Privacy Policy

Fun4Cash is a points-based gaming platform. You buy points, use them to play one of sixteen games, and eligible winnings can be converted back to cash and withdrawn. Outcomes depend on each game's mechanics, on your choices where a game offers any, and on chance; there is no guaranteed return.

That is what creates most of the data described below. Playing produces a record of every round; buying points and withdrawing winnings produces a record of every movement of money. Both are kept because they are how balances are proven, and because financial records have to be retained by law.

The rules of play are in the Terms of Use.

The controller of your personal data is legal entity, of registered address. Data protection enquiries go to data protection contact.

• Account details — your username, email address, selected country, name and phone number if you give one, and your password, which is stored only as a hash we cannot reverse. The selected country is not precise location tracking.
• Financial activity — deposits, withdrawals, point purchases, transfers and every game round you play, including stakes and payouts.
• Payout details — the wallet address and network you ask us to send withdrawals to.
• Technical data — your IP address, and the browser, operating system and device type we detect on sign-in.
• Support messages — what you write to us, and our replies.

We do not collect special category data, and you should not send it to us.

• To run your account, settle rounds and move money — without this there is no service to provide.
• To detect fraud, collusion and money laundering, and to meet the legal obligations that apply to us.
• To answer you when you contact support.
• To keep the platform secure, including recognising unusual sign-ins.
• To understand where players sign up from and apply any country eligibility rules that become legally necessary.
• To improve the product, using aggregated figures rather than individual behaviour wherever that will do.

We do not sell your personal data. We share it only where it is needed to run the service or where we are required to:

• Public blockchain networks, where wallet addresses, token amounts and transaction hashes are visible by design. We use those public records to verify deposits and withdrawals.
• Hosting, email and error-monitoring providers acting on our instructions.
• Regulators, law enforcement and financial-crime authorities where the law requires it.
• Agents see only the username or email you give them when a transfer is made, and the amount — never your balance, your history or your contact details.

Account and transaction records are kept for as long as your account is open and for a period afterwards, because anti-money-laundering law requires financial records to be retained — see the Anti-Money Laundering Policy. The exact period is retention period, set by the law of jurisdiction.

This means closing your account does not erase your transaction history, and a deletion request cannot override a retention duty.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a particular use. You can also withdraw consent where we relied on it.

Write to data protection contact and we will respond within the period the law allows. If you are not satisfied, you can complain to the supervisory authority in jurisdiction.

Passwords are hashed, two-factor secrets and recovery codes are encrypted at rest, and your session token is held in a cookie your browser will not expose to scripts. Balances are only ever changed through a single ledger that records every movement, so a change without a record is not possible.

No system is perfectly secure. Turn on two-factor authentication, and use a password you use nowhere else.

What we store in your browser and why is set out in the Cookie Policy.

If we change this policy materially we will say so on the platform. The date at the top tells you which version you are reading.