Privacy Policy

Chris' Casino respects your privacy. This Policy explains what we collect, why, and your rights. Information we collect. • Account: email address, display name, and a bcrypt hash of your password. We never store your password in plaintext. • Identity: age confirmation (21+) and, in future, government-ID verification through a third-party provider (Onfido or Veriff) when you make your first purchase. • Payments: Stripe processes all payment-card data. We never see your card number. We retain transaction metadata (amount, timestamp, package, success/failure status) for tax, AML, and chargeback purposes. • Game activity: every round you play is logged (game type, bet, payout, timestamp) for fairness audit and fraud detection. • Support: AI customer-support chat transcripts are stored for quality review. Human support agents may review them. • Geo / network: your IP address at signup and at every purchase, used for state-by-state geo-blocking and OFAC compliance. How we use it. To operate and improve the Service, prevent fraud, comply with law (including AML reporting if a single user exceeds $10,000 in annual spend), and provide support. We do NOT sell your personal data. Third parties. • Stripe (payment processing) — see stripe.com/privacy. • MongoDB Atlas (encrypted hosted database). • Anthropic (AI support chat) — chat content is processed under their terms. • Sentry / PostHog / Datadog (operational logs) — PII is scrubbed before logging. Retention. Account data is retained while your account is active and for up to seven (7) years after closure, to meet IRS, CCPA, and payment-processor record-keeping requirements. Your rights. California residents (CCPA/CPRA) and EU/UK visitors (GDPR) may request export, correction, or deletion of personal data subject to applicable record-keeping obligations. Contact us through in-app support. Children. The Service is strictly for ages 21+. We do not knowingly collect data from anyone under 13 and accounts identified as belonging to a minor will be terminated and any associated data deleted. Changes. We will notify users of material changes to this Policy at least 14 days before they take effect.