Effective Date and Last Updated: July 10, 2026
This Privacy Policy explains how Inkos Games EOOD (“Inkos Games,” “we,” “us,” or “our”) collects, uses, discloses, stores, and otherwise processes information when you:
use our mobile games and applications;
visit our website at inkosgames.com;
contact us for support; or
otherwise interact with our related services,
collectively referred to as the “Service.”
This Privacy Policy describes our data practices. It is not a request for consent, and your use of the Service does not by itself constitute consent to processing for which consent is required by applicable law.
Where applicable law or platform requirements require a separate choice or consent for a particular type of processing, that choice may be requested through the relevant application, advertising consent interface, operating system, device, or platform.
Not every game, platform, country, application version, or user is subject to every data practice described in this Privacy Policy.
For the purposes of the General Data Protection Regulation (“GDPR”), the UK GDPR, and other applicable privacy laws, the controller responsible for the processing described in this Privacy Policy is:
Company: Inkos Games EOOD
Registered address: Burgas, Lazur Distr., bl.53, Entr. 3, Fl. 4, Apt. 8, 8000
Unified Identification Code (UIC / EIK): 208802417
Commercial register: Commercial Register and Register of Non-Profit Legal Entities of the Republic of Bulgaria
VAT identification number: BG208802417
Email: admin@inkosgames.com
Telephone: +380 66 658 8651
Country of establishment: Republic of Bulgaria
Some third-party providers process personal data on our behalf as processors or service providers. Other providers, including application stores, platform providers, and certain advertising partners, may independently determine some purposes and methods of processing and may act as separate controllers or businesses under applicable privacy laws.
This Privacy Policy applies to personal data processed by or on behalf of Inkos Games through the Service.
It does not govern processing independently performed by Apple, Google, advertising networks, application stores, device manufacturers, operating-system providers, payment providers, or other third parties under their own privacy notices.
The particular data collected and the providers involved depend on the game, platform, installed version, device, location, available functionality, privacy choices, and applicable law.
The Service does not allow you to create an account directly with Inkos Games.
Certain features may use a platform account or gaming profile operated by a third-party platform provider. Creation and management of such an account or profile are controlled by the relevant provider and do not create an Inkos Games account.
Where enabled for a particular game and platform, third-party platform services may support features such as:
platform authentication;
cloud saving or restoration of game progress;
achievements;
leaderboards;
purchase processing;
purchase restoration; and
platform notifications.
On supported Android devices, certain games may use Google Play Games Services. Depending on the enabled functionality, we may process information associated with your Google Play Games profile, including a platform player identifier, display name, profile image, achievements, leaderboard scores, saved game data, and synchronization status.
Profile information, achievements, and leaderboard scores may be visible to other users according to the functionality and privacy settings of the relevant platform service.
Your use of platform services is also subject to the terms and privacy practices of the relevant platform provider.
The information we collect depends on how you interact with the Service and which features are enabled.
When you contact us, we may receive:
your name or display name;
your email address;
the content of your message;
screenshots, files, or other materials you choose to provide;
information about your device, game progress, purchase, or technical issue; and
other information you voluntarily include in your communication.
The Service is not designed to request sensitive personal data. Please do not send unnecessary government identification documents, payment credentials, health information, passwords, or other sensitive information.
The Service and its integrated third-party technologies may automatically process technical information such as:
IP address;
device type, model, and manufacturer;
operating system and operating-system version;
application name, package identifier, and installed version;
device language, country, region, and time zone;
screen resolution and device capabilities;
network type, mobile carrier, or network provider;
installation source;
application-instance or installation identifiers;
vendor-specific identifiers;
advertising identifiers where available and permitted;
consent status and privacy signals;
session timestamps and duration;
diagnostic and performance information; and
security and fraud-prevention information.
References to device identifiers do not mean that we intentionally collect permanent hardware identifiers such as an IMEI or device serial number unless a specific feature expressly requires and discloses such processing.
