Privacy Policy

1. Who we are

This Privacy Policy applies to bishtcoin.io and all related services (collectively, the "Service") operated by the BISHTcoin team ("we," "us," "our"). For questions about this policy or about your data, contact privacy@bishtcoin.io.

2. Information we collect

2.1 Information you provide directly

• Account information: when you sign up, we collect your email address, your chosen display name, your age confirmation (you must be 18+), and your acceptance of our Terms of Service.
• Wallet address: when you connect a wallet (Phantom, Solflare, etc.) or are issued an embedded wallet by our authentication provider, we record the public Solana address as your account identifier.
• Bet content: questions, option labels, deadlines, and stake amounts you submit when creating bets. This information is public on the Service.
• Communications: if you contact support, we keep records of those exchanges.

2.2 Information collected automatically

• On-chain activity: every stake, settle, and distribution transaction is recorded on the public Solana blockchain. We index these events to display them in the Service. They are not private and exist outside our control.
• Device and connection data: IP address, browser type and version, operating system, referring URL, pages visited, timestamps. We use this for security, rate limiting, and to operate the Service.
• Cookies and similar technologies: see Section 7.

2.3 Information from third parties

• Authentication provider: when you sign in with Google, Apple, X, email, or phone via our authentication provider (currently Privy.io), we receive a verified identifier (email, phone number, or social ID) and a wallet address. We do not receive your password, social network feed, contacts, or other personal data beyond what's needed to authenticate you.
• Fiat onramps: if you buy crypto with a credit card or bank transfer through a third-party onramp accessible via the Service (e.g. MoonPay, Coinbase Pay), that purchase is governed by the onramp provider's privacy policy. We may receive notification that the purchase succeeded so we can credit your wallet, but we do not receive your payment card details.

3. How we use your information

We do not use your data to train AI models, target advertising, or for any purpose not listed above.

4. How we share your information

We share your information with the following categories of recipients, only as needed to operate the Service:

• Service providers: companies that provide infrastructure under contract, including:
  • Privy.io — authentication and embedded wallet management
  • Vercel — backend hosting and serverless function execution
  • Upstash — Redis-based session and bet state storage
  • Resend — transactional email delivery
  • Cloudflare — DNS, email routing, content delivery
  • Helius — Solana RPC infrastructure
  • MoonPay / Coinbase Pay — fiat-to-crypto onramps (only if you initiate a purchase)
• Legal authorities: when we are required by law, valid court order, or government request to disclose information. We will resist overbroad requests where lawful and feasible.
• Acquirers: if BISHTcoin is acquired, merged with another entity, or sells substantially all of its assets, your information may transfer to the acquirer subject to this Privacy Policy.

We do not sell your personal information to third parties for advertising or marketing purposes. We do not share your email address with anyone outside the service providers listed above.

5. The blockchain is public

Solana is a public blockchain. Every transaction you sign — staking on a bet, joining a bet, claiming a distribution — is permanently visible to anyone, anywhere, forever. Your wallet address and your full transaction history can be viewed on block explorers like Solscan and Solana FM.

We do not control this and we cannot delete on-chain records. If you want privacy from on-chain observers, you should not use this Service or any other on-chain service. Sophisticated analytics services may attempt to link your wallet address to your real-world identity through patterns of use; we do not assist with this but cannot prevent it.

6. Data retention

• Active accounts: we retain your account information for as long as your account remains active.
• Deleted accounts: when you ask us to delete your account, we remove your name and email from our active systems within 30 days. Your wallet address and bet history may remain associated with on-chain records (which we cannot delete) and in our backup archives for up to 12 months for security and audit purposes, after which they are purged.
• Logs: server logs containing IP addresses are retained for up to 90 days for security purposes, then deleted or anonymised.
• Email communications: support correspondence is retained for up to 24 months.
• Legal hold: we may retain information longer when required by law, regulation, or to defend or pursue legal claims.

7. Cookies and tracking

We use the following categories of cookies:

• Strictly necessary: cookies that are required for the Service to function — for example, session tokens issued by our authentication provider. You cannot opt out of these without losing the ability to use the Service.
• Functional: cookies that remember your preferences (e.g. dismissed welcome banner, sound preference for the game).
• Local storage: we cache your wallet address and a copy of your profile in your browser's local storage so that your topbar identity loads quickly when you return.

We do not use third-party advertising cookies, analytics cookies that personally identify you, or cross-site tracking cookies.

8. Children

The Service is not directed to and not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@bishtcoin.io and we will delete it.

9. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: ask us to delete your account and associated data, subject to the on-chain limitation in Section 5 and the retention rules in Section 6.
• Portability: receive your data in a structured, machine-readable format.
• Objection / restriction: object to certain processing, or ask us to restrict it.
• Withdraw consent: where we rely on consent as the legal basis for processing.
• Lodge a complaint: with your local data protection authority.

To exercise any of these rights, email privacy@bishtcoin.io from the email associated with your account. We will respond within 30 days.

9.1 EU and UK users (GDPR)

The legal bases on which we process personal data are: (a) performance of a contract with you (operating the Service you signed up for); (b) our legitimate interests (preventing fraud, securing the Service, improving the product); (c) your consent (where required); (d) compliance with legal obligations.

For questions about international data transfers, our designated data protection contact is privacy@bishtcoin.io.

9.2 California users (CCPA / CPRA)

California residents have the rights described above and may also request that we disclose what personal information we have collected about them in the past 12 months. We do not "sell" or "share" personal information as defined under California law. To exercise CCPA/CPRA rights, email privacy@bishtcoin.io.

10. Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest for sensitive credentials (e.g. RESEND_API_KEY, BET_ESCROW_PRIVATE_KEY), access controls, and minimum-necessary data collection.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by applicable law.

You are responsible for the security of your authentication credentials and any wallets you control. We cannot recover wallets or assets lost due to user error, phishing, malware, or theft of credentials.

11. International data transfers

Our service providers operate globally. Your information may be transferred to, processed in, and stored in the United States and other countries that may have different data protection laws than your country of residence. By using the Service, you consent to such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on the Service with a revised effective date. Material changes will be communicated via email or a prominent notice on the Service before they take effect.

13. Contact

For any questions about this Privacy Policy or your personal information, contact:

The BISHTcoin team
privacy@bishtcoin.io