Privacy Policy

1. The short version

We store what is needed to run a game and pay you, and nothing we do not need. We do not sell your data, and we do not run advertising trackers. Payments happen on a public blockchain, which is a fact about TON rather than a choice of ours, and it is explained below.

2. What we store

From Telegram sign-in: your Telegram numeric id, display name, username, profile photo and language. From Google sign-in: the account identifier Google gives us, your email address and your name. From email sign-in: your email address, and a temporary hash of the verification code.

From using the service: your member number, chosen display name, country, language and theme, your game history (opponents, results, stakes, timestamps), your balance and every transaction that changed it, deposit transaction hashes, and the TON addresses you withdraw to.

From your connection: your IP address, used to rate-limit sign-in attempts and to detect abuse. It is not used to build a profile of you.

3. What we never store

No passwords — we do not use them. No card numbers. No wallet seed phrase or private key: connecting a wallet gives us permission to request a transfer that you approve in your own wallet, and nothing more. No message content from your Telegram chats.

4. Why we store it

To run the game: to know whose turn it is, who won, and what your balance is. To pay you: a withdrawal needs an address and an amount. To keep the game honest: repeated sign-in failures, multi-accounting and collusion are detected from exactly this data. To answer you when you contact support.

5. Who else sees it

Other players see your display name, your member number, your country flag and your profile photo, at the table and on the league board. They never see your email address, your balance or your wallet address.

The TON blockchain is public and permanent. A deposit or a withdrawal is a public transaction: anyone can see the amount, the time and the addresses involved. We cannot change that, and it is worth understanding before you use an address you also use elsewhere.

Two service providers process data on our behalf: our email provider, which sends verification codes and notices, and Telegram, when you sign in with it or receive bot messages. We do not sell data, share it for advertising, or hand it to anyone else except where the law requires it.

6. How long we keep it

Account and financial records — games, deposits, withdrawals, fees — are kept for as long as the account exists and for a period afterwards, because they are the record of what happened to real money and both of us may need it.

Email verification codes are deleted as soon as they are used, and expire in ten minutes regardless. Sign-in rate-limit records are kept for a day.

7. What you can ask for

Write to support@bgammon.xyz from the address on your account, or message https://t.me/coingrami from the linked Telegram account, and you can ask for a copy of what we hold about you, a correction, or deletion of your account.

Deletion removes your account and personal details. It cannot remove blockchain transactions, which are not ours to delete, and we may keep the minimum financial record the law requires. Withdraw your balance before asking for deletion.

8. What is stored in your browser

Your session token, so you stay signed in; your language, theme and board preferences; and a saved single-player game. All of it is in your browser’s own storage, not in cookies sent to third parties, and clearing your browser data removes it. There are no advertising or analytics trackers.

9. Children

Staked play is for adults only. We do not knowingly hold data from a child. If you believe a child has created an account, tell us and we will close it.

10. Changes

If this policy changes in a way that affects what we collect or who sees it, we will announce it through the service before it takes effect. The date at the top shows the last revision.