We may process information about how the Service is used, including:
application launches and sessions;
session duration;
levels, missions, and game modes;
game progress and completion status;
achievements and leaderboard scores;
characters, weapons, skins, boosters, and other features used;
tutorial and gameplay events;
virtual currency and Virtual Item activity;
rewards and progression;
interactions with menus and interface elements;
application updates;
advertising impressions and interactions;
completed rewarded advertisements and associated rewards;
purchase and subscription events;
attribution and campaign information;
feature configurations and experiments;
crashes, errors, freezes, and performance events; and
aggregated game statistics.
We use this information to provide and improve the Service, understand game performance, balance gameplay, identify technical issues, measure campaigns, prevent fraud and abuse, and support business operations.
Depending on the platform, device settings, privacy choices, permissions, location, and applicable law, advertising providers may process resettable advertising identifiers, including:
the Google Advertising ID on supported Android devices; and
Apple’s Identifier for Advertisers (“IDFA”) where access is available and authorized.
Access to IDFA is subject to Apple’s App Tracking Transparency framework where applicable.
A privacy choice made through an advertising consent interface and a permission choice made through Apple’s system interface are separate controls and may serve different legal or platform purposes.
If an advertising identifier is unavailable, restricted, reset, deleted, or not authorized, advertising and analytics providers may process contextual information or other limited identifiers where permitted by applicable law and platform requirements.
We do not intentionally use alternative identifiers to circumvent a privacy choice or platform restriction.
We and our providers may infer an approximate country, region, or city from an IP address, network information, application-store region, or similar technical information.
Approximate location may be used to:
apply appropriate privacy requirements;
provide geographically relevant content;
select or limit advertising;
conduct analytics;
prevent fraud;
determine service availability; and
comply with legal or platform restrictions.
Approximate location inferred from network information is different from precise location obtained through GPS or another device location permission.
The Service does not use precise location unless a particular feature expressly requests the relevant permission and provides appropriate information about the processing.
Purchases are processed by the relevant application store or payment platform, such as Apple App Store or Google Play.
We do not receive or store your complete payment-card number, banking password, or full payment credentials.
We may receive limited transaction information, including:
purchased product or subscription;
transaction, receipt, or order identifier;
transaction status;
purchase-validation information;
price and currency;
purchase date;
store country or region;
subscription status; and
refund, cancellation, or chargeback status.
We use this information to provide purchased content, validate transactions, restore eligible purchases, respond to support requests, prevent fraud, maintain records, and comply with applicable legal obligations.
Where notifications are enabled, we or our providers may process:
a push-notification token;
application and device information;
notification-delivery status; and
interactions with notifications.
This information is used to deliver game-related messages and notifications.
You may disable push notifications through your device or operating-system settings. Disabling notifications does not necessarily result in immediate deletion of technical records that must temporarily be retained for security, troubleshooting, or legal purposes.
When a technical or performance issue occurs, we and our providers may process:
device model;
operating system;
application version;
application-instance identifier;
IP address;
crash stack traces;
diagnostic logs;
memory and performance information;
date and time of the event;
application state at the time of the event; and
other technical information required to investigate the issue.
Limited diagnostic information may also be collected during normal operation to identify performance degradation, errors, or security problems.
When you visit inkosgames.com, our hosting provider and any technologies used by the website may process:
IP address;
browser type and version;
operating system;
device and network information;
referring page;
pages viewed;
date and time of access; and
server and security logs.
Our website may use cookies, local storage, or similar technologies.
Technologies that are strictly necessary may be used to operate, protect, and secure the website. Non-essential analytics or advertising technologies will be used only where permitted by applicable law and, where required, after an appropriate choice has been obtained.
Mobile applications generally use SDKs, application storage, platform APIs, and device or application identifiers rather than conventional browser cookies.
We may obtain information:
directly from you;
automatically from your device or use of the Service;
from Apple, Google, or another platform provider;
from an application store;
from advertising and mediation providers;
from analytics and attribution providers;
from crash-reporting and technical-service providers;
from consent-management technologies;
from security and fraud-prevention providers; or
from another source where permitted by law.
