Privacy Policy

We collect only what we need to run your account and our services, including:

• Account data: your email address and display name.
• Login data: we store your password as an encrypted hash and never keep the original password.
• Identity verification (KYC) data: the official documents and identity details you upload to verify before withdrawing.
• Technical data: IP address, device information, and sign-up and login information.
• Financial and game activity: your deposit, withdrawal, transfer, game-round, and transaction history.
• Referral relationships: your links to people you invited or who invited you within the Team program.

We use your data only for the following purposes:

• Operating and managing your account.
• Processing deposits, withdrawals, and transfers.
• Running the game and calculating rewards and commissions.
• Security, fraud prevention, and protecting the platform and its users.
• Meeting identity-verification and anti-money-laundering requirements (KYC/AML).
• Providing support and responding to your inquiries.

We process your data to perform our agreement with you in delivering the service, to comply with our legal and regulatory obligations, for our legitimate interests in securing the platform and preventing fraud, and on the basis of your consent where required. You may withdraw consent where processing relies on it, without affecting prior lawful processing.

We apply technical and organizational measures to protect your data, including:

• Encryption of secrets and sensitive data.
• An append-only financial ledger to safeguard balance integrity.
• Storing KYC documents in private object storage, accessible only through short-lived links.
• Two-factor authentication (2FA) support to protect accounts.
• Password hashing, so stored passwords cannot be reversed.

We use an httpOnly, Secure session cookie to keep you securely signed in; it is not accessible to browser scripts. We also offer a “trust this device” feature that lets you skip entering your 2FA code on devices you trust for a limited period.

We may use service providers (data processors) to run infrastructure, process payments, and confirm on-chain transactions; they process data only on our behalf and on our instructions. We do not sell your personal data to anyone.

We retain your data while your account is active. We keep financial records and KYC data for as long as compliance requirements and legal obligations demand. When an account is deleted we use soft-delete, removing or hiding what we no longer need within legal limits.

Subject to applicable law, you have the right to access your data, correct it, and request its deletion within legal limits (we may be required to retain certain financial records for compliance). To exercise any of these rights, contact us at the email below.

The platform is intended only for users aged 18 and over (18+) and is not directed to minors. We do not knowingly collect data from anyone under the legal age, and if we learn that we have, we will delete it.

Your data may be processed or stored on servers located outside your country of residence. When we transfer data internationally, we apply appropriate safeguards to protect it in line with applicable law.

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date; your continued use of the platform after an update constitutes acceptance of the new version.

For any privacy question or to exercise your rights, contact us at: privacy@paperino.example