Data We Collect
- Account data: email, display name, year of birth, password hash, 2FA secret, session tokens.
- Steam data (if linked): Steam ID, public profile info, trade URL.
- Transaction data: deposit/withdrawal records, wager and payout history.
- Technical data: IP address, user-agent, browser timezone, cookie identifiers, rate-limit tokens.
How We Use It
- Operate and secure your account (fraud detection, 2FA, rate limits).
- Process deposits, wagers, and withdrawals.
- Comply with AML / KYC obligations where applicable.
- Communicate service updates and security alerts.
- Improve game balance, detect bugs, and monitor site health.
What We Do Not Do
We do not sell personal data. We do not use your data to train unrelated ML models. We do not share your data with advertisers.
Third Parties
We use the following processors to run the service:
- Cloudflare — hosting, CDN, DDoS protection.
- NOWPayments — crypto deposit processing.
- Steam (Valve) — login (OpenID) and trade infrastructure.
- Email delivery provider for transactional mail.
Cookies
We use a minimal set of first-party cookies: one session cookie for auth, one for the dev-gate, and one for the referral code if you arrived via a partner link. No advertising cookies.
Your Rights
You can request access, correction, or deletion of your personal data by emailing privacy@rustyskin.bet. We will respond within 30 days. Note that we may retain certain records where required by AML / tax law.
Data Retention
Account records are retained while the account is active and for up to five years after closure to comply with financial record-keeping laws. Security logs are rotated after 90 days.
Contact
Privacy questions: privacy@rustyskin.bet.