Privacy policy
What we collect, why, and for how long.
What we hold
An instant account holds no personal information: an address, a session, and your play.
If you attach credentials we hold your email address and a hash of your password (argon2id). If you verify your identity we hold the documents you submit, encrypted at rest.
- Account: username, email if provided, deposit addresses, linked wallet addresses
- Security: device and browser description, IP address, sign-in events
- Activity: bets, deposits, withdrawals, bonuses, chat messages, support conversations
What we never hold
We never store your 12-word phrase. It is generated once, shown to you once, and is not written to any database, log, or analytics system. The phrase screen is excluded from analytics entirely.
Why we hold it
To run your account, settle bets, pay withdrawals, prevent fraud and money laundering, meet licensing obligations, and answer you when you ask for help.
How long
Financial records are kept for the period our licence and anti-money-laundering law require, typically five years after an account closes. Chat messages are kept for 12 months. You can ask for a copy of your data or for deletion of anything we are not legally required to keep.
The support assistant
The first reply in the support window comes from an automated assistant, and it says so. To answer, it can read your own balances, bets, deposits, withdrawals, bonus and limits; it cannot change anything on your account. You can ask for a person at any point.
Where the assistant is run by an AI model, what you write to it and the account figures it looks up for you are sent to the provider of that model (Anthropic) to produce the answer. Do not put your 12 words, a password or a code in a support message: nobody here needs them.
Codes and bug reports
If you join by another player's code, that player is told that an account joined, when, and whether it has played lately, under a shortened form of your username. They are not shown your balance or what you stake, win or lose. They are shown the total staked by all their players together; where a code has brought few players, that total says more about each of them. A code's link leaves a cookie for 30 days that holds the code and nothing else.
A bug report keeps what you wrote, the address of the page without anything that was typed into it, and your browser's name and window size.