We may process information to:
provide, operate, and maintain the Service;
save or restore game progress where supported;
provide achievements and leaderboards;
provide purchases and Virtual Items;
validate and restore eligible purchases;
respond to support requests;
diagnose and correct technical issues;
maintain application security and stability;
prevent fraud, cheating, abuse, and unauthorized activity;
understand how the Service is used;
analyze player progression and retention;
balance and improve gameplay;
test features and technical configurations;
display and measure advertising;
attribute installations and activity to campaigns;
send notifications where enabled;
comply with platform rules;
comply with legal, accounting, tax, and regulatory obligations;
establish, exercise, or defend legal claims; and
protect our users, systems, property, and legal rights.
Where the GDPR, UK GDPR, or another law requiring a legal basis applies, we rely on one or more of the following legal bases.
We may process information where necessary to:
provide the Service and requested functionality;
save or restore supported game progress;
provide purchases and Virtual Items;
validate or restore purchases;
provide achievements and leaderboards; and
respond to requests relating to the Service.
Where required, we may rely on consent for processing such as:
personalized or targeted advertising;
certain advertising measurement;
cross-application or cross-service tracking;
access to IDFA;
certain analytics technologies;
non-essential website cookies;
push notifications; and
other optional processing presented through an applicable privacy or platform interface.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where permitted by applicable law, we may process information for legitimate interests such as:
operating and improving the Service;
understanding application performance;
performing proportionate analytics;
maintaining game balance;
providing contextual or otherwise permitted advertising;
measuring general service performance;
preventing fraud, cheating, abuse, and security incidents;
protecting our systems and legal rights;
responding to support requests; and
establishing or defending legal claims.
Before relying on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.
Where applicable rules require consent before information may be stored on or accessed from a device, we will rely on the required consent even where a separate data-protection legal basis may otherwise be available.
We may process information where necessary to:
comply with tax and accounting requirements;
comply with consumer-protection and privacy laws;
respond to valid legal requests;
handle data-protection requests;
retain required consent records;
investigate unlawful conduct; and
comply with obligations imposed by a competent authority.
In exceptional circumstances, we may process information where necessary to protect a person’s life, physical safety, or vital interests.
The Service may display advertisements supplied by third-party advertising and mediation providers.
Advertising helps us provide and maintain games that are available without an upfront purchase.
Depending on your location, device, platform, application version, previous choices, and applicable law, you may be presented with a privacy message provided through Google AdMob’s User Messaging Platform or another applicable privacy-management solution.
The privacy message may provide information or choices concerning:
storing or accessing information on your device;
using personal data for advertising;
personalized or targeted advertising;
contextual or non-personalized advertising;
advertising measurement;
analytics;
advertising and technology providers; and
other processing described in the message.
The availability, content, and timing of a privacy message may vary depending on your location, device, platform, application version, previous privacy choices, and applicable legal or platform requirements.
Where processing requires consent, processing that depends on that consent will be performed in accordance with the choice communicated through the applicable privacy interface.
If you do not consent to personalized advertising, you may continue to receive contextual, non-personalized, or limited advertising.
Declining personalized advertising does not necessarily prevent all information from being processed. Certain processing may continue where another lawful basis applies, including processing reasonably necessary to:
provide the Service;
select contextual advertising;
protect security;
prevent fraud and invalid advertising activity;
record and apply privacy choices;
process purchases;
comply with legal obligations; or
perform another permitted purpose.
Advertising providers may process information such as:
IP address;
advertising identifiers where available and permitted;
application-instance or device-related identifiers;
device and operating-system information;
application information;
approximate location inferred from an IP address;
advertising impressions and interactions;
rewarded-advertising completion events;
consent and privacy signals;
campaign and attribution information; and
fraud-prevention information.
The information available to a provider depends on the relevant game, device, operating system, permissions, platform settings, privacy choices, location, and applicable law.
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Depending on the applicable service, platform, provider, and location, certain choices may be available through:
a privacy message presented through Google AdMob’s User Messaging Platform or another provider;
Apple’s tracking and privacy settings;
Android advertising privacy controls;
browser cookie controls;
application-store or platform settings;
controls provided directly by an independent third-party provider;
The availability and wording of these controls may differ by country, platform, operating-system version, device, provider, and application version.
Device-level privacy settings and choices made through an advertising consent interface are separate controls and may have different effects.
Changing a device-level setting may not automatically modify a choice recorded by an application or an independent provider. Similarly, an advertising consent choice may not modify a separate operating-system permission.
