← Back
LEGAL

Privacy Policy

Last updated: June 17, 2026

What we collect, what we never store, and what the blockchain makes permanent. Playing needs a username and a password, nothing more.

Email optional
A username and a password are all an account needs
Zero keys
Private keys are never stored — they derive from an encrypted master seed
Public by design
Deposits and withdrawals stay permanently visible on TON and BNB Chain
Contents

Introduction#

Durak Crypto ("we", "us", "our") operates a skill-based online card game platform where players compete using USDT on the TON and BNB Chain (BEP-20) networks. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

By registering an account and using our platform, you agree to the practices described in this policy. If you do not agree, please do not use the service.

Data We Collect#

We collect the following categories of data:

Account data — username, email address, hashed password, registration date.
Wallet data — the deposit addresses assigned to your account on each network you use. We never store private keys; keys are derived from an encrypted master seed.
Transaction data — deposit amounts, withdrawal requests, transaction hashes, timestamps, and platform fee records.
Gameplay data — game results, bets placed, XP earned, win/loss history, and leaderboard standings.
Support data — messages and attachments you submit via our support ticket system.

How We Use Your Data#

To create and manage your account.
To process deposits, withdrawals, and in-game payouts.
To operate the game — match you with other players, maintain game state, and resolve disputes.
To display leaderboards and XP rankings.
To send transactional emails (deposit confirmed, withdrawal sent, support replies). We do not send promotional emails without your explicit consent.
To detect and prevent fraud, cheating, or abuse.
To comply with applicable laws and regulations.

Blockchain Transparency#

All deposits and withdrawals are recorded on the TON and BNB Chain public blockchains. This means transaction amounts, wallet addresses, and transaction hashes are permanently and publicly visible. We cannot delete or modify blockchain records. By using the platform, you acknowledge this inherent transparency.

Data Sharing#

We do not sell or rent your personal data. We share data only in the following limited cases:

Blockchain nodes — to broadcast your withdrawal transaction to the TON or BNB Chain network.
Email provider — to deliver transactional emails. Only your email address is shared.
Legal obligation — if required by law, court order, or to protect the rights and safety of our users.

Data Retention#

Account data is retained for the lifetime of your account plus 2 years after deletion.
Transaction and financial records are retained for 7 years to comply with financial record-keeping requirements.
Server logs are purged after 30 days.
Support ticket data is retained for 2 years.

Security#

We use industry-standard security measures including HTTPS/TLS for all connections, bcrypt password hashing, AES-256 encryption for sensitive secrets, and JWT tokens with short expiry. No system is 100% secure — we encourage you to use a strong unique password and to keep your email account secure.

Your Rights#

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data (subject to retention requirements above).
Object to processing or request restriction in certain circumstances.

To exercise any of these rights, contact us via the support page.

Cookies#

We use a single session cookie to keep you logged in. We do not use advertising cookies or third-party tracking scripts. You may clear cookies at any time via your browser settings, which will log you out.

Changes to This Policy#

We may update this policy as the platform evolves. When we do, we will update the "Last updated" date above. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact#

For privacy-related questions or requests, please reach us through the support page. We aim to respond within 5 business days.