1. What we collect
HotWin is a no-KYC crypto casino. We collect the minimum data required to run your account and the service:
- Email address (used to log in)
- Password — stored as a one-way bcrypt hash, never in plain text
- Optional username (your public display name)
- Telegram ID, if you choose to link your Telegram account
- Wallet addresses you deposit from / withdraw to (recorded on the public blockchain anyway)
- Game history, bet records, and balance changes — needed for provably-fair verification and for your own bet history view
- Technical data: IP address at signup (for fraud prevention), device type, and basic activity timestamps
2. What we don't collect
- No KYC documents. We do not ask for ID, passport, proof of address, or selfies.
- No real-name verification.
- No credit-card or bank account details.
- No tracking pixels or third-party advertising cookies.
3. How we use your data
- Authenticate you and keep your session alive.
- Process deposits and withdrawals, and credit / debit your in-game balance.
- Run the games (provably-fair seeds, bet logging, payout calculation).
- Send you in-app notifications about your account, deposits, withdrawals, and tickets.
- Detect and prevent fraud, money laundering, and account abuse.
- Respond to support tickets and live-chat messages.
4. Sharing
We do not sell your data to anyone. We share it only with:
- The blockchain — when you deposit or withdraw, your wallet address and transaction are recorded on a public ledger by design.
- Hosting and email providers we use to run the site (under standard data-processing contracts).
- Law enforcement, when we're served a valid legal order in a jurisdiction we operate in.
5. Cookies
We use a small number of first-party cookies — see our Cookie Policy for the full list. There are no third-party advertising or tracking cookies on the site.
6. Your rights
You can at any time:
- View your account data on the Profile page.
- Update your username, email, or password.
- Request a copy of all data we hold about you by opening a ticket on the Support page.
- Request account deletion. We'll close the account and delete personal data within 30 days; we may retain transaction records for as long as required by law (typically 5 years).
7. Security
All traffic to HotWin is served over TLS. Passwords are hashed with bcrypt before being stored. Database access is restricted to operations staff on need-to-know basis. We review our security posture regularly.
8. Children
HotWin is for adults 18+ only. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please contact support so we can remove the account.
9. Changes
We may update this policy as the service evolves. Material changes will be announced via in-app notification. The “Last updated” date above always reflects the current revision.
10. Contact
Privacy questions? Open a ticket on the Support page.