R
Royal Club

Privacy Policy

Effective: 4/21/2026

[COMPANY LEGAL NAME] ("we", "us") operates the Royal Club platform. This Privacy Policy describes what information we collect, how we use it, and your rights.

Information We Collect

From Operators (back-office)

  • Name of organization, operator contact email and phone
  • Login credentials (email address and hashed password)
  • Game-platform admin credentials (username only; passwords encrypted at rest and never displayed)
  • Wallet balance and transaction history
  • BTC addresses you submit for cashouts
  • Last-login timestamp and approximate IP

From Players

  • First name, last name, phone number
  • Invite code used at signup, shop / vendor / distributor tree attribution
  • Wallet balance and full transaction history (deposits, play activity, redemptions)
  • Approximate location (city / state) to enforce geographic restrictions

Automatically

  • IP address, user-agent, device type, time-zone
  • Pages visited on Royal Club and basic event analytics (no third-party advertising trackers)

How We Use It

  • Operate the platform — authentication, ledger, cashouts, support
  • Enforce eligibility — minimum age, geo-restrictions, anti-fraud
  • Comply with legal obligations — tax reporting (IRS W-2G / 1099), AMOE records, sweepstakes rules
  • Improve the service — aggregated analytics, never combined with PII for advertising

Third Parties

We share information with service providers strictly to operate the platform:

  • Resend — transactional email (password resets, notifications)
  • Game platforms (e.g. Fire Kirin, Juwa, Ultra Panda, etc.) — only the subset needed to create / credit / redeem your game account, per your use
  • BTC network / settlement provider — on-chain Bitcoin transactions for cashouts
  • Hetzner Online — our hosting provider; data stored in the US region

We do not sell your personal information. We do not share with advertisers. We disclose information to law enforcement only when legally required.

Retention

We retain operator and player records for as long as the account is active, and for up to 7 years after closure to meet tax and regulatory requirements. Closed-account transactional data may be anonymized and retained for aggregated reporting.

Your Rights

  • Access — request a copy of the personal data we hold about you
  • Correction — update anything inaccurate
  • Deletion — request deletion of your account and associated PII (subject to the 7-year retention requirement for regulated records)
  • Export — request a machine-readable export of your data
  • California residents (CCPA) and EEA/UK residents (GDPR) have additional rights under those laws; email us to exercise them

Send requests to [PRIVACY EMAIL].

Cookies

We use first-party cookies for session authentication (the login cookie) and to remember your preferences. We do not use third-party advertising cookies. You can block cookies in your browser, but doing so will prevent you from signing in.

Security

All passwords are hashed with bcrypt. Game-platform credentials are encrypted at rest with AES-256-GCM. Traffic to Royal Club is served over TLS 1.2+. We maintain reasonable administrative and technical safeguards, but no system is 100% secure; you are responsible for keeping your login credentials private.

Changes

We may update this Policy from time to time. Material changes will be notified by email or via a banner on the dashboard. Continued use after the effective date constitutes acceptance.

Contact

Questions: [PRIVACY EMAIL]