Política de privacidad

1. Introduction

This Privacy Policy explains how Cryptoback ("we", "us", "the Service") collects, uses, shares, and protects personal data when you visit our websites, create an account, or use any of our services. By using the Service you acknowledge the practices described here.

2. Data controller

The data controller for personal data processed through the Service is Cryptoback. Contact details for privacy matters are provided at the end of this policy.

3. Information we collect

Account data: email address, password credentials (managed by our authentication provider), language preference, and optional profile details.

Financial data: your cashback balance, ledger and accrual history (including which cashback mechanism each entry was calculated under), withdrawal requests, and the wallet addresses you provide for USDT payouts.

Technical data: IP address, device and browser information, and usage logs collected when you interact with the Service.

4. Play data from our affiliate partner

Cashback, tier progress and referral qualification are calculated from player-level activity data supplied by our upstream affiliate aggregator, Bankrolls Tools (BRT). Depending on the cashback mechanism in force and on what each partner casino reports, this feed may tell us, per partner casino and per day:

• your deposits and withdrawals at that casino;
• amounts staked or wagered (turnover or wager volume), and the product or game categories involved;
• bonus and free-bet activity;
• your net losses or net wins;
• the net gaming revenue your play generates for the casino and the commission payable to us; and
• lifecycle milestones such as registration, first deposit, and qualification.

We use this data to calculate and pay cashback, tiers, referral qualification and related rewards; to operate, evaluate and improve the reward programme, including assessing how different cashback mechanics, rates and tier structures perform and allocating accounts to programme variants for that purpose; to reconcile the commission we are owed; and to detect and prevent abuse.

If we change how cashback is calculated, the categories of activity data listed above continue to apply to the new calculation. If a change would require us to process a materially new category of personal data, we will update this policy before doing so and, where the law requires it, notify you or obtain your consent.

5. Cookies and attribution tracking

We use strictly necessary cookies to keep you signed in and to remember preferences such as language. When you click out to a partner casino, we attach tracking parameters and record the click so that the casino and our affiliate partner can attribute your play to your account — this attribution is what makes cashback possible. We may also use limited analytics cookies to understand how the Service is used; where required, we will ask for your consent.

6. Identity verification (KYC)

For withdrawals above certain thresholds, or where required by law or our risk policies, we verify your identity through our verification partner Sumsub. Sumsub collects identity documents and biometric data on our behalf and shares the verification result with us. Verification data is processed under Sumsub's own privacy notice in addition to this policy.

7. How we use your information

We use personal data to operate your account, calculate and pay cashback and rewards, process withdrawals, run the referral program, design, operate and evaluate the reward programme (including analysing how different cashback mechanics, rates and tier structures perform and allocating accounts to programme variants for testing), provide support, secure the Service, prevent fraud and abuse, comply with legal obligations, and — with your consent where required — send you product and promotional communications.

8. Sharing your information

We share data with service providers who help us run the Service: authentication, KYC verification, email delivery, hosting and infrastructure, and analytics. We share attribution identifiers with our affiliate partner and partner casinos to track qualification and play. We do not sell your personal data. We may disclose data where required by law, or to protect our rights and users.

9. International transfers

Our providers may process data outside your country of residence. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

10. Data retention

We keep account and ledger data for as long as your account exists and afterwards for the periods required by tax, anti-money-laundering, and other applicable laws. Verification records are retained per regulatory requirements. Technical logs are kept for shorter, security-driven periods.

11. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights by contacting us; we may need to verify your identity first. You also have the right to complain to your local data-protection authority.

12. Age limits

The Service is strictly for adults aged 18 or over (or the higher age of majority in your jurisdiction). We do not knowingly collect data from minors; if we learn that a minor has created an account, we will close it and delete the associated data.

13. Changes and contact

We may update this policy from time to time; material changes will be announced on the Service. Questions and privacy requests can be sent to support@cryptoback.club.