What this notice covers
This notice describes the data handling implemented in this application. The site operator controls the application database. For privacy questions or requests, use the community contact linked in the footer to ask for a private support route. Never send passwords or sensitive documents in a public channel.
Information collected and why
Accounts store a username, email address, salted scrypt password hash and account status to support login and administration. Passwords are not stored as readable text. We store account and demo balances, bets, game actions, fairness seeds and proofs, transactions, tips, rewards, faucet claims and rain claims to operate the games, prevent duplicate payments, and resolve account questions.
Chat messages and usernames are public to visitors. Messages may include mentions. Private account notes, moderation reasons, moderated originals and administrator changes are retained in restricted administrator records and audit logs. Public bet activity shows registered usernames or a Guest label; other players cannot retrieve your private ledger or active dealer cards.
Cookies and browser storage
Guest wallet and login session cookies identify your wallet. Sessions expire after seven days; logging out revokes that session. A signed CSRF cookie protects changes and expires after four hours. A visitor cookie lasts up to 30 days. Local storage keeps preferences such as currency, sound, hotkeys, instant mode, chat and navigation state. Clearing guest cookies can remove access to an unregistered wallet.
Traffic and abuse prevention
First-party traffic records include visited page paths, timestamps, a hashed visitor identifier, referrer hostname and an estimated device category. Full referrer URLs and raw browser user agents are not stored in that table. Authentication rate limiting temporarily stores connection IP addresses, for a 15-minute limiting window; expired counters are removed during subsequent authentication attempts. Chat throttling uses hashed connection identifiers and account IDs, with old counters removed after an hour during subsequent use. Hosting infrastructure may maintain separate access logs.
Sharing and external services
Authorized administrators can view account details and operational records. This application contains no advertising trackers and does not implement a sale of personal data. It requests web fonts from Google Fonts, which receives the connection information needed to serve them. Telegram is an external service with its own privacy practices; opening that link shares ordinary connection information with Telegram. We do not send your account email or password to Telegram.
NOWPayments processing
When payment processing is enabled, the server sends deposit amounts, currencies, order identifiers, and callback URLs to NOWPayments. Withdrawals also send the recipient blockchain address and a unique payout identifier. We store provider payment and payout IDs, status, amounts, addresses, transaction hashes, and reconciliation records. Blockchain transfers may be publicly visible. Your site account password is checked locally before requesting a withdrawal and is not sent to NOWPayments. The provider has its own terms and privacy practices. Provider API and payout credentials remain on the server.
Affiliate referrals
Referral links use a first-party cookie remembered for up to 30 days to attribute new accounts. A separate browser cookie estimates unique invite visitors; only its hashed identifier is stored. If you register through an invite, the inviter can see your public username, signup date, wagering progress in configured USD values and qualification status. Referral attribution, commission entries and claims are retained for account and financial records. Email addresses and credentials are not shared with inviters.
Retention and choices
Account, game, claim, traffic and audit records currently remain in SQLite until the operator removes them; no automatic long-term retention schedule is implemented. Some data may remain in backups. You can inspect your transactions and proofs, log out, and clear browser preferences. Account correction or deletion requests require operator review; there is no self-service deletion flow yet. The availability of privacy rights depends on applicable law.
Security and updates
The application uses password hashing, HTTP-only session cookies, signed request tokens, output escaping and browser security headers. No system can guarantee complete security. This service is intended for adults aged 18 and older. This notice may be updated when the application changes; the date above identifies this version.
This notice is written to reflect the application’s actual handling of data. See the FTC’s guidance on honoring privacy commitments.