Privacy Policy

Last updated: 3 July 2026

1. What we collect

Account data — your email address, a display username, and a salted password hash (never the password itself). If you sign in with Google we receive your name, email and profile picture reference from Google; we never see your Google password.
Gameplay data — bets, game results, balances, rewards progress and session statistics.
Technical data — IP address (used for rate-limiting, abuse prevention and regional availability), browser type, and basic device information.
Marketing data — an email address you choose to give us for promotional offers (for example the $5 free-play code).
Verification data — if identity verification is required, it is performed by our verification provider (Didit); we store the outcome, not your documents.

2. What we use it for

Operating your account and the games, and keeping balances accurate.
Security: preventing fraud, abuse, multi-accounting and attacks.
Legal compliance, including age and identity checks where required.
Sending promotional email you asked for — every message includes a way to opt out, and you can opt out at any time by contacting us.

We do not sell your personal data. We do not run third-party advertising trackers on the Platform.

3. Cookies and local storage

We use your browser's local storage for essentials only: your session token, sound/music preferences, and small flags such as whether you dismissed an offer. No third-party advertising cookies are set.

4. Who processes your data

Render — application hosting.
Supabase — database hosting (accounts, balances, bet history).
Google — optional sign-in (OAuth).
Didit — identity verification, where required.

5. Retention

Account and gameplay records are kept while your account is active and for as long as needed for security, dispute handling and legal obligations, then deleted or anonymised.

6. Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account and associated personal data. Email growthlayers26@gmail.com from your account email and we will respond within 30 days.

7. Children

The Platform is strictly for adults aged 18+. We do not knowingly collect data from minors; suspected minor accounts are closed and their data deleted.

8. Changes

We will update this policy as the Platform evolves (for example if real-money play launches, which brings additional regulatory processing). Material changes will be signposted on the Platform.

Contact for all privacy matters: growthlayers26@gmail.com.