Privacy Policy

We operate on a privacy-first, minimal-retention principle. When you create an account, we collect only your email address for account authentication and balance management. We do not ask for identity documents, phone numbers, or residential addresses.

When you interact with our servers, automated technical logs (such as IP address, browser user-agent, and timestamp) are temporarily recorded solely to protect against DDoS attacks, automated fraud, and abuse.

The limited data we retain is strictly used to:

• Provision temporary SMS verification numbers and deliver incoming OTP codes.
• Process balance deposits and maintain your financial transaction ledger.
• Deliver automated transactional notifications and reply to support inquiries.
• Detect, investigate, and prevent fraudulent transactions or network abuse.

All communication between your browser, API client, and our platform is protected by bank-grade TLS 1.3 encryption. Internal database records and passwords are protected with modern, salt-hashed algorithms (Argon2 / Bcrypt).

We use essential first-party session cookies exclusively for user authentication and CSRF security protection. We do not use third-party behavioral advertising trackers or sell browsing data to commercial data brokers.

We may update this Privacy Policy from time to time to reflect modifications in our services or legal obligations. Any revisions will be posted on this page with an updated revision date.