VaultLeague

1. Information We Collect

Currently, as a simulated platform, we collect minimal information:

• Account Information: Name, email address
• Usage Data: Leagues created/joined, simulated performance
• Technical Data: IP address, browser type, device information

When real-money features launch, we will additionally collect:

• KYC Information: Government ID, proof of address, date of birth
• Financial Data: Payment methods, transaction history
• Location Data: Precise geographic location for compliance

2. How We Use Your Information

• To provide and maintain the platform
• To communicate about your account and leagues
• To comply with legal obligations (KYC/AML when applicable)
• To improve user experience and develop new features
• To prevent fraud and ensure platform security

3. Data Sharing & Third Parties

We do not sell your personal information. We may share data with:

• KYC Providers: Onfido, Jumio, or similar (when real-money enabled)
• Custodians: Licensed crypto custodians (when applicable)
• Compliance Partners: AML monitoring services like Chainalysis
• Legal Authorities: When required by law
• Service Providers: Hosting, analytics, customer support tools

4. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Regular security audits and penetration testing
• Limited employee access to personal data
• Multi-factor authentication for sensitive operations

However, no system is completely secure. We cannot guarantee absolute security.

5. Your Rights (GDPR/CCPA)

Depending on your location, you may have rights to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-Out: Decline marketing communications

Note: Some data must be retained for legal compliance (e.g., KYC/AML records for 5-7 years).

6. Data Retention

• Account data: Retained while account is active
• KYC records: 5-7 years after account closure (legal requirement)
• Transaction history: 7 years (financial regulations)
• Usage logs: 90 days typically, longer if needed for investigations

7. Cookies & Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Analytics to understand platform usage
• Security and fraud prevention

You can control cookies through your browser settings.

8. Children's Privacy

This platform is NOT intended for users under 18. We do not knowingly collect data from minors. If we discover underage users, accounts will be immediately terminated and data deleted.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers (e.g., Standard Contractual Clauses).

10. Changes to Privacy Policy

We may update this policy periodically. Significant changes (especially when enabling real-money features) will be notified via email and require acceptance.