Some choices relating to processing performed independently by Apple, Google, or another provider must be exercised directly through that provider.
After consent is withdrawn, we and our providers may continue processing information where another lawful basis applies, including where processing is necessary for security, fraud prevention, purchase processing, record keeping, legal compliance, or the provision of requested functionality.
We may use analytics, attribution, and diagnostic providers to:
measure application usage;
understand gameplay progression and retention;
identify the source of an application installation;
measure advertising revenue and purchases;
evaluate campaigns;
detect technical problems;
monitor application stability;
conduct experiments;
prevent fraud; and
improve the Service.
Information processed for these purposes may include:
pseudonymous identifiers;
application events;
gameplay events;
purchase events;
advertising events;
IP address;
device and application information;
approximate location;
campaign information; and
crash and diagnostic information.
Where consent is required, processing that depends on consent will be enabled only in accordance with the applicable privacy choice.
Depending on the game, platform, region, installed version, enabled features, and current technical configuration, the Service may use providers such as:
Apple App Store and related Apple platform services;
Google Play and related Google platform services; and
Google Play Games Services where enabled.
Google AdMob;
Google User Messaging Platform;
Appodeal;
Unity Ads or Unity LevelPlay;
ironSource;
AppLovin;
Meta Audience Network; and
other advertising demand partners made available through an active mediation configuration.
Google Analytics for Firebase;
Firebase Crashlytics;
Firebase Cloud Messaging where notifications are enabled;
AppsFlyer; and
ByteBrew.
Not every listed provider is used in every game, platform, or application version.
Advertising mediation configurations may change over time and may make advertising inventory available from additional providers. Where required, additional providers may be identified through the applicable advertising privacy message or provider list.
Some providers process information on our behalf. Other providers may process information for purposes that they determine independently.
Their processing is subject to their respective agreements, privacy notices, platform rules, and applicable laws. We encourage you to review the privacy notices of the providers relevant to your platform and use of the Service.
We may disclose information to the following categories of recipients.
We may disclose information to providers that perform services on our behalf, including:
hosting;
cloud infrastructure;
analytics;
attribution;
crash reporting;
push notifications;
purchase validation;
technical support;
fraud prevention;
security;
consent management; and
data storage.
These providers may process information only as permitted by their agreements with us and applicable law.
Subject to applicable law, privacy choices, and platform settings, advertising and mediation providers may receive information needed to:
select and deliver advertisements;
provide contextual or personalized advertisements;
limit advertisement frequency;
measure advertisement performance;
attribute advertising activity;
provide rewarded advertisements; and
detect fraud or invalid advertising activity.
Some advertising providers may act as independent controllers or businesses for certain processing they perform.
We may exchange limited information with Apple, Google, or another platform provider for:
application distribution;
purchases, subscriptions, and refunds;
purchase validation and restoration;
platform authentication;
achievements and leaderboards;
supported saved games;
push notifications;
security and fraud prevention; and
compliance with platform requirements.
We may disclose information where we reasonably believe disclosure is necessary to:
comply with applicable law;
respond to valid legal process;
respond to a competent authority;
protect the rights, property, or safety of Inkos Games, our users, or another person;
prevent or investigate fraud, cheating, abuse, or security incidents;
investigate a suspected violation of our Terms of Service; or
establish, exercise, or defend legal claims.
If Inkos Games is involved in a merger, acquisition, corporate restructuring, financing, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction.
Any recipient will remain subject to applicable privacy obligations. We will provide additional notice where required by law.
We may disclose information where you direct us to do so or where you separately authorize the disclosure.
We do not sell personal data to data brokers in exchange for money.
However, some privacy laws define disclosures of identifiers or activity information to advertising providers as:
a “sale”;
“sharing”; or
“targeted advertising,”
even where no money is paid specifically for the information.
Where an applicable law grants a right to opt out of such processing, you may exercise that right through an available provider, platform, device, browser, privacy interface, or by contacting us at admin@inkosgames.com.
We do not knowingly sell or share personal data relating to minors for targeted advertising in circumstances prohibited by applicable law.
We do not provide a financial incentive in exchange for permission to sell or share personal data unless the material terms are separately disclosed as required by applicable law.
