed prompts about account migration and changes in how player IDs appeared in-game, indicating a backend transition in data storage infrastructure. Despite these shifts, Krafton has not always provided detailed public statements about the specific locations or reasons for these changes, contributing to uncertainty among the user base.
Controversies: Data Transfers to China and Other Regions
Despite Krafton’s assurances of compliance with Indian data protection laws, multiple independent investigations and media reports have revealed that BGMI has, at times, communicated with servers outside its stated storage locations, including servers in China. Packet sniffing and network analysis by technology journalists have shown that BGMI has sent data to:
- Servers in Beijing, operated by China Mobile Communications Corporation.
- Tencent-owned Proxima Beta servers in Hong Kong.
- Microsoft Azure servers in the US, Mumbai, and Moscow.
These findings raised significant concerns, especially since Krafton had previously promised that BGMI would not share data with Chinese servers, in line with Indian regulations after the PUBG Mobile ban. The suspected reason for these data transfers was the account migration feature, which allowed players to transfer their progress from PUBG Mobile to BGMI until December 2021. However, the extent and purpose of ongoing data exchanges with foreign servers remained unclear, fueling privacy debates and contributing to regulatory scrutiny.
Legal and Regulatory Implications
The Indian government has taken a strong stance on digital sovereignty and data privacy, particularly regarding apps with perceived links to China. BGMI was banned under Section 69A of the IT Act, which deals with access to computer resources that may threaten national security. The ban was reportedly prompted by concerns about the possibility of Krafton sharing Indian users’ data with foreign entities, especially those in China, and the ownership structure of Krafton, which includes significant investment from Tencent, a Chinese tech giant.
Krafton’s privacy policy acknowledges that data may be transferred to other countries to operate the game or meet legal requirements, but it does not specify all possible destinations. This ambiguity has been a point of contention for regulators and privacy advocates.
How Is Your Data Protected?
Krafton claims to implement industry-standard security measures to protect user data stored on its servers in India and Singapore. These measures include:
- Encryption of data during transmission and storage.
- Strict access controls, limiting data access to authorized personnel only.
- Regular security audits and compliance with applicable laws and regulations.
When data is transferred internationally, Krafton states that it uses encrypted technologies and contractual safeguards to ensure data protection. However, the effectiveness of these measures depends on the transparency of data flows and the willingness of all parties to adhere to privacy commitments.
What Data Does BGMI Collect and Store?
BGMI collects a wide range of user data, including:
- Personal information (name, email, phone number, etc.).
- Gameplay statistics and progress.
- Device information (model, operating system, unique device identifiers).
- Payment and transaction data (for in-app purchases).
- Communication data (chat logs, friend lists).
- Location data (if permitted by the user).
All this data is stored on the designated servers and is used for gameplay, account management, security, and sometimes for marketing or analytics purposes, as outlined in the privacy policy.
User Experience: Account Migration and Data Access
Players have reported encountering prompts about account migration, especially during periods when BGMI’s server infrastructure was being updated or relocated. These prompts typically inform users that their accounts have migrated to new servers, sometimes resulting in temporary unavailability of certain player IDs or features. Such migrations are a normal part of large-scale online games but can cause confusion if not communicated clearly.
Summary Table: BGMI Data Storage and Transfers
| Aspect | Details |
|---|---|
| Primary Storage | India and Singapore1368 |
| Recent Server Moves | India-Singapore to India-Malaysia (post-ban)25 |
| Data Transfer | Possible to other countries/regions for operations or legal compliance168 |
| Reported Foreign Access | China (Beijing), Hong Kong (Tencent), US, Moscow47 |
| Security Measures | Encryption, access controls, compliance with laws1368 |
| Data Types Stored | Personal info, gameplay data, device info, payment data, communications, location136 |
Conclusion
BGMI’s data storage strategy is shaped by a mix of operational needs, regulatory requirements, and the realities of global online gaming. Officially, user data is stored on secure servers in India and Singapore, with recent reports indicating a shift to Malaysia as well. However, technical investigations have shown that data has, at times, been transmitted to servers in China, Hong Kong, and other regions, raising concerns about privacy and compliance.
Krafton maintains that it prioritizes user privacy and data security, employing encryption and strict access controls. Nevertheless, the lack of full transparency about all data transfers and the involvement of foreign entities, particularly those based in China, have kept BGMI under regulatory scrutiny in India.
For players, this means that while most of their data is stored within India or nearby regions, there remains a possibility of data being accessed or processed elsewhere, depending on operational requirements and legal obligations. As digital privacy laws evolve and enforcement tightens, BGMI’s data storage and transfer practices will likely continue to be a subject of close attention from both users and regulators.