Privacy Policy

1. Data we collect. Account details (name, username, email, hashed password), referral relationships, wallet/transaction history, device fingerprint hash, and IP address for security and anti-fraud purposes.

2. Card information. We never store full card numbers or CVVs. Only the last four digits and expiry are retained to identify payout accounts. Payouts are processed through PCI-DSS-compliant providers.

3. How we use data. To operate the referral program, prevent fraud (including multiple accounts, VPN abuse and self-referrals), process withdrawals, and send service notifications.

4. Cookies. We use essential cookies for authentication, CSRF protection and preferences. We do not sell your data to third parties.

5. Data retention. Account data is retained while your account is active. You may request account deletion at any time by contacting support.

6. Security. Passwords are hashed with bcrypt, tokens are stored hashed, connections are TLS-encrypted, and access to personal data is restricted to authorized staff.