Privacy Policy

01Who is responsible for your data

FragBet is run independently rather than by a registered company, so there is no corporate data controller to name and no separate privacy office. The operators who run the platform decide what is stored and who can see it.

Send any privacy request — a copy of your data, a correction, or deletion — through a support ticket. That is the only channel we operate, and it is the same one used for everything else.

02What we store

Creating an account, playing, trading, and talking to us each write different records:

Account and identity

Your Clerk user ID, username, avatar URL, VIP level, role, and account status. Sign-in credentials belong to Clerk and never reach us.

Provably fair records

Server seeds and their hashes, your client seeds, and nonces. Retired seeds are kept so past rounds stay verifiable.

Bets and settlements

Every wager: game, stake, multiplier, payout, outcome, the seed pair and nonce behind it, and its timestamp.

Wallet and ledger

Gold balance, the append-only transaction ledger, deposit and withdrawal requests, and player-to-player transfers in both directions.

Support tickets

Ticket rooms and every message in them, including trade coordination and any Standoff 2 details you choose to share with an operator.

Community chat

Public lobby messages with your username, avatar and VIP level attached, plus mentions and mutes. Messages are visible to all players.

Notifications

In-platform notifications generated for deposits, transfers, refunds, withdrawals and affiliate commission, and whether you have read them.

Referrals

Who referred you, who you referred, the attribution window, and commission accrued and paid.

Moderation records

Bans, chat suspensions, financial quarantine flags, and operator actions taken on your account, including which operator took them.

Our hosting and authentication providers keep their own technical logs, which include IP addresses, for security and abuse prevention. FragBet does not write IP addresses into its own database.

03What we never store

We hold none of the following, and no operator will ever ask you for them:

• Your password. Authentication is handled entirely by Clerk and we never receive it.
• Card numbers, bank details, or any payment instrument. Value moves as Standoff 2 items, so there is nothing of that kind to store.
• Government ID, passport scans, or proof of address. We do not run identity verification.
• Your Standoff 2 account credentials. Trades happen on the marketplace under your own control, never by handing us access.

Anyone asking for any of these while claiming to be FragBet staff is attempting to scam you. Report it and do not reply.

04Why we process it

• Running your account: authenticating a session, showing your balance, and keeping your wallet reachable only by you.
• Settling bets provably: deriving outcomes from your seed pair and retaining the records that let you verify them afterwards.
• Moving Gold: processing deposits, withdrawals and transfers, and coordinating the matching Standoff 2 trade with an operator.
• Keeping the platform solvent and honest: reconciling the ledger, enforcing exposure limits, and detecting multi-accounting, collusion, bots, and balance manipulation.
• Support and moderation: answering tickets and enforcing the chat rules.
• Paying referral commission: attributing a signup to a referrer and calculating what is owed.

We do not profile you for advertising, and we do not use your data to build a marketing audience or sell it to anyone for any purpose.

05Who else handles it, and where it lives

FragBet runs on third-party infrastructure. These providers process data on our behalf under their own terms, and using FragBet means your data reaches them:

Clerk

Authentication and account identity. Holds your credentials, email, and OAuth profile; we receive only a user ID, username and avatar URL.

Supabase

The database of record: profiles, balances, the ledger, bets, seeds, chat and tickets. Hosted in the EU (eu-west-1).

Vercel

Application hosting and content delivery. Handles requests and keeps short-lived operational logs.

Because these providers operate globally, your data may be processed outside your own country, including outside the EEA. We share data with no one else: no advertisers, no data brokers, no analytics vendors. We would disclose data to a competent authority if legally compelled, and we would tell you unless prohibited from doing so.

06Cookies and browser storage

We use no advertising cookies, no marketing pixels, and no cross-site tracking. What is set is functional:

• Session cookie (Clerk): strictly necessary. Without it you cannot stay signed in.
• Local storage: a cached copy of your profile and a signed-in hint so the interface does not flicker on load; interface preferences such as whether you have acknowledged the chat rules; coinflip games you have dismissed; and a referral code captured from a ?ref= link so the person who referred you is credited when you sign up.

Local storage lives in your browser and is never transmitted to us as a bundle. Clearing your site data removes all of it; you will simply be signed out and lose those preferences.

07How long we keep it

Account and profile

Kept while your account exists.

Bets, ledger and seed history

Kept indefinitely. The ledger is append-only by design and the seed history is what makes an old round verifiable. Deleting either would destroy the audit trail that protects both sides.

Support tickets

Kept while they may be needed to resolve or reopen a dispute about a trade.

Community chat

Kept for moderation history. Individual messages can be removed by an operator.

Moderation records

Kept after an account is closed, so a ban cannot be erased by deleting and recreating an account.

08Your rights

Depending on where you live you may have some or all of the following rights. We will honour them for anyone who asks, wherever you are:

• Access and portability: ask for a copy of what we hold on you. Much of it is already visible to you in your wallet, bet history, and the Provably Fair panel.
• Correction: ask us to fix anything inaccurate. Username and avatar are changed through your Clerk account settings.
• Deletion: ask us to close your account and delete your profile. Withdraw your balance first — a closed account cannot be traded out of.
• Objection and restriction: ask us to stop a particular use of your data, or to restrict processing while a dispute is open.
• Complaint: if you are in the EEA or UK you may complain to your national data protection authority. Note that this is a data protection regulator only; as set out in the Terms, FragBet has no gambling regulator.

The honest limit on deletion

We can delete your profile and detach your identity from public records. We cannot erase settled bets, ledger entries, or seed history: those are the integrity record of a financial system, other players verify rounds against them, and removing them would let a disputed balance be laundered by deleting an account. If you exercise deletion, expect your profile to go and those records to remain in a form no longer linked to a live account.

Deleting your FragBet account does not delete your Clerk account. Remove that separately through Clerk if you want it gone.

09Security

• All connections use TLS in transit, to the application and to the database.
• Row-level security is enforced at the database layer, so a query cannot read another player’s rows even if it reaches the database directly.
• Balance changes run through privileged server-side routines only. The browser cannot write a balance, and a value it displays is never authoritative.
• Unrevealed server seeds are held where the public interface cannot read them, and are released only when a seed pair is retired or a shared round has fully settled.
• Operator actions on accounts and balances are recorded against the operator who took them.

No system is perfectly secure. If you find a vulnerability, report it through a support ticket rather than exploiting it — see Terms clause 12.

10Children

FragBet is not for anyone under 18 and we do not knowingly hold data about a minor. If we learn that an account belongs to someone under 18 we close it and delete the profile. If you believe a child has an account here, tell us and we will act on it. Practical steps for protecting a shared device are on the Responsible Gaming page.

11Changes to this policy

We may update this policy. The version and date at the top always identify the one in force, and a change that materially affects how we use your data will be announced in-platform before it takes effect.