DECEPTA — PRIVACY POLICY

This Privacy Policy explains how Decepta ("we," "us," "our," "the Platform") collects, uses, stores, and protects information when you use our website, mobile applications, and related services (collectively, the "Service").

By using Decepta, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2.1 Information you provide directly

• Account information: username, email address, avatar
• Authentication data via third-party providers (Google OAuth, wallet connection providers)
• Wallet addresses (internal embedded wallet and/or externally connected wallet)
• Communications with us (support requests, feedback)

2.2 Information collected automatically

• Device and usage data (device type, operating system, app version, IP address)
• Gameplay data (match history, round outcomes, riddle responses, timestamps)
• Transaction data (stakes, deposits, withdrawals, in-app balances — see 2.3)

2.3 Financial and wallet data

Because Decepta involves staking and onchain settlement, we collect and process:

• Wallet balances and transaction history within the Platform
• Onchain transaction identifiers (publicly visible on the relevant blockchain by nature of onchain settlement)
• Deposit and withdrawal records

We do not store private keys for externally connected wallets. Embedded/internal wallets are provisioned through our wallet infrastructure provider, subject to that provider's own security practices.

We use collected information to:

• Operate, maintain, and improve the Service
• Process stakes, settlements, deposits, and withdrawals
• Verify account eligibility (including age verification, see Section 7)
• Detect and prevent fraud, collusion, bot activity, and other abuse
• Communicate with you about your account, matches, and platform updates
• Comply with legal obligations

We do not sell personal information. We may share information with:

• Service providers — authentication providers, wallet infrastructure providers, cloud hosting, analytics providers — solely to operate the Service
• Legal compliance — where required by law, regulation, legal process, or governmental request
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections
• With your consent — for any other purpose disclosed at the time of collection

Note: certain transaction data is inherently public by virtue of being recorded onchain, independent of our own data-sharing practices.

We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at playdecepta@gmail.com.

Decepta is intended for users 18 years of age or older. The Service involves real-money staking and onchain financial transactions, and is not intended for use by minors. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has created an account, we will take steps to suspend the account and delete associated data.

We implement technical and organizational measures designed to protect your information, including server-authoritative architecture for gameplay and financial logic. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or from the Service.

Decepta operates internationally. By using the Service, you understand your information may be transferred to and processed in countries other than your own, which may have different data protection laws.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email prior to taking effect.

Questions about this Privacy Policy can be directed to playdecepta@gmail.com.