Inkos Games is established in Bulgaria, within the European Economic Area.
Some providers or recipients may process information in the United States or other countries outside the European Economic Area, United Kingdom, or Switzerland.
Where required, international transfers are supported by legally recognized safeguards, which may include:
an adequacy decision;
participation by the recipient in an applicable data-privacy framework;
European Commission Standard Contractual Clauses;
the applicable UK transfer addendum or another approved UK safeguard;
contractual, organizational, and technical supplementary measures; or
another transfer mechanism permitted by applicable law.
Privacy and data-protection laws in the destination country may differ from those in your country.
You may contact us to request additional information about safeguards applicable to a transfer, subject to legal, security, and confidentiality restrictions.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security, fraud-prevention, support, and dispute-resolution purposes.
The applicable retention period depends on factors such as:
the type of information;
the purpose for which it was collected;
the legal basis for processing;
whether consent remains valid;
configured provider-retention settings;
legal and contractual obligations;
applicable limitation periods;
security requirements;
fraud-prevention requirements;
whether the information can be aggregated or anonymized; and
valid deletion, objection, or restriction requests.
In general:
locally stored game data remains on the device until it is deleted, overwritten, cleared, or removed with the application;
cloud-save and platform-profile data is retained according to the relevant platform functionality and provider policies;
purchase and transaction records may be retained for accounting, tax, fraud-prevention, consumer-protection, and legal purposes;
support correspondence may be retained until the matter is resolved and for a reasonable period necessary to establish or defend legal claims;
consent and privacy-choice records may be retained where necessary to demonstrate compliance;
crash and diagnostic information is retained for as long as reasonably necessary to investigate technical, reliability, security, or compatibility issues;
analytics, attribution, and advertising information is retained according to applicable provider settings, contractual requirements, legal obligations, and operational needs; and
information is deleted or anonymized when it is no longer necessary, unless continued retention is required or permitted by law.
Independent third-party controllers may apply their own retention periods.
The Service is intended for a general audience and is not specifically directed to children.
Requirements concerning children, minors, parental authorization, and the ability to provide consent independently vary between countries.
We do not knowingly process personal data relating to a child in a manner that requires parental authorization under applicable law unless the required authorization or another legally permitted basis has been established.
We do not treat an application-store age rating or an advertising consent message as conclusive proof of a user’s age.
Where we become aware that personal data relating to a child has been processed contrary to applicable law, we will take reasonable steps appropriate to the circumstances. These steps may include:
restricting further processing;
disabling personalized or targeted advertising;
limiting analytics or advertising identifiers;
requesting deletion or restriction by a relevant provider;
deleting information under our control; or
obtaining legally required authorization where appropriate.
Some features, advertising practices, analytics activities, or third-party services may be restricted or unavailable where required by applicable law, platform requirements, or privacy settings.
A parent or legal guardian who believes that personal data relating to a child has been processed improperly may contact us at admin@inkosgames.com.
The request should include enough information to identify the relevant game, platform, installation, platform profile, transaction, or support correspondence. Please do not send unnecessary identity documents, payment credentials, or other sensitive information.
Your privacy rights depend on your location, the applicable law, the type of processing, and the legal basis relied upon.
Where applicable, you may have the right to:
obtain confirmation of whether we process your personal data;
request access to your personal data;
request correction of inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
object to direct marketing;
receive certain information in a structured, commonly used, machine-readable format;
request transmission of eligible information to another controller where technically feasible;
withdraw consent at any time;
receive information about certain international-transfer safeguards; and
lodge a complaint with a competent data-protection authority.
These rights are not absolute. A request may be limited where an exception applies, including where information must be retained to comply with law, protect another person’s rights, prevent fraud, or establish or defend legal claims.
Depending on your state and whether the applicable law applies to Inkos Games, you may have rights to:
know or access personal information;
correct inaccurate personal information;
request deletion;
obtain a portable copy of certain information;
opt out of sale;
opt out of sharing or targeted advertising;
opt out of certain profiling;
limit certain uses of sensitive personal information;
appeal a refusal to act on a request; and
receive equal service and pricing when exercising privacy rights.
Where permitted by law, you may use an authorized agent. We may request reasonable evidence of the agent’s authority and may separately verify the request with you.
Users in other jurisdictions may have additional rights under applicable local privacy and data-protection laws.
We will respond to valid requests where the relevant law applies to the processing.
To submit a privacy request, contact:
Email: admin@inkosgames.com
Suggested subject: Privacy Request
Please provide information reasonably necessary to identify the relevant data, which may include:
the relevant game;
your platform;
the approximate period during which you used the Service;
the nature of your request;
a platform player identifier;
an application or support identifier;
a transaction identifier; or
other relevant pseudonymous information available to you.
Do not send passwords, full payment-card details, government identification documents, or unnecessary sensitive information unless we specifically request an appropriate verification method.
Because we do not operate Inkos Games user accounts, we may not be able to locate application data using only your name or email address.
We may request reasonable verification before acting on a request. We will not intentionally request more verification information than reasonably necessary.
If we cannot identify information as relating to you, we may be unable to fulfill a request concerning that information. Where required, we will explain the reason.
Information held solely by Apple, Google, an application store, an advertising provider, or another independent controller must generally be requested directly from that provider.
Advertising, analytics, attribution, security, fraud-prevention, and content-configuration systems may use automated processing to:
select or limit advertisements;
measure advertising performance;
attribute installations or activity;
detect suspected fraud or cheating;
classify technical events;
configure experiments; and
analyze gameplay patterns.
Inkos Games does not use solely automated processing to make decisions that produce legal or similarly significant effects concerning users.
Independent advertising or technology providers may perform their own profiling under their privacy notices and subject to applicable consent and opt-out rights.
We use reasonable technical and organizational measures designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the information and system, these measures may include:
encrypted transmission;
access controls;
authentication;
data minimization;
restricted administrative access;
software updates;
monitoring and logging;
vendor assessment;
backups;
incident-response procedures; and
contractual data-protection requirements.
No electronic system or method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.
Where required by applicable law, we will notify the competent authority and affected individuals of a qualifying personal-data breach.
The Service may contain links to third-party websites, application-store pages, advertisements, or other external services.
A third party’s processing is governed by its own terms and privacy notice. We encourage you to review the relevant documents before providing information or interacting with an external service.
We are not responsible for a third party’s independent privacy practices, except to the extent responsibility cannot be excluded under applicable law.
Browser-based “Do Not Track” signals are not interpreted consistently across the industry.
Where required by applicable law and technically applicable, we will process legally recognized privacy preference signals for the browser or device from which the signal is received.
A browser or device signal may not automatically apply to a different browser, device, application installation, or platform profile.
Device privacy settings may affect the information available to us and our providers but may not control every processing activity performed under another lawful basis.
We may update this Privacy Policy to reflect:
changes to the Service;
new, removed, or changed providers;
changes to data practices;
legal or regulatory developments;
changes to platform requirements;
technical or security improvements; or
organizational changes.
The updated version will include a revised effective date.
Where a change materially affects how personal data is processed, we will provide additional notice through the Service, our website, the relevant application store, or another appropriate method where required by law.
Where a new processing activity requires consent, the relevant consent will be requested before processing begins.
We encourage you to contact us first so that we can attempt to resolve your concern.
If you are located in the European Economic Area, you may lodge a complaint with the data-protection authority in the country of your habitual residence, place of work, or the location of the alleged infringement.
The data-protection supervisory authority in Bulgaria is:
Commission for Personal Data Protection of the Republic of Bulgaria
Users in the United Kingdom may also contact the UK Information Commissioner’s Office where applicable.
Submitting a complaint does not affect any other administrative or judicial remedy available to you.
For questions, complaints, or requests concerning this Privacy Policy or our processing of personal data, contact:
Company: Inkos Games EOOD
Registered address: Burgas, Lazur Distr., bl.53, Entr. 3, Fl. 4, Apt. 8, 8000
Unified Identification Code (UIC / EIK): 208802417
Commercial register: Commercial Register and Register of Non-Profit Legal Entities of the Republic of Bulgaria
VAT identification number: BG208802417
Email: admin@inkosgames.com
Telephone: +380 66 658 8651
Country of establishment: Republic of Bulgaria