Privacy Policy
Effective date: [PLACEHOLDER — date]
⚠️
DRAFT — subject to legal review. This document is a working draft. It is not final. Sections marked [PLACEHOLDER] will be completed before launch.
This Privacy Policy explains what personal information DESI CLASH ("we", "us", "the platform") collects, how we use it, and the choices you have. The platform is operated by [PLACEHOLDER — legal entity name and registered address].
1 Information we collect
Information you give us
- Account details: a phone number or an email address (used to sign in), and a public nickname.
- Optional profile details: a first and last name, if you choose to add them. These are private — they are visible only to you and to our support/administration team, not to other players.
- Age confirmation that you are 18 or older.
- Payment details: the USDT (TRC-20) wallet address you use to deposit or to receive withdrawals.
- Support messages: anything you send us through the in-app support system.
Information we collect automatically
- Network information: your IP address, recorded at registration and at each login.
- Device and session information associated with your use of the service.
- How you found us: the web address you arrived on — including any campaign parameters and advertising click identifiers contained in the link (for example those added by Facebook, Google or TikTok when you tap an advert) — the site that referred you, and the time you arrived. We record this once, when you create your account, together with a random identifier for your browser (see section 5).
- Activity records: your match history and your transaction records (deposits, stakes, payouts, withdrawals and related ledger entries).
- Risk and security signals derived from your activity, used to detect fraud and abuse.
2 How we use it
- To provide the service — run your account, match you with opponents, and settle matches.
- To process payments — credit deposits and pay out withdrawals.
- For security and fairness — detect and prevent fraud, multi-accounting, collusion and other abuse.
- To support you — respond to your tickets and resolve disputes.
- For legal compliance — meet our legal and regulatory obligations.
3 Advertising, and what we don't do
We do not sell your personal data.
No third-party tracking runs on the platform. We do not embed advertising or analytics scripts, pixels or SDKs in our pages, so no third party observes what you do here through us.
We do advertise, and we measure it. We buy adverts on platforms such as Facebook/Instagram, Google and TikTok. When you arrive from one of our adverts, the link you follow carries campaign parameters and a click identifier issued by that platform. We record them with your account, as described in section 1, so that we can tell which adverts actually bring players.
Conversion events are shared with advertising platforms. To measure and optimise the advertising we buy, we report conversion events — for example that a click led to a registration or to a deposit — back to the advertising platform that served the advert, together with the click identifier that platform itself issued. We are enabling this platform by platform; where it is not yet switched on for a platform, nothing is sent to that platform. We do not share your name, email address, phone number or wallet address for advertising purposes.
4 Where your data lives & who processes it
- Hosting. Our application and database run on our cloud hosting provider [PLACEHOLDER — provider, if to be named], which processes data on our behalf to keep the service running.
- Blockchain. Deposits and withdrawals happen on the public TRON blockchain. By their nature, on-chain transactions — including wallet addresses and amounts — are public and permanent, and are outside our control. This is inherent to how cryptocurrency works, not something we choose.
5 Cookies & local storage
We use your browser's local storage (rather than third-party tracking cookies) to make the service work. This includes:
- Authentication tokens that keep you signed in;
- Preferences such as sound, language, and other in-app settings;
- A random identifier for your browser, created on your first visit, together with the link you arrived on. We use it only to measure how people find us — which advert or referral link brought them — and to detect several accounts being opened from the same browser.
This identifier is ours alone and first-party: it is not shared with anyone, it is not readable by other websites, and it is not used to follow you around the internet. We do not use local storage for cross-site tracking.
6 Data retention
We keep your personal data for as long as your account is active and for as long as we need it to provide the service, meet legal obligations, resolve disputes, and protect the integrity of the platform. [PLACEHOLDER — specific retention period, if required by legal counsel]
How you found us (section 1) is kept for 24 months from the date it was recorded, and is then deleted. Aggregate counts we have already produced from it — such as how many people arrived from a given campaign — do not identify you and are kept.
Please note: your transaction and match records are kept as a permanent, append-only ledger for financial integrity, audit and legal reasons. These records cannot be edited or deleted, even if your account is closed. This does not apply to the "how you found us" records above: those are never rewritten, but they can be deleted — on the schedule above, or at your request.
7 Your rights
Depending on the laws that apply where you live, you may have rights to access, correct, or delete your personal data, and other rights over how it is used. To make a request, contact us using the details below.
An honest limit on deletion: because our transaction and match records are an append-only ledger kept for integrity, anti-fraud and legal purposes, we cannot delete those records even at your request. Where deletion is not possible for these reasons, we will explain that when you ask.
8 Security
We take reasonable measures to protect your data — for example, passwords are stored only in hashed form, and access to your account uses signed authentication tokens. No system is perfectly secure, and we cannot guarantee absolute security. Remember that, as noted above, cryptocurrency transactions are public on the blockchain by design.
9 Children
DESI CLASH is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it where we are able to.
10 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page.