Privacy Policy

Treble ("we", "us", "our") operates the fantasy contest platform at gotreble.xyz. We are the data controller responsible for your personal information collected through our website, mobile applications, and services ("Platform").

Contact us: support@gotreble.xyz

Account information: When you register, we collect your email address, username, and a hashed (encrypted) version of your password. If you sign in with X (Twitter), we receive your public profile information from that provider.

Wallet information: When you withdraw winnings, we collect your Solana wallet address. We do not store private keys.

Transaction data: We record pack purchases, card trades, contest entries, and withdrawal requests for account management and regulatory purposes.

Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps to operate and improve the Platform.

Communications: If you contact support, we retain your messages to resolve your request.

• Provide, operate, and maintain the Platform
• Process contest entries and distribute prizes
• Send transactional emails (verification, withdrawal confirmation, payout receipts)
• Respond to support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve and personalise the Platform experience

We do not sell your personal data to third parties. We do not use your data for advertising profiling.

We process your data under the following legal bases:

• Contract: Processing necessary to provide the services you've signed up for
• Legitimate interests: Fraud prevention, security, platform improvement
• Legal obligation: Compliance with applicable laws and regulations
• Consent: Where we ask for explicit consent (e.g. optional notifications)

We use strictly necessary cookies to maintain your session. We do not use advertising or tracking cookies. You can disable cookies in your browser, but core Platform functionality may be affected.

We share your data only in these circumstances:

• Service providers: Email delivery (Resend), database hosting (Railway/Vercel), all under data processing agreements
• Blockchain: When you withdraw funds, your wallet address and transaction amount are publicly recorded on the Solana blockchain
• Legal requirements: When required by court order, law enforcement, or applicable law

We retain your account data for as long as your account is active, plus 3 years to comply with financial record-keeping requirements. Support communications are retained for 2 years. You may request deletion of your account and associated data subject to legal retention obligations.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email us at support@gotreble.xyz. We will respond within 30 days.

We implement industry-standard security measures including:

• Bcrypt password hashing (minimum 12 rounds)
• HMAC-signed admin sessions with separate secrets
• Encrypted payment data with AES-256
• All data transmitted over HTTPS/TLS
• Unique per-order deposit addresses for payment isolation

No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication on connected accounts.

The Platform is not directed at children under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected data from a minor, contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Platform. Continued use after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions or requests: support@gotreble.xyz