Privacy Policy

Your username, email address, and a hashed password. For each bet: its title, description, category, stake, odds, timestamps, and the result. For money movement: amounts, timestamps, and the Stripe references for deposits and payouts.

We do not store card numbers or bank details. Payment data is entered on Stripe's own pages and stays with Stripe. We only keep the identifiers Stripe returns to us.

Bets are public by design. Your username, the bet text, the stake, the odds, and the outcome are visible to anyone on the board. Your email address, balance, and transaction history are never public.

Files you upload to a dispute — images, PDFs, or documents up to 16 MB — are visible to the other party in that bet and to the administrators who review it. We keep them only as long as needed to resolve the dispute and defend the outcome.

We enforce HTTPS, protect forms against cross-site request forgery, and rate-limit sign-in and reset endpoints. Password reset codes are six digits, expire after 15 minutes, and allow three attempts. We email you only about your account, your bets, and their results.

We set a session cookie to keep you signed in and, if you choose it, a longer-lived one for 30 days. There are no advertising or third-party analytics cookies.

You can ask for a copy of your data, correct it, or delete your account once no bets are open. We keep settled bet and transaction records where the law requires it, and we will tell you if we are ever compelled to hand data to an authority.