Privacy Policy

Krypto Jackpot Ltd. ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, disclose, and safeguard your information when you access or use the KRYPTO JACKPOT platform, including our website, applications, smart contracts, and related services (collectively, the "Platform").

This Policy is designed to comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection legislation.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices, please discontinue use of the Platform immediately.

The data controller responsible for your personal information is:

We collect and process the following categories of personal information:

3.1 Blockchain Data

• Ethereum wallet addresses
• Transaction hashes and timestamps
• Token transfer records
• Smart contract interaction data

Note: Blockchain data is publicly accessible by design of the Ethereum network and cannot be deleted or modified.

3.2 Identity Verification Data (where required)

• Full legal name
• Date of birth
• Government-issued identification documents
• Proof of address documentation
• Facial photographs for biometric verification

3.3 Technical and Device Data

• IP address and geolocation data
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs and page views
• Session duration and interaction patterns

3.4 Communication Data

• Email correspondence
• Support ticket contents
• Survey responses
• Marketing preferences

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you, including facilitating Ticket purchases and prize distribution.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML requirements, tax reporting, and regulatory mandates.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, security, analytics, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, which may be withdrawn at any time, particularly for marketing communications.

We use your personal information for the following purposes:

• Providing and maintaining the Platform's functionality
• Processing Ticket purchases and prize distributions
• Verifying user identity and eligibility
• Complying with legal and regulatory requirements
• Detecting, preventing, and investigating fraud and security incidents
• Communicating with you regarding your account and transactions
• Analyzing usage patterns to improve the Platform
• Sending marketing communications (with your consent)
• Responding to inquiries and providing customer support
• Enforcing our Terms of Service

We may share your personal information with the following categories of recipients:

6.1 Service Providers

Third-party vendors who perform services on our behalf, including cloud hosting providers, identity verification services, analytics providers, and customer support platforms. These providers are contractually bound to protect your information.

6.2 Legal and Regulatory Authorities

Government agencies, regulators, or law enforcement when required by law, court order, or to protect our legal rights.

6.3 Professional Advisors

Lawyers, auditors, and consultants engaged to provide professional services to the Company.

6.4 Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.

6.5 Blockchain Network

Transaction data is recorded on the public Ethereum blockchain and is accessible to all network participants.

Your personal information may be transferred to and processed in countries outside your country of residence, including the United Arab Emirates and other jurisdictions where our service providers operate.

When transferring data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Binding Corporate Rules where applicable
• Certification mechanisms and codes of conduct

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Transaction Records: Minimum 7 years for tax and regulatory compliance
• KYC Documentation: 5 years following the termination of the business relationship
• Marketing Preferences: Until consent is withdrawn
• Technical Logs: 12 months for security purposes
• Blockchain Data: Permanent (immutable by design)

Subject to applicable law and certain exemptions, you may have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Erasure: Request deletion of your personal information in certain circumstances.
• Right to Restriction: Request limitation of processing of your personal information.
• Right to Data Portability: Receive your personal information in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise these rights, please contact our Data Protection Officer at privacy@kryptojackpot.com. We will respond within the timeframes required by applicable law (typically 30 days).

Important: Certain data recorded on the blockchain is immutable and cannot be modified or deleted due to the fundamental architecture of blockchain technology.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Multi-factor authentication for administrative access
• Regular security assessments and penetration testing
• Smart contract audits by CertiK and other reputable firms
• Access controls based on the principle of least privilege
• Continuous monitoring and logging of system activities
• Incident response procedures and breach notification protocols

While we implement robust security measures, no system is completely secure. We cannot guarantee the absolute security of your information.

We use cookies and similar tracking technologies to collect information about your browsing activities. Categories of cookies we use include:

• Essential Cookies: Required for Platform functionality and security.
• Analytics Cookies: Help us understand how visitors interact with the Platform.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

The Platform is not intended for individuals under the age of eighteen (18) or the age of majority in their jurisdiction. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete such information promptly.

We may update this Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via the Platform or email notification. The "Last updated" date indicates when the Policy was last revised.

Your continued use of the Platform following the posting of changes constitutes acceptance of the updated Policy.

If you have questions, concerns, or complaints regarding this Policy or our data practices, please contact us